{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41303,"path":"platform-security/instance-security-hardening-settings/sc-api-request-authorization.md","title":"Require authorization for API requests","bundle":null,"doc_type":null,"release":"australia","body":"\n# Require authorization for API requests\n\nUse the **glide.basicauth.required.api** property to enhance security for basic authorization for incoming REST requests.\n\nIf **glide.basicauth.required.api** isn't set to the recommended value of **true**, then Basic Authentication on API requests are disabled which leads to unauthenticated access to instance data.\n\nEnsure the property **glide.basicauth.required.api** exists in the System Properties \\[sys\\_properties\\] table and is set to **true**.\n\n**Warning:** This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.\n\n## More information\n\n<table id=\"table_ajc_b43_3kb\"><thead><tr><th>\n\nAttribute\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nConfiguration name\n\n</td><td>\n\n**glide.basicauth.required.api**\n\n</td></tr><tr><td>\n\nConfiguration type\n\n</td><td>\n\nSystem Properties \\(/sys\\_properties\\_list.do\\)\n\n</td></tr><tr><td>\n\nData type\n\n</td><td>\n\nBoolean\n\n</td></tr><tr><td>\n\nRecommended value\n\n</td><td>\n\ntrue\n\n</td></tr><tr><td>\n\nDefault value\n\n</td><td>\n\n&lt;none&gt;\n\n</td></tr><tr><td>\n\nFallback value\n\n</td><td>\n\nfalse\n\n</td></tr><tr><td>\n\nCategory\n\n</td><td>\n\n[API and web service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-api-web-service.md)\n\n</td></tr><tr><td>\n\nSecurity risk\n\n</td><td>\n\n-   Severity score: 8.6\n-   CVSS rating: High\n-   Security risk details: Unauthenticated access to API data, when combined with misconfigured guest user role, poses a significant risk of unauthorized data exposure.\n\n</td></tr><tr><td>\n\nFunctional impact\n\n</td><td>\n\nNone\n\n</td></tr><tr><td>\n\nDependencies and prerequisites\n\n</td><td>\n\nNone\n\n</td></tr></tbody>\n</table>**Parent Topic:**[API and web service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-api-web-service.md)\n\n"}}