Postgrest: Disable OpenAPI interface

[avvensis]

Is't possible to disable OpenAPI in PostgREST configuration file?

[avvensis]

Alternatively, Nginx could do it, but i don't know how to describe Location to disable root access.

[ruslantalpa]

maybe like this (didn't try)

location ^~ /[a-z]+ {
  ....
}

[giangstrider]

Hey guys, I'm newcomer.
And this issues very urgent for our product now.
it's expose everything in root path.
So anyway to disable OpenAPI until now?
Many thanks for support!

[ruslantalpa]

@giangstrider you control access to / through nginx that you put in front of postgrest

[begriffs]

@giangstrider also remember that even if openapi shows the endpoints, you can control people's access to each of them using postgresql role permissions.

[begriffs]

A slight correction to what I said. If you remove access for a given role to read a table/function/etc then that object will not appear in OpenAPI output.