# 0.38.0 - Anonymous access for published queries

> Orbital 0.38.0 - Per-query opt-out from authentication for published HTTP query endpoints

Source: https://orbitalhq.com/changelog/2026-05-08-release-announcement-0.38.0
Date: 2026-05-08
Version: 0.38.0

## New Features

### Anonymous access for published queries

_Available since 0.38.0_

Queries [published as HTTP endpoints](/docs/querying/queries-as-endpoints) can now opt out of authentication on a per-query basis using the new `@com.orbitalhq.authentication.AllowAnonymous` annotation.

When Orbital is deployed with an authentication provider configured, all published query endpoints require a valid token by default. `@AllowAnonymous` relaxes that requirement for a single query — useful for health checks, public catalogues, or any endpoint intended to be reachable without a token. Other queries in the same workspace are unaffected.

```taxi
import taxi.http.HttpOperation
import com.orbitalhq.authentication.AllowAnonymous

@HttpOperation(url = '/api/q/healthcheck', method = 'GET')
@AllowAnonymous
query Healthcheck {
  find { status: String = "ok" }
}
```

The annotation only affects the authentication check. Data policies and authorization rules still run.

See the [docs on allowing anonymous access](/docs/querying/queries-as-endpoints#allowing-anonymous-access) for more detail.