Authentication required to GET data in browser

[Ekaterina Khomyakova]

Fuel 9.1 #266

Steps to reproduce:
1. Go to Fuel UI, log in
2. Try to get something via api, e.g. /api/clusters

Expected results:
Return list of clusters

Actual result:
'Authentication required'

[Vitaly Kramskikh (vkramskikh)]

Possibility to pass tokens in cookie was removed as a part of a security bug fix, so accessing API directly from browser is no longer available. As an alternative I can suggest using browser console on Fuel UI and executing of the following code:

$.ajax('/api/clusters', {headers: {'X-Auth-Token': app.keystoneClient.token}})

[Dmitry Belyaninov (dbelyaninov)]

May be it is possible to add some config parameter (to enable/disable direct api calls from browser) for debug and design usage?

[Vitaly Kramskikh (vkramskikh)]

Yep it is, though it could be better to disable authentication at all. Check AUTHENTICATION_METHOD parameter in settings.yaml

[Dmitry Belyaninov (dbelyaninov)]

Cool, thx!