Inconsistent API Results

Hi we build docker containers with CircleCI.

Using the API this works:

but this project doesn’t:

This returns a 404 result.

Whaa?

Managed to figure this out. Clicking on the link above while signed into CircleCI produced the expected 200 page. It seems that anonymous access results in a 404.

Setting the project to “Free and Open Source” in Project Settings fixes the issue.

This is really confusing behavior and not clear at all why the API should 404 instead of 401 when the circleci session cookie is not sent.

Returning 401 acknowledges that the repo exists, which isn’t great for security.