# HTTP end point without auth

**URL:** <https://discourse.nodered.org/t/http-end-point-without-auth/21465>\
**Category:** General\
**Created:** [9 February 2020 19:28 UTC](https://discourse.nodered.org/t/http-end-point-without-auth/21465 "2020-02-09T19:28:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paul-Reed](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/paul-reed/32/66906_2.png) [@Paul-Reed](https://discourse.nodered.org/u/Paul-Reed)\
**Post date:** [9 February 2020 19:28 UTC](https://discourse.nodered.org/t/http-end-point-without-auth/21465/1 "2020-02-09T19:28:14Z")

</div>

I am trying to obtain access to an audio mp3 file from an endpoint, so that I can cast it to a Google Home device.

![doorbell](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/9/7/97f74d720b9395a282a19aadb816f4a6657e7c57.jpeg)

In my node-red settings, I have enabled `adminAuth`, `https` and `httpNodeAuth`, but no surprise that when I try and get access to the endpoint (via [node-red-contrib-cast](https://github.com/Hypnos3/node-red-contrib-cast) ) it fails, I assume because it needs authorising.  
I guess I want my cake and eat it 😉

Without compromising the server's general security, is there a way around this?

---

<div class="post-metadata">

**Author:** ![Paul-Reed](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/paul-reed/32/66906_2.png) [@Paul-Reed](https://discourse.nodered.org/u/Paul-Reed)\
**Post date:** [9 February 2020 20:30 UTC](https://discourse.nodered.org/t/http-end-point-without-auth/21465/2 "2020-02-09T20:30:41Z")

</div>

> [@Paul-Reed](#):
>
> is there a way around this?

Yes, using the network tab of chrome developers console, I can get the url of the hosted doorbell sound, instead of hosting it myself with an endpoint.  
Result!!

![doorbells](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/7/c/7c1d058e554763a9a2861552499ede3b31f958be.jpeg)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [9 April 2020 20:34 UTC](https://discourse.nodered.org/t/http-end-point-without-auth/21465/3 "2020-04-09T20:34:08Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.