Api/users/search endpoint returning all users

[Kristoffer_Bergman]

Hello!

I am currently trying out your WEB API, and I noticed that the api/users/search endpoint seems to return users outside of your organization. Is this intentional?

With the information being returned, it’s not really a security risk, but it’s the first time I have seen a “public” API endpoint like this so I was just curious.

[Colin]

Hey there.

A couple things!

• https://api.github.com/users allows unauthenticated access
• We will stop allowing unauthenticated access this month
• Eventually, we’d like to restrict endpoints like this to the organization. We have some work to do around onboarding new team members before we can make that happen.

[Kristoffer_Bergman]

Hello Colin.

Got it! Thank you for the reply.