@vjleo94 The document you provide doesn't talk any thing about authentication except basic auth of user and password.How do we authenticate this Assets API request(POST) before we create a asset?Allowing POST on CSRF filter can let anyone create asset in AEM if I'm not wrong.