2

I have created a custom admin user and gave access rights to access all the magento modules.

Now when i hit the url to get product info by passing sku in url from postman.

http://local.m2.com/rest/V1/products/24-MB02

and select authorization type basic auth with username and password which i have created from admin, it gives me error

Consumer is not authorized to access %resources.

how can i fix that or is there any way to access Magento API's using basic auth?

1
  • First, you need to make call to get Admin Token: Endpoint POST http://<host>/rest/default/V1/integration/admin/token Headers Content-Type application/json Data: { "username": "admin", "password": "123123q" } Response: Magento returns the admin’s access token. 5r8cvmpr11j6gmau8990rcj2qk7unh8i Now, You can call product info API. but in each call use header like below: Authorization: Bearer <authentication token> Jul 20, 2018 at 13:10

3 Answers 3

0

Magento support confirmed to me in a ticket that by default it is not possible to use the REST API while HTTP Access Control is enabled.

It would be possible using custom code or a custom VCL file if you're using Fastly/Varnish but those are complex solutions.

0

These are the steps to properly create an authentication token and use it in an authenticated API REST

First call the authentication API REST to get the token

First call the authentication API REST to get the token

Now paste the token in the Baerer token authorization field and call the API REST

enter image description here

-1

To fix this error you need to pass the access token. Because guest user doesn't have access to it.

Just check following article you will get more idea.

Also, check this answer. I had same issue and someone helped me to fix it:

magento 2 Rest APi How to use default methods

https://devdocs.magento.com/guides/v2.2/extension-dev-guide/service-contracts/service-to-web-service.html

Please let me know if you still need help. I'll help you.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.