[Nov 2021] Public information can now be accessed without authentication

• Confidential:
    Clients capable of maintaining the confidentiality of their
    credentials (e.g., client implemented on a secure server with
    restricted access to the client credentials), or capable of secure
    client authentication using other means.

• Public:
    Clients incapable of maintaining the confidentiality of their
    credentials (e.g., clients executing on the device used by the
    resource owner, such as an installed native application or a web
    browser-based application), and incapable of secure client
    authentication via any other means.

GET https://api.myanimelist.net/v2/anime?q=Lycoris_Recoil&nsfw=true

...
"data": [
        {
            "node": {
                "id": 54440,
                "title": "Lycoris Recoil (Shinsaku Animation)",
                "main_picture": {...}
            }
        },
        {
            "node": {
                "id": 50709,
                "title": "Lycoris Recoil",
                "main_picture": {...}
            }
        },
...

GET https://api.myanimelist.net/v2/anime?q=Lycoris%20Recoil&nsfw=true

...
"data": [
        {
            "node": {
                "id": 50709,
                "title": "Lycoris Recoil",
                "main_picture": {...}
            }
        },
        {
            "node": {
                "id": 54440,
                "title": "Lycoris Recoil (Shinsaku Animation)",
                "main_picture": {...}
            }
        },
...

@Headers("X-MAL-CLIENT-ID: $CLIENT_ID")
    @GET("/v2/anime/season/{year}/{season}")
    suspend fun getSeasonalAnimes(
        @Query("year") year: Int,
        @Query("season") season: String,
    ): Response<SeasonalAnimes>

@GET("/v2/anime/season/{year}/{season}")
    suspend fun getSeasonalAnimes(
        @Header("X-MAL-CLIENT-ID") clientId: String,
        @Path("year") year: Int,
        @Path("season") season: String,
        @Query("limit") limit: Int
    ): Response<SeasonalAnimes>

export const myanimelist = functions.https.onRequest((request, response) => {
    const url = "https://api.myanimelist.net/v2/anime?q=one&limit=4";

    fetch(url)
        .then((response) => {
            if (!response.ok) {
                throw new Error("Network response was not ok" +
                    response.statusText);
            }
            return response.json();
        })
        .then((data) => {
            console.log(data);
            response.json(data);
        })
        .catch((error) => {
            console.error("Error:", error);
            response.status(500).send("Error fetching MAL data");
        });
});

fetch(url, {headers: {"X-MAL-CLIENT-ID": "your-client-id-here"}})

const handleSearch = useCallback(
    async () => {
      console.log('Searching', value)
      console.log('Client ID', clientID)

      const baseURL = 'https://api.myanimelist.net/v2/anime'
      const myHeaders = new Headers({
        "X-MAL-CLIENT-ID": clientID
      })

      const requestOptions = {
        // mode: 'no-cors',
        method: "GET",
        headers: myHeaders,
      } as RequestInit

      try {
        const response = await fetch(`${baseURL}?q=${value}&limit=4`, requestOptions)
        if (!response.ok) {
          throw new Error(`Response status: ${response.status}`)
        }
        const json = await response.json()
        console.log(json)
      } catch (error) {
        console.error(error)
      }
    },
    [value],
  )

webSecurity: false