Lightware MMX2-4x3-H20 User Manual page 61

    7. Lightware REST API Reference
6.4. REST API Security
The REST API is designed with two security features: Authentication and Encryption. Both of them are optional
and can be used independently of each other.
6.4.1. Authentication
Basic access authentication is designed to limit user access for the REST API server. It requires user
authentication by using a password (username is fixed).
Follow the instructions below to set the password:
Step 1. Set the password.
ɯ request-line: POST·<ip>/api/V1/MANAGEMENT/NETWORK/AUTHENTICATION/setPassword·HTTP/1.1
ɯ body: <new_password>
Step 2. Enable the basic authentication on the chosen port (HTTP: 80 or HTTPS: 443).
ɯ request-line: POST·<ip>/api/V1/MANAGEMENT/NETWORK/SERVICES/HTTP/AuthenticationEnabled·HTTP/1.1
ɯ body: true
Step 3. Restart network services.
ɯ request-line: POST·<ip>/api/V1/MANAGEMENT/NETWORK/SERVICES/HTTP/restart·HTTP/1.1


ATTENTION! The password will not be encrypted by this authentication mode, it remains accessible when
the communication happens on HTTP.
For more details, see the Basic Authentication
6.4.2. Encryption (HTTPS)
There is no encryption when the REST API communication happens via HTTP, because the HTTP protocol
is not encrypted. The REST API server is available via HTTPS on the 443 port. To avoid the data interception
(e.g. stealing the password) HTTP should be disabled and HTTPS protocol used instead.


ATTENTION! Please ensure proper time and date setting in MMX2, because it affects the self-signed
certificate (SSL) generation when using WSS or HTTPS. Improper time and date setting may lead to
certificate rejection.
HTTPS does not guarantee that the communication is secure. Make sure that the client communicates with
the server directly, without any third-party element in the communication route (Man-in-the-middle attack).
Encryption (HTTPS, WSS)
For more details, see the
section.
section.
Applied firmware package: v2.9.0b6 | LDC software: v2.7.6b4
MMX2 series – User's Manual 61