Restrict meilisearch to authenticated users

[mbellogularte]

Currently, anyone who is in possession of a public key can query my database. How can I restrict this to authenticated users? Is there an easy way to link the "Authenticated" role i.e.?

[bidoubiwa]

Hey @mbellogularte, when you say quering your database, do you mean a query on a strapi route, for example:

POST https://mystrapi.com/meilisearch/content-types

or do you mean on Meilisearch itself:

POST https://my-meili-instance/indexes/restaurant/documents ?

[Kazdan1994]

Hey. No actually you can create a new route in strapi to query your meilisearch database and send the result

[bidoubiwa]

Currently, anyone who is in possession of a public key can query my database

So you mean a Meilisearch public key? The public key gives read rights on the /search route of every index. You can create keys in Meilisearch with specific rights that can for example limit which index you can query to.

See documentation