<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>Give unauthenticated users (other site using javascript) access to the API</title>
  <link rel="self" href="https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=121249860" />
  <subtitle>Give unauthenticated users (other site using javascript) access to the API</subtitle>
  <id>https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=121249860</id>
  <updated>2026-04-07T02:27:51Z</updated>
  <dc:date>2026-04-07T02:27:51Z</dc:date>
  <entry>
    <title>RE: Give unauthenticated users (other site using javascript) access to the</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=121252110" />
    <author>
      <name>Javier Gamarra</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=121252110</id>
    <updated>2021-11-17T18:16:17Z</updated>
    <published>2021-11-16T22:39:43Z</published>
    <summary type="html">&lt;p&gt;Sure, here it is how: &lt;a href="https://help.liferay.com/hc/en-us/articles/360039026192-Making-Authenticated-Requests#:~:text=Unauthenticated%20requests%20are%20disabled%20by,Policy%20to%20allow%20unauthenticated%20requests."&gt;https://help.liferay.com/hc/en-us/articles/360039026192-Making-Authenticated-Requests#:~:text=Unauthenticated%20requests%20are%20disabled%20by,Policy%20to%20allow%20unauthenticated%20requests.&lt;/a&gt;&lt;/p&gt;</summary>
    <dc:creator>Javier Gamarra</dc:creator>
    <dc:date>2021-11-16T22:39:43Z</dc:date>
  </entry>
  <entry>
    <title>Give unauthenticated users (other site using javascript) access to the API</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=121249859" />
    <author>
      <name>Juan Miguel Imaz</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=121249859</id>
    <updated>2021-11-15T19:06:52Z</updated>
    <published>2021-11-15T16:22:55Z</published>
    <summary type="html">&lt;p&gt;A colleague is creating a React application and wants to access
  certain types of Liferay content that I manage.&lt;/p&gt;
&lt;p&gt;He wants to access to /o/headless-admin-content/v1.0/sites/xxxxxx/structured-contents?filter=contentStructureId%20eq%xxxxxx&amp;amp;sort=dateCreated%3Adesc&lt;/p&gt;
&lt;p&gt;But to do that he needs to be authenticated.&lt;/p&gt;
&lt;p&gt;Is there a way to open the API (only at that point) for
  unauthenticated users?&lt;/p&gt;
&lt;p&gt;
  &lt;br /&gt;
  &lt;strong&gt;Note: &lt;/strong&gt;I have solved the javasript CORS problem
  (System Settings &amp;gt; Security Tools &amp;gt; Portal Cross-Origin Resource
  Sharing (CORS))&lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt; &lt;/p&gt;</summary>
    <dc:creator>Juan Miguel Imaz</dc:creator>
    <dc:date>2021-11-15T16:22:55Z</dc:date>
  </entry>
</feed>
