Require authorization for JSONv2 request [Updated in Security Center 1.3]
Use the glide.basicauth.required.jsonv2 property to designate if incoming JSONv2 requests should require basic authorization.
More information
警告:
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
| Attribute | Description |
|---|---|
| Property name | glide.basicauth.required.jsonv2 |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | API and web service |
| Purpose | To enforce JSONv2 requests authorization. |
| Security risk rating | 7.5 |
| Recommended value | true |
| Functional impact | This remediation enforces a combination of authentication methods, in the form of basic authentication and system level access control.
To learn more, see JSONv2 Web Service JSONv2 Web Service. |
| Security risk | (High) Without appropriate authorization configured on the data source JSON requests, an unauthorized user can access sensitive content/data on the target instance. |
| References | Authentication |