is the API open to public without authentication?

francisco_eu5ifu

Hi,

 

Today we have received a Service Management ticket via API:

"xxxxxxxx@gmail.com raised this request via API"

with the description:

"Im very por man"

I'm wondering if this is expected or if we can close this gap and enforce the API Calls to be authenticated. In this case, how can we do it?

 

BR

Prince Nyeche - ELFAPP

Hi @francisco 

Welcome to community! Creation of tickets on JSM depends on your project configuration, if you allowed anyone to raise or ticket or people added by your team. If it's open to the public, anyone can create a ticket. A question would be did you place a form on some website that anyone can fill up and submit or did you create a custom form with using the API?