Why http://localhost:4503/api/assets.json with wrong credential giving 200 as responce? | Community
Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Priyanku_Dwivedi

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets-api-content-fragments.html?lang=en

 

3 replies

Mayank_Gandhi
Employee
October 12, 2022

@akshaybhujbale publish is open unless you try to access via LB/dispatcher. So all the endpoints would work with anonymous users.

Priyanku_DwivediAccepted solution
Employee
October 12, 2022

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets-api-content-fragments.html?lang=en

 

milind_bachani
Employee
October 11, 2022

Hi @akshaybhujbale ,

 

You dont require authentication on publisher to access /api.
Which is why you see the response even when entering a wrong username.