The templates API endpoint should require authentication and authorization

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Summary

The api/v4/templates/:name endpoint should require authentication

Steps to reproduce

1. Visit /api/v4/templates/dockerfiles while not logged in

Example Project

https://gitlab.com/api/v4/templates/dockerfiles

What is the current bug behavior?

The endpoint can be accessed by anyone

What is the expected correct behavior?

It requires the user to be logged in

Output of checks

This bug happens on GitLab.com 17.7.0-pre 2d28443d

Possible fixes