From d66e790df18ddcaa984984c2cb6a25c97c21bdee Mon Sep 17 00:00:00 2001 From: Tom Kralidis Date: Wed, 3 Jan 2024 10:48:48 -0500 Subject: [PATCH] Update admin-api.rst --- docs/source/admin-api.rst | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/source/admin-api.rst b/docs/source/admin-api.rst index 920e88c..9a4efca 100644 --- a/docs/source/admin-api.rst +++ b/docs/source/admin-api.rst @@ -14,6 +14,15 @@ The API is enabled with the following server configuration: server: admin: true # boolean on whether to enable Admin API. +Access control +-------------- + +It should be made clear that authentication and authorization is beyond the responsibility of pygeoapi. This means that +if a pygeoapi user enables the Admin API, they must provide access control explicity via another service. + +pygeoapi hot reloading in gunicorn +---------------------------------- + For pygeoapi to hot reload the configuration as changes are made, the pygeoapi configuration file must be included as demonstrated for a gunicorn deployment of pygeoapi via flask: