When running the synchronization endpoint /api/sync, the endpoint can be triggered anonymously. Add a key which will be required to trigger this specific endpoint, so that it cannot be triggered anonymously. The key should be configurable via configuration (also update Secrets reference in README). The key should be provided as a header X-Sync-Trigger-Key.
When running the synchronization endpoint
/api/sync, the endpoint can be triggered anonymously. Add a key which will be required to trigger this specific endpoint, so that it cannot be triggered anonymously. The key should be configurable via configuration (also update Secrets reference in README). The key should be provided as a headerX-Sync-Trigger-Key.