API endpoints require authentication for publicly-accessible objects
When reviewing https://gitlab.com/gitlab-org/gitlab/-/merge_requests/88228 I noticed that we have a restriction on the Issue Links endpoint to only authenticated users. This surprised me a bit because I would have thought that a resource publicly available to unauthenticated users would be also available to anonymous requests via the API.
I noticed we have a few issues for this, so here's an epic to track and relate them.
epic