diff --git a/CHANGELOG.md b/CHANGELOG.md index e41a1462..c870900b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] +### Changed + +- Added note on the use of the default `*` use in route authentication dependecies. [#325](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/325) + ## [v3.2.2] - 2024-12-15 ### Changed diff --git a/examples/auth/README.md b/examples/auth/README.md index bd74c439..0bd068e2 100644 --- a/examples/auth/README.md +++ b/examples/auth/README.md @@ -9,6 +9,11 @@ Authentication is an optional feature that can be enabled through [Route Depende Route dependencies for endpoints can enable through the `STAC_FASTAPI_ROUTE_DEPENDENCIES` environment variable as a path to a JSON file or a JSON string. +***NOTE: default dependencies*** +`*` can be used to match all paths. However, if used this must be the only Authentication dependency (multiple can be used through a +single merged dependency). Similarly, `*` can be used to match all methods with a route but must also be the only Authentication +dependency for that route. + #### Route Dependency A Route Dependency must include `routes`, a list of at least one [Route](#routes), and `dependencies` a