Expand my Community achievements bar.

Dive into Adobe Summit 2024! Explore curated list of AEM sessions & labs, register, connect with experts, ask questions, engage, and share insights. Don't miss the excitement.
SOLVED

Why http://localhost:4503/api/assets.json with wrong credential giving 200 as responce?

Avatar

Level 7

Hi 

I am trying to hit http://localhost:4503/api/assets.json using wrong credentials but getting 200 as responce why this is so ?

akshaybhujbale_0-1665484151277.png

 

1 Accepted Solution

Avatar

Correct answer by
Level 2

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets...

 

View solution in original post

3 Replies

Avatar

Employee Advisor

Hi @akshaybhujbale ,

 

You dont require authentication on publisher to access /api.
Which is why you see the response even when entering a wrong username.

 

Avatar

Correct answer by
Level 2

Since your instance is running on 4503, so I am assuming it is the publish instance. By default anonymous user in Adobe Experience Manager(AEM) will have the read access to content, so the content can be accessed via publisher directly without providing any credential.
 
and 


GET 
/api/assets.json retrieves a JSON representation of an asset or a folder within the /content/dam folder., 


Please refer.
https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/assets/admin/assets...

 

Avatar

Employee Advisor

@akshaybhujbale publish is open unless you try to access via LB/dispatcher. So all the endpoints would work with anonymous users.