From 15005c60101a5f7c68e699511f610eb38b6d70e8 Mon Sep 17 00:00:00 2001 From: Gabriel Cossette Date: Mon, 22 Aug 2022 16:39:02 -0400 Subject: [PATCH] Add how to disable public Converse API endpoint --- .../custom-channels/converse-api.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/messaging-channels/custom-channels/converse-api.md b/docs/messaging-channels/custom-channels/converse-api.md index 8bcc193..95d672a 100644 --- a/docs/messaging-channels/custom-channels/converse-api.md +++ b/docs/messaging-channels/custom-channels/converse-api.md @@ -196,6 +196,17 @@ Below is a sample of the response given by our support bot at Botpress when it's } } ``` +## Disabling public Converse API endpoint + +For security and performance, you can disable the public Converse API endpoint, so that interactions without a token are not possible. + +To do so and keep only the debug API endpoint enabled, go in the Code Editor and add this configuration to the file `bot.config.json` + +```json + "converse": { + "enableUnsecuredEndpoint": false + } +``` ## Caveats