Once #399 is implemented, unauthorized users will not have access to private collections anymore. There is however still one very public API: the library.xml of staging area.
This is very strongly related to the fact that ATM we have only one Kiwix-serve to expose the whole staging area (to be solved in kiwix/operations#664).
We will probably have to move kiwix/operations#664 and this issue forward at the same time, this is more a placeholder issue at this stage to not forget about this topic.
Once #399 is implemented, unauthorized users will not have access to private collections anymore. There is however still one very public API: the library.xml of staging area.
This is very strongly related to the fact that ATM we have only one Kiwix-serve to expose the whole staging area (to be solved in kiwix/operations#664).
We will probably have to move kiwix/operations#664 and this issue forward at the same time, this is more a placeholder issue at this stage to not forget about this topic.