Currently anyone can go to inspect-> network and get my rest url and access my data from geoserver, I want to secure my connection (probably by adding proxy server) so that only authenticated persons can get data when they run the url. I have approximately 10000 users.

  • There's no such thing as a REST URL
    – nmtoken
    Commented Oct 15, 2019 at 18:12

1 Answer 1


Knowing your rest-url will not gain them anything unless they also know your administrator password (which is not still geoserver is it?).

You can use the built in REST Security that GeoServer provides to allow different users different levels of access.

  • but still when we paste that url in chrome, we can get the json data back. How can we stop that ? Commented May 6, 2020 at 20:38
  • which URL do you mean?
    – Ian Turton
    Commented May 7, 2020 at 7:28
  • localhost:8080/geoserver/company/… like this, What if I don't want to anyone to copy this url from network and use this url to get data . how can I do that ? Commented May 7, 2020 at 8:39
  • Ok, two things 1) that is not a REST url and 2) this how GeoServer and WFS work. If you don't need or want a WFS then turn the service off (global settings),
    – Ian Turton
    Commented May 7, 2020 at 8:44
  • I want to create system in such a way that I can fetch the WFS data from my program but if anyone copies and paste that url , it will not work. Any guidance in that way will be helpful. Thanks Commented May 7, 2020 at 9:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.