guest role; guide section ticking

shopdb/core/api/apitokens.py

@@ -86,7 +86,6 @@ def list_apitokens():
 
 
 @apitokens_bp.route('', methods=['POST'])
-@jwt_required()
 @require_permission('apitokens.create')
 def create_apitoken():
     """Create a token for the caller. Returns the full secret ONCE.
@@ -141,7 +140,6 @@ def create_apitoken():
 
 
 @apitokens_bp.route('/<int:tokenid>', methods=['PUT'])
-@jwt_required()
 @require_permission('apitokens.create')
 def update_apitoken(tokenid: int):
     """Rename, rescope, or deactivate a token. Own token, or any if admin.
@@ -183,7 +181,6 @@ def update_apitoken(tokenid: int):
 
 
 @apitokens_bp.route('/<int:tokenid>', methods=['DELETE'])
-@jwt_required()
 @require_permission('apitokens.create')
 def revoke_apitoken(tokenid: int):
     """Revoke (deactivate) a token. Own token, or any if admin."""