Description:

When viewing the list of API's in Matomo otherwise the example URL looks like https://demo.matomo.cloud/?module=API&method=DevicesDetection.getModel&idSite=1&period=day&date=yesterday&format=JSON&token_auth=anonymous&force_api_session=1

By not appending the force_api_session=1 when token is anonymous users can more easily tweak the token and don't have to manually remove the URL parameter. see eg https://developer.matomo.org/api-reference/reporting-api#CustomAlerts

When the token is anonymous the force_api_session is not needed.

Review

• Functional review done
• Usability review done (is anything maybe unclear or think about anything that would cause people to reach out to support)
• Security review done see checklist
• Code review done
• Tests were added if useful/possible
• Reviewed for breaking changes
• Developer changelog updated if needed
• Documentation added if needed
• Existing documentation updated if needed