Why http://localhost:4503/api/assets.json with wrong credential giving 200 as responce? | Community
Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Priyanku_DwivediAccepted solution
Employee
Oct 12, 2022 5:52 AM UTC

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets-api-content-fragments.html?lang=en

 

3 replies

Mayank_Gandhi
Employee
Oct 12, 2022 1:52 PM UTC

@akshaybhujbale publish is open unless you try to access via LB/dispatcher. So all the endpoints would work with anonymous users.

Translate
Priyanku_DwivediAccepted solution
Employee
Oct 12, 2022 5:52 AM UTC

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets-api-content-fragments.html?lang=en

 

Translate
milind_bachani
Employee
Oct 11, 2022 11:54 AM UTC

Hi @akshaybhujbale ,

 

You dont require authentication on publisher to access /api.
Which is why you see the response even when entering a wrong username.

 

Translate