Does a Search-Only API key prevent enumeration of an entire Algolia index from the browser?
Preventing accidental public access to Algolia data requires choosing the correct API key type for client-side use. Algolia provides a tiered API key system with an Admin API Key for full read/write access, a Search-Only API Key for read-only queries, and Secured API Keys that can be signed with user-specific restrictions. The design goal is to allow search