This chapter describes the authentication and authorization required to use the HTTP API.
This chapter includes the following sections:
Authentication and authorization are enabled by default in Neo4j (refer to Operations Manual → Authentication and authorization). With authentication and authorization enabled, requests to the HTTP API must be authorized using the username and password of a valid user.
If an Authorization header is not supplied, the server will reply with an error.
Example request
{
"statements" : [ {
"statement" : "CREATE (n:MyLabel) RETURN n"
} ]
}Example response
{
"errors" : [ {
"code" : "Neo.ClientError.Security.Unauthorized",
"message" : "No authentication header supplied."
} ]
}|
If authentication and authorization have been disabled, HTTP API requests can be sent without an |
If an incorrect username or password is provided, the server replies with an error.
Example request
{
"statements" : [ {
"statement" : "CREATE (n:MyLabel) RETURN n"
} ]
}Example response
{
"errors" : [ {
"code" : "Neo.ClientError.Security.Unauthorized",
"message" : "Invalid username or password."
} ]
}