diff --git a/lib/www/server/spec/openapi.yaml b/lib/www/server/spec/openapi.yaml
index 5714098..32c8ce0 100644
--- a/lib/www/server/spec/openapi.yaml
+++ b/lib/www/server/spec/openapi.yaml
@@ -702,8 +702,8 @@ components:
 
 
 security:
-    - BearerAuthGuest: []
-    - CookieAuthGuest: []
+    - BearerAuthUser: []
+    - CookieAuthUser: []
 
 paths:
 
@@ -711,6 +711,9 @@ paths:
         get:
             description: Get list of projects.
             tags: [ "project" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             responses:
                 "200":
                     description: List of projects
@@ -737,6 +740,9 @@ paths:
         get:
             description: Get details about a specific project.
             tags: [ "project" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -754,6 +760,9 @@ paths:
         get:
             description: Get list of preplot lines.
             tags: [ "preplot" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -809,6 +818,9 @@ paths:
         get:
             description: Get list of sequences.
             tags: [ "sequences" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -828,6 +840,9 @@ paths:
         get:
             description: Get a sequence
             tags: [ "sequences" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
                 - $ref: "#/components/parameters/Sequence"
@@ -888,6 +903,9 @@ paths:
         get:
             description: Get list of planned sequences.
             tags: [ "planner" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -976,6 +994,9 @@ paths:
         get:
             summary: Get project events.
             tags: [ "log" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -1142,6 +1163,9 @@ paths:
         get:
             summary: Get project labels.
             tags: [ "project" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
             responses:
@@ -1161,6 +1185,9 @@ paths:
         get:
             summary: Get project configuration data.
             tags: [ "project" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
                 -
@@ -1205,6 +1232,9 @@ paths:
             summary: Get project information data.
             description: Each project has a key/value store where arbitrary information can be stored. The keys are simple strings and the values are JSON objects. This endpoint allows access to this information; either the full object can be returned or a subset of it, by setting the `{path}` accordingly.
             tags: [ "project" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
                 -
@@ -1244,6 +1274,9 @@ paths:
                 `lines`     | ✔         | ✘     | ✘
 
             tags: [ "project", "metadata" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/Project"
                 -
@@ -1341,6 +1374,9 @@ paths:
         get:
             summary: Get navigation data.
             tags: [ "navdata" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/QueryLimit"
                 - $ref: "#/components/parameters/QueryOffset"
@@ -1361,6 +1397,9 @@ paths:
         get:
             summary: Get navigation data as GeoJSON point features
             tags: [ "navdata" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 - $ref: "#/components/parameters/QueryLimit"
                 - $ref: "#/components/parameters/QueryOffset"
@@ -1381,6 +1420,9 @@ paths:
         get:
             summary: Get navigation data as GeoJSON line features
             tags: [ "navdata" ]
+            security:
+                - BearerAuthGuest: []
+                - CookieAuthGuest: []
             parameters:
                 -
                     description: Maximum number of line vertices