Who can call a public function?

@Tyler_Kaye
Thx.
I tried to replay an http request to a public function and removed the “Authorization” header, I got an error, this is good, but I would like to make sure this is the intendent behavior…