Issue
- I want to disable Basic Auth for JSONWS (JSON web services) in Liferay so that only OAuth is used for a specific jsonws method (i.e. expandovalue)
Environment
- DXP 7.4
Resolution
-
Basic Auth can be entirely disabled, or
/api/*removed from the URLs Includes list, by navigating to Control Panel > System Settings > API Authentication > Basic Auth Header and editing the /api/*,/xmlrpc* Configuration Entry. -
To disable Basic Auth only for certain expandovalue methods, add
/api/jsonws/expandovalue/*to "URL Excludes".