Closed
Description
Currently, anyone can access public data with a 'public' key, i.e.
The guest user API key is 9999999999999999999999999999999999999999, and this can be used by anyone to access the metadata tables as well as to any traits records with access_level = 4, i.e.:
https://betydb.org/api/v1/treatments?key=9999999999999999999999999999999999999999
It is difficult to remember this key, so one option would be to change the key to something like 'publickey', but @robkooper suggested the following feature request:
Change the API so that the key parameter is optional; if no key is provided, the request is handled as the guest user.