WSO2 API Manager, is it possible to disable the access-token mechanism

Question

Is it possible to disable the access-token mechanism in WSO2 API Manager? So we do not have to set the authentication bearer header .I know I can set the access-token time-o

Answer 1

Yes You can. WSO2 API Manager provides resource level authentication where you can specify the authentication mechanism for each HTTP verb. If you set it to 'None', then you do not need to set Authorization headers when you call the API.

As given in the document[1],when creating the API set 'AuthType' value as 'None' for all the HTTP verbs.

[1]http://docs.wso2.org/display/AM150/API+Resources