I am using Geoserver to serve a number of WMS layers. I am using jQuery's $.getJson('/geoserver/rest//featuretype.json') to programmatically populate a table with the available layers and their abstracts (Geoserver REST API). I am also iterating over a Geoserver reflect request to generate thumbnails. At this point, this requires authentication.

Is it possible to access this information through the REST interface without authentication?

Should I be making these request through PHP, Python, or cURL, instead of directly calling the URL in the JS?

I understand the need to authenticate some of the REST URLs as they provide the login and password for the postgis backend in plain text.

  • 1
    I don't think you can get something similar to WMS functionality by using Geoserver REST API. However I did not understand why a get request over WMS in your Geoserver requires authentication while the getJson (as I see from the link it is http get as well) is working fine. I mean if you think the reason is postgis backend still you are hitting it in both requests... In any case making a request to WMS by POST and adding the authentication information in that request might work.
    – Ozgun Alan
    May 7, 2012 at 21:55
  • 1
    I was able to get this functionality through a python cgi script. I too am stumped about where authentication actually kicks in. I should be able to use GET requests without ever needing to authenticate. At the same time, postGIS DB login/pass are stored in geoserver (and accessible via GET apparently)...
    – Jay Laura
    May 7, 2012 at 22:42
  • 3
    For the down voter, let me know how this question can be improved to increase the potential to get a high quality answer.
    – Jay Laura
    Apr 24, 2013 at 18:38

1 Answer 1


Which version of Geoserver are you using? To avoid the authentication just go to the "authentication" page in the security menu of the web-admin, select "REST" from the filter chain and check "no security" :)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.