# Issue with HTTP request auth

**URL:** <https://discourse.nodered.org/t/issue-with-http-request-auth/95497>\
**Category:** General\
**Tags:** http-request, security\
**Created:** [18 February 2025 21:40 UTC](https://discourse.nodered.org/t/issue-with-http-request-auth/95497 "2025-02-18T21:40:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![BobS](https://avatars.discourse-cdn.com/v4/letter/b/f475e1/32.png) [@BobS](https://discourse.nodered.org/u/BobS)\
**Post date:** [18 February 2025 21:40 UTC](https://discourse.nodered.org/t/issue-with-http-request-auth/95497/1 "2025-02-18T21:40:09Z")

</div>

Good afternoon, I'm trying to do a http request/api call to be able to automate turning on and off flows. Following this [Enable or disable a flow (tab) per flow name (flow) - Node-RED](https://flows.nodered.org/flow/0b69bd593a562a308ef0ef7de0a95a67) it works fine if I import the code as is, unless I set a password on initial install of node red or manually create the adminauth myself, which then I get an error of unauthorized. So in the http request node I set the basic auth with my user and pass, which still comes back as unauth. I tried with the digest auth as well. Then I tried enabling httpnodeauth and httpstaticauth with a user and hashed password in my settings.js file in node red, with no luck. However if I disable adminauth, and with the httpnodeauth, and httpstaticauth enabled, the http request will work with a basic auth. I also do not want to do this with a bearer token. How would I make this work? Because I want node red to have a user and pass.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [19 May 2025 21:40 UTC](https://discourse.nodered.org/t/issue-with-http-request-auth/95497/2 "2025-05-19T21:40:31Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.