From f2b90bbcdb5347bfb68ee0e3343358e2a8e466dc Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Mon, 2 Nov 2026 21:34:12 +0100
Subject: api: allow auth delegation

---
 docs/openapi.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'docs/openapi.yaml')

diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 78912fa..5460a9c 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -7,7 +7,8 @@ info:
     as JSON by path, that syncs over Mycelium, libp2p or Tor.
 
     Every endpoint requires HTTP basic authentication (users from `--htpasswd`,
-    Argon2 hashes), except `/health`, `/ready`, the Swagger UI (`/swagger-ui`) and
+    Argon2 hashes), or a user named by a trusted reverse proxy in front
+    (`--user-header`), except `/health`, `/ready`, the Swagger UI (`/swagger-ui`) and
     this description (`/openapi.yaml`).
     `/debug/*` exists only with `--debug-api`.
 
-- 
cgit v1.3.1