Merge pull request #3041 from edx/clintonb/api-no-basic-auth

Disabled basic authentication for the /api paths of ecommerce and programs

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/ecommerce.j2

@@ -69,6 +69,11 @@ server {
     try_files $uri @proxy_to_app;
   }
 
+  # The API should be secured with OAuth 2.0 or or JWT.
+  location /api {
+    try_files $uri @proxy_to_app;
+  }
+
   {% include "robots.j2" %}
 
 location @proxy_to_app {

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/programs.j2

@@ -85,6 +85,11 @@ server {
     try_files $uri @proxy_to_app;
   }
 
+  # The API should be secured with OAuth 2.0 or or JWT.
+  location /api {
+    try_files $uri @proxy_to_app;
+  }
+
   {% include "robots.j2" %}
 
 location @proxy_to_app {