app

whether the app behind a share secret admits guests

Changed on

Unauthenticated: what a signed-out visitor reads to learn that signing in would let them in. 404 unless the app's execution mode is guest AND the workspace has guest_access_enabled AND the instance has not set the guest_access_disabled global setting, and never on a deployment where guests are unavailable (the shared cloud), so it says nothing about apps that are not open to guests. Discloses only the app path, to a caller already holding the share secret.

get/w/{workspace}/apps_u/guest_entry/{path}

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/w/{workspace}/apps_u/guest_entry/{path}
  • Auth: one of:
    • HTTP bearer
    • API key in cookie token

Path parameters

workspacestring required
pathstring required

Response

the app is open to guests

workspace_idstring required
app_pathstring required

Changes