Skip to content

docs: document how Standby handles the API token - #3094

Merged
vdusek merged 3 commits into
masterfrom
docs/standby-token-not-forwarded
Oct 20, 2026
Merged

docs: document how Standby handles the API token#3094
vdusek merged 3 commits into
masterfrom
docs/standby-token-not-forwarded

Conversation

@vdusek

@vdusek vdusek commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

While working on better support for calling Standby Actors from the API client (apify/apify-client-python#1153), I couldn't find an explanation of how the authentication headers are handled (Maybe I just missed it?). I have two questions:

  1. Does the Apify token reach the Actor's code? (It shouldn't.).
  2. If an Actor needs its own authentication header, what's the best practice for sending it? Is it X-Apify-Authorization?

I drafted a change; see the diff and suggest better/correct/more precise explanation. Thank you.

(tagging @mvolfik, as I know a lot of the work there was done by you)

@vdusek vdusek added adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team. labels Oct 19, 2026
@vdusek vdusek self-assigned this Oct 19, 2026
@apify-service-account

apify-service-account commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🗑️ Preview for this PR was deleted.

@vdusek vdusek changed the title docs: note that Standby removes the API token before forwarding docs: document how Standby handles the API token Oct 19, 2026
@vdusek
vdusek requested a review from mvolfik October 19, 2026 18:50
@vdusek
vdusek marked this pull request as ready for review October 19, 2026 18:51
mvolfik
mvolfik approved these changes Oct 19, 2026
View reviewed changes

@mvolfik mvolfik left a comment •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, this is correct. maybe it might be worth adding a short note that points the developer that they should use the token from env, just like in normal Actors?

thank you for filling the gaps!

@vdusek
vdusek merged commit ea89a7a into master Oct 20, 2026
14 checks passed
@vdusek
vdusek deleted the docs/standby-token-not-forwarded branch October 20, 2026 06:58
@TC-MO

TC-MO commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

@vdusek why was no TW pulled as reviewer for addition to docs?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mvolfik mvolfik mvolfik approved these changes

Assignees

@vdusek vdusek

Labels

adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@vdusek @apify-service-account @TC-MO @mvolfik