When I use the transcoding interface, I can still request without passing authentication. How can I restrict the transmission of specific credentials

Docs
1

文档
图片
43/1000

When I use the transcoding interface, I can still request without passing authentication. How can I restrict the transmission of specific credentials。
My request method is as follows:

curl --location --request POST 'https://xxx.com/cool/convert-to/pdf' \
--form 'data=@"C:\\Users\\yujik\\Downloads\\第一阶段第3次课_3.docx"'

refer to

local.json

 "token": {
        "enable": {
          "request": {
            "inbox": true,
            "outbox": true
          },
          "browser": true
        },
        "inbox": {
          "header": "Authorization"
        },
        "outbox": {
          "header": "Authorization"
        }
      },
      "secret": {
        "inbox": {
          "string": "xxx"
        },
        "outbox": {
          "string": "xxx"
        },
        "session": {
          "string": "xxx"
        }
      }