# How to disable auth for a http-in node?

**URL:** <https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842>\
**Category:** General\
**Tags:** home-assistant\
**Created:** [19 May 2022 09:45 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842 "2022-05-19T09:45:14Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![kastyan43](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kastyan43/32/61912_2.png) [@kastyan43](https://discourse.nodered.org/u/kastyan43)\
**Post date:** [19 May 2022 09:45 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/1 "2022-05-19T09:45:15Z")

</div>

How i can disable authorization in use node "http-in"?

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/3/9/39c11d4d99cb3d94aa4be2bc946e1d26ec43ec49.png)  
I want to sent data to Node-Red use GET request.

---

<div class="post-metadata">

**Author:** ![kastyan43](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kastyan43/32/61912_2.png) [@kastyan43](https://discourse.nodered.org/u/kastyan43)\
**Post date:** [23 May 2022 04:54 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/2 "2022-05-23T04:54:23Z")

</div>

Up, help plz

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [23 May 2022 08:32 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/3 "2022-05-23T08:32:02Z")

</div>

You haven't given much to go on which is probably why you aren't getting much help.

THere are several ways in which authorisation could be added to http-in, either natively in Node-RED or externally via a reverse proxy.

Either way, you need to adjust the settings for that and exclude that path.

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [23 May 2022 08:41 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/4 "2022-05-23T08:41:29Z")

</div>

Hi @kastyan43

If you have used `httpNodeAuth` to setup basic username/password security, then there is no way to disable that for particular nodes. You either have it apply to everything, or nothing.

That is a limitation of the `httpNodeAuth` setting.

Alternative solutions do exist, but they get more complicated:

- Running Node-RED behind a proxy which lets you apply the security more selectively outside of Node-RED
- use the `httpNodeMiddlerware` setting to add a custom middleware (code) where you write the logic to selectively apply basic authentication based on the request arriving. I'm not aware of an example for this that we can point you at - unless someone else on the forum has done this.

---

<div class="post-metadata">

**Author:** ![mbonani](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mbonani/32/10631_2.png) [@mbonani](https://discourse.nodered.org/u/mbonani)\
**Post date:** [23 May 2022 22:18 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/5 "2022-05-23T22:18:06Z")

</div>

I see you're using the add-on for Home Assistant. There's an option in the add-on config to disable authentication. See [addon-node-red/DOCS.md at main · hassio-addons/addon-node-red · GitHub](https://github.com/hassio-addons/addon-node-red/blob/main/node-red/DOCS.md#option-leave_front_door_open)

---

<div class="post-metadata">

**Author:** ![kastyan43](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kastyan43/32/61912_2.png) [@kastyan43](https://discourse.nodered.org/u/kastyan43)\
**Post date:** [24 May 2022 05:18 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/6 "2022-05-24T05:18:31Z")

</div>

Thank you friend, i try this but it not work.

> certfile: fullchain.pem  
> credential\_secret: secret  
> http\_node:  
> password: mypass  
> username: myname  
> http\_static:  
> password: pass  
> username: name  
> init\_commands:   
> keyfile: privkey.pem  
> npm\_packages:   
> ssl: false  
> system\_packages:   
> theme: default  
> leave\_front\_door\_open: true  
> dark\_mode: false  
> require\_ssl: false

---

<div class="post-metadata">

**Author:** ![kastyan43](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kastyan43/32/61912_2.png) [@kastyan43](https://discourse.nodered.org/u/kastyan43)\
**Post date:** [24 May 2022 08:07 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/7 "2022-05-24T08:07:21Z")

</div>

work!! thank!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [23 July 2022 08:08 UTC](https://discourse.nodered.org/t/how-to-disable-auth-for-a-http-in-node/62842/8 "2022-07-23T08:08:11Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.