From 1848f206b4df4ff51be6788462dd9fbcb518244f Mon Sep 17 00:00:00 2001 From: Jochen Ehret Date: Tue, 6 Oct 2026 10:22:22 +0200 Subject: [PATCH] Document new ssh_access nginx route --- docs/internal/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/internal/README.md b/docs/internal/README.md index 940396e8bd2..aabf9a1d717 100644 --- a/docs/internal/README.md +++ b/docs/internal/README.md @@ -26,7 +26,7 @@ We do not recommend using internal API endpoints for anything other than their i **Intended Consumer:** SSH Proxy -**Auth Mechanism:** OAuth +**Auth Mechanism:** mTLS and OAuth. The endpoint is served on the mutual-TLS listener (`cc.tls_port`, default `9023`), where the SSH Proxy authenticates with a client certificate. For backwards compatibility it also remains available over OAuth on the public listeners (`cc.external_port`, default `9022`, and `cc.public_tls.port`, default `9024`). ### GET /v2/buildpacks/:guid/download **Description:** Download a buildpack file