I want to disable Basic Auth for JSONWS

Issue

• I want to disable Basic Auth for JSONWS (JSON web services) in Liferay so that only OAuth is used for a specific jsonws method (i.e. expandovalue)

Environment

• DXP 7.4

Resolution

• Basic Auth can be entirely disabled, or /api/* removed from the URLs Includes list, by navigating to Control Panel > System Settings > API Authentication > Basic Auth Header and editing the /api/*,/xmlrpc* Configuration Entry.
  

• To disable Basic Auth only for certain expandovalue methods, add /api/jsonws/expandovalue/* to "URL Excludes".  

Additional Information

• JSONWS: Using the REST Data Provider to Populate Form Options
• Configuring Built-In Authentication Verifiers: Basic Auth Header
• OAuth 2 Scopes: Creating a Scope for a JSONWS Service