https://answers.axonivy.com/questions/3343/ivy-7-1-rest-api-basic-authorization<p>I'm trying to create a test REST API in Ivy version 7.1 like the below: <img alt="alt text" src="https://answers.axonivy.com/upfiles/IMG_26062018_133012_0.png"> then test it on Postman and get this response: <img alt="alt text" src="https://answers.axonivy.com/upfiles/postman.png"></p> <p>Moreover, when I try to access the API by Chrome browser.</p> <p>First time attempt: <img alt="alt text" src="https://answers.axonivy.com/upfiles/chrome.png"> Then cancel it and get this response: <img alt="alt text" src="https://answers.axonivy.com/upfiles/chrome2.png"> Then press F5 and I get this response: <img alt="alt text" src="https://answers.axonivy.com/upfiles/chrome3.png"></p> <p>According to the last comment on this topic <a href="https://answers.axonivy.com/questions/1858/rest-service-security">https://answers.axonivy.com/questions/1858/rest-service-security</a></p> <blockquote> <p>The REST service provided by Axon.ivy are be default protected by HTTP BASIC Authentication.</p> </blockquote> <p>So my question is that why I could access the API without the basic authorization on Postman? I also test with the same scenario in Ivy version 6.2 but I'm unable to access the API without the basic authorization. Thanks</p>enTue, 26 Jun 2018 03:42:59 -0400https://answers.axonivy.com/questions/3343/ivy-7-1-rest-api-basic-authorization/3344<p>It a Designer thing. Postman does not seem to show a Basic auth dialog. So the Designer will automatically sign you in as <code>Developer</code>. You will not see such behaviour with a real engine.</p> <p>But you could specify pro-actively a user to log in with postman by setting secure auth headers: <img alt="alt text" src="https://answers.axonivy.com/upfiles/postmainAuthHeaders.png"></p> <p>Another thing that could be confusing is the cookie store that knows the attached JSESSONID once you had a successfully authenticated session. You may clean it up manually to switch the user <img alt="alt text" src="https://answers.axonivy.com/upfiles/postmanCookies.png"></p>Reguel WermelingerTue, 26 Jun 2018 03:42:59 -0400https://answers.axonivy.com/questions/3343/ivy-7-1-rest-api-basic-authorization/3344