I am using Geoserver to serve a number of WMS layers. I am using jQuery's $.getJson('/geoserver/rest//featuretype.json') to programmatically populate a table with the available layers and their abstracts (Geoserver REST API). I am also iterating over a Geoserver reflect request to generate thumbnails. At this point, this requires authentication.
Is it possible to access this information through the REST interface without authentication?
Should I be making these request through PHP, Python, or cURL, instead of directly calling the URL in the JS?
I understand the need to authenticate some of the REST URLs as they provide the login and password for the postgis backend in plain text.