[Geoserver-devel] Cannot disable security on GWC REST API

Trying again on dev list…

GeoServer 2.8.2 with Jetty 9.3

I am trying to disable authentication entirely on the geoserver/gwc/rest endpoint to make it easier for our applications to automate cache truncation when data updates are loaded.

I have tried:

  1. Updating rest.properties under data_dir/security to this:

/;GET=IS_AUTHENTICATED_ANONYMOUSLY
/
;POST,DELETE,PUT=IS_AUTHENTICATED_ANONYMOUSLY

This seems to have no effect. Maybe its only tied to the geoserver/rest endpoint?

  1. Disabling security on the gwc filter chain using the admin web interface. Also, have tried adding the anonymous filter and removing the basic filter in this filter chain’s settings.

Oddly enough, it seems to switch itself back to default settings after the configuration reloads (either manual reload on server status page or server restart)

I am testing this by using curl as described here: http://docs.geoserver.org/stable/en/user/geowebcache/rest/seed.html

Jason Newmoyer
Newmoyer Geospatial Solutions
843.606.0424
jason@anonymised.com