Get the password gate status
Tells the restaurant’s own website whether its preview password gate should be on, and which password applies. Call it from the website’s middleware or server. Then the gate can be turned off from LettBestilt at launch, without a redeploy.
Requires an API key. Unlike the rest of the API, browser-origin authentication is not accepted here: the response contains a password and must never be readable from a browser. password is only returned when enabled is true. The response is never cached (no-store), so turning the gate off takes effect at once.
Unlike the other endpoints, this one also answers for restaurants that are not live yet, since they are the ones that need the gate. Rate limit: 600 requests per 60 seconds per slug and IP.
Authentication
Either this or a trusted browser origin. The restaurant’s API key, sent as Authorization: Bearer lbs_…. Use it from your server only, never in browser code. Keys are issued per restaurant by LettBestilt.

