> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aseeflow.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Basic Authentication

Basic authentication uses Spring Security's HTTP Basic mechanism with a custom provider that validates credentials against the ASEE Flow engine's Identity Service. It is the default mode.

## Dependency

```xml theme={null}
<dependency>
  <groupId>org.springframework.boot</groupId>
  <artifactId>spring-boot-starter-security</artifactId>
</dependency>
```

This dependency is `provided` in the starter, so include it explicitly.

## Configuration

```yaml theme={null}
aseeflow:
  webadmin:
    authentication: basic
```

## How it works

The browser prompts for a username and password with the standard HTTP Basic dialog. Credentials are validated against the engine's `IdentityService`. By default both the WebAdmin UI and the REST API (`/engine-rest/**`) require authentication; unauthenticated REST requests receive `401 Unauthorized`. Set `disable-rest-security: true` to require authentication for the UI only — this leaves the REST API open, so do it only when REST is secured elsewhere ([consequences](/webadmin/security#never-leave-the-engine-rest-api-unprotected)).

On logout, the user is redirected to `/webadmin/logoutRedirect` and then back to `/webadmin/`, where the browser prompts for credentials again.

## When to use it

Basic authentication suits development and testing, internal applications with simple needs, and API clients or automated tools.

## Properties

| Property | Type | Default | Description |
| - | - | - | - |
| `aseeflow.webadmin.authentication` | String | `basic` | Set to `basic` to enable this mode. |
| `aseeflow.webadmin.disable-rest-security` | Boolean | `false` | When `true`, REST endpoints are reachable without authentication — only safe when secured elsewhere; see [REST security](/webadmin/security#never-leave-the-engine-rest-api-unprotected). |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.