From 3efca53edf35f6bd220aad042d89c24380e0e4bf Mon Sep 17 00:00:00 2001
From: Alexander Tymchuk <alexander.tymchuk@gmail.com>
Date: Fri, 26 Mar 2021 20:15:10 +0300
Subject: [PATCH] Docs: /sources/http_api/user.md (#31152)

I believe it's a mistake in the docs, since http requests against those endpoints are not supposed to be authenticated with API keys.

If I correctly understand Grafana's auth design, the API key is not issued/tied to a user, therefore there is no mechanism to detect who the user is when the request is authenticated with an API key.

Please note there may be other endpoints like this...
---
 docs/sources/http_api/user.md | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/docs/sources/http_api/user.md b/docs/sources/http_api/user.md
index 2aea2166834..963a8a144a1 100644
--- a/docs/sources/http_api/user.md
+++ b/docs/sources/http_api/user.md
@@ -298,9 +298,11 @@ Content-Type: application/json
 GET /api/user HTTP/1.1
 Accept: application/json
 Content-Type: application/json
-Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
+Authorization: Basic YWRtaW46YWRtaW4=
 ```
 
+Requires basic authentication.
+
 **Example Response**:
 
 ```http
@@ -328,7 +330,7 @@ Content-Type: application/json
 
 `PUT /api/user/password`
 
-Changes the password for the user
+Changes the password for the user. Requires basic authentication.
 
 **Example Request**:
 
@@ -336,7 +338,7 @@ Changes the password for the user
 PUT /api/user/password HTTP/1.1
 Accept: application/json
 Content-Type: application/json
-Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
+Authorization: Basic YWRtaW46YWRtaW4=
 
 {
   "oldPassword": "old_password",
@@ -415,7 +417,7 @@ Content-Type: application/json
 
 `GET /api/user/orgs`
 
-Return a list of all organizations of the current user.
+Return a list of all organizations of the current user. Requires basic authentication.
 
 **Example Request**:
 
@@ -423,7 +425,7 @@ Return a list of all organizations of the current user.
 GET /api/user/orgs HTTP/1.1
 Accept: application/json
 Content-Type: application/json
-Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
+Authorization: Basic YWRtaW46YWRtaW4=
 ```
 
 **Example Response**: