diff --git a/general-information.md b/general-information.md index 7607cf79..cb751205 100644 --- a/general-information.md +++ b/general-information.md @@ -146,6 +146,14 @@ Agencies that wish to use Geography-Driven Events do so by requiring a new `even During the Beta period for this feature, location and telemtry data remain required fields. This allows Aggencies to test Geography-Driven Events, measuring its accuracy and efficacy against regulatory systems based on precise location data. After the beta period, if Geography-Driven Events is deemed by OMF to be accurate and effective, the specification will evolve to allow cities to use Geography-Driven Events in lieu of location or telemtry data. +[Top][toc] + +## Optional Authentication + +Authorization of the Policy and Geography APIs is no longer required and will be deprecated in next major release with these endpoints becoming optionally private instead of optionally public. An agency may optionally decide to make both the Policy and Geography endpoints unauthenticated and public. This allows transparency for the public to see how the city is regulating, holds the city accountable for their policy decisions, and reduces the technical burden on providers to use these endpoints. A side benefit is that this allows third parties to ingest this information into their applications and services for public benefit. + +Note if implementing the beta features [Geography Driven Events](/general-information.md#geography-driven-events), both Policy and Geography must be public. + [Top][toc] ## Propulsion Types diff --git a/geography/README.md b/geography/README.md index 495a1313..54fc0145 100644 --- a/geography/README.md +++ b/geography/README.md @@ -81,9 +81,7 @@ See the [Responses][responses] and [Error Messages][error-messages] sections. ### Authorization -When making requests, the Geography API expects `provider_id` to include an `access_token` in the `Authorization` header, in the form `Authorization: Bearer `. The token issuance, expiration and revocation policies are at the discretion of the Agency. - -Optionally, an Agency may decide to make these endpoints unauthenticated and public, which could be done in conjunction with the [/policy](/policy) endpoints. +Authorization is not required. An agency may decide to make this endpoint unauthenticated and public. See [Optional Authentication](/general-information.md#optional-authentication) for details. [Top][toc] diff --git a/policy/README.md b/policy/README.md index c4dd1ade..f5a98332 100644 --- a/policy/README.md +++ b/policy/README.md @@ -90,6 +90,10 @@ The response to a client request must include a valid HTTP status code defined i See the [Responses section][responses] for information on valid MDS response codes and the [Error Messages section][error-messages] for information on formatting error messages. +### Authorization + +Authorization is not required. An agency may decide to make this endpoint unauthenticated and public. See [Optional Authentication](/general-information.md#optional-authentication) for details. + #### Policies Endpoint: `/policies/{id}`