is the API open to public without authentication?

[francisco]

Hi,

Today we have received a Service Management ticket via API:

"xxxxxxxx@gmail.com raised this request via API"

with the description:

"Im very por man"

I'm wondering if this is expected or if we can close this gap and enforce the API Calls to be authenticated. In this case, how can we do it?

BR

[Prince Nyeche · Accepted solution]

Hi @francisco 

Welcome to community! Creation of tickets on JSM depends on your project configuration, if you allowed anyone to raise or ticket or people added by your team. If it's open to the public, anyone can create a ticket. A question would be did you place a form on some website that anyone can fill up and submit or did you create a custom form with using the API?