I'm assuming that's some sort of Ajax API that you're doing? You could make your Javascript aware that it's in a development environment, and pass the Authorization token, as per http://coderseye.com/2007/how-to-do-http-basic-auth-in-ajax.html.
If you're using jQuery.ajax, you can pass the username and password for Basic Authentication, but that leaves you a bit open. Also, it only sends the info when challenged with a 401, so explicit header setting might be your only option. [ http://stackoverflow.com/questions/5507234/how-to-use-basic-auth-and-jquery-and-ajax ] You could update the programming to only require authentication for non-ajax requests, but that might be defeating the purposes as well. Of course, I'm assuming that your application would normally use Form authorization in production, but you've got the added layer of Basic authentication in development. This issue should only happen when calling the API from a different domain. If the browser that is already authorized, is calling the APIs on the same domain, then the Authorization token <b>should</b> be sent automatically. I'm emphasizing that "should", because it would just seem screwy if it didn't. On Thursday, 28 November 2013 09:48:42 UTC+10, advantage+ wrote: > > Building a site on client's server and password protected but now adding > in API functionality and the htaccess is blocking responses back from the > API calls since they can't reach the site. > > > > Is there a simply way to define production / development to allow access > without password protecting the site. > > I do not want to go thru all 65 controllers and re-code $this->Auth->deny() > / allow();. > > > > Thanks > > > > *Dave* > > > -- Like Us on FaceBook https://www.facebook.com/CakePHP Find us on Twitter http://twitter.com/CakePHP --- You received this message because you are subscribed to the Google Groups "CakePHP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/cake-php. For more options, visit https://groups.google.com/groups/opt_out.
