Url API /rest/V1/products/:sku not require authentication authtoken

[jruzafa]

Access to the url api /rest/V1/products/:sku does not require authentication authtoken, attached screenshot:

[choukalos]

Hi @jruzafa You can call the product API with out an authorization token and essentially see the same data a customer can see (basically everything but inventory). If you call with an admin token or system token you'll get inventory status. This is as designed to support AJAX / Angular JS type of solutions.