If remote API is enabled by default, how to secure

Hello,

If remote API is enabled by default how can this be secured?

Does the REST follow the security structure of my Cloud instance?

How do I prevent users to extract data via API/REST from my confluence instance?

Regards,

Alexander

2 answers

Community moderators have prevented the ability to post new answers.

1 vote

The REST API has the same security as the web-ui, it respects all the permissions etc.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

0 votes

How do I prevent users to extract data via API/REST from my confluence instance?

What prevents your users from simply scraping pages that they can see?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.