Skip to content

[Content]: Clarify that Track API is entirely unauthenticated #5683

Open
@FirstWhack

Description

@FirstWhack

What article on segment.com/docs is affected?

https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/#regional-configuration

What part(s) of the article would you like to see updated?

The article states:

Authenticate to the Tracking API by sending your project’s Write Key along with a request. Authentication uses HTTP Basic Auth, which involves a username:password that is base64 encoded and prepended with the string Basic.

This is not really true as the API always responds 200 OK even if no auth header is provided at all. We are building a new Source and this information was confusing to us because it implies we can test the write key/authentication when the user is configuring the integration on our side.

As a side note/feature request, an API which returns 401 when provided a bad write key (or no auth) would be valuable so that our users can "test integration" during configuration.

Additional information

Screenshot 2023-11-15 at 4 07 20 PM

Metadata

Metadata

Assignees

No one assigned

    Labels

    contentWhen the bug is about content that needs to get fixedstaletriage

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions