Orbital
All changes

0.38.0 - Anonymous access for published queries

Orbital 0.38.0 - Per-query opt-out from authentication for published HTTP query endpoints

NextDue to be released in v0.38.0

New Features

Anonymous access for published queries

Available since 0.38.0

Queries published as HTTP endpoints can now opt out of authentication on a per-query basis using the new @com.orbitalhq.authentication.AllowAnonymous annotation.

When Orbital is deployed with an authentication provider configured, all published query endpoints require a valid token by default. @AllowAnonymous relaxes that requirement for a single query — useful for health checks, public catalogues, or any endpoint intended to be reachable without a token. Other queries in the same workspace are unaffected.

import taxi.http.HttpOperationimport com.orbitalhq.authentication.AllowAnonymous
@HttpOperation(url = '/api/q/healthcheck', method = 'GET')@AllowAnonymousquery Healthcheck {  find { status: String = "ok" }}

The annotation only affects the authentication check. Data policies and authorization rules still run.

See the docs on allowing anonymous access for more detail.