🔧(backend) add Django setting to disable external API endpoints

Introduce ENABLE_EXTERNAL_API setting (defaults to False) to allow
administrators to disable external API endpoints, preventing unintended
exposure for self-hosted instances where such endpoints aren't
needed or desired.
This commit is contained in:
lebaudantoine
2025-10-06 19:23:48 +02:00
committed by aleb_the_flash
parent 69a9a07d21
commit 4c6741c905
3 changed files with 17 additions and 8 deletions

View File

@@ -67,6 +67,7 @@ FRONTEND_USE_FRENCH_GOV_FOOTER=False
FRONTEND_USE_PROCONNECT_BUTTON=False
# External Applications
EXTERNAL_API_ENABLED=True
APPLICATION_JWT_AUDIENCE=http://localhost:8071/external-api/v1.0/
APPLICATION_JWT_SECRET_KEY=devKey
APPLICATION_BASE_URL=http://localhost:3000