@psychobunny Custom header is a way, but not good enough, in fact I am writing a plugin which act somewhat like nodebb-plugin-widgets-essential, that is to add one of our custom widget.
Is it possible to Turn Off Public GET API
Is there a way to turn off the GET API without a token?
Who do you want to restrict it from?
I would like to block it from everyone. I don't want scrappers to have it be that easy i want them to have a bit of a challenge. ideally this would work on a token basis as the write api does. if i can't have that i would like to just be turned off
Unfortunately the "GET API" as you call it is integral to the functionality of NodeBB on the client-side. During the normal usage of NodeBB, it is constantly using the
/apito load new pages, etc. It's not something that can be turned off, but it might be possible to restrict it to only accessible to users with a certain cookie. This doesn't currently exist, though.
You can open an issue on Github if you'd like this looked into further.