Drupal is a registered trademark of Dries Buytaert
Protected Pages 3.0.0 Major update available for module protected_pages (3.0.0). Commerce Core 3.3.8 Minor update available for module commerce (3.3.8). Layout Builder Reorder 2.0.1 Minor update available for module layout_builder_reorder (2.0.1). Ban 1.1.0 Minor update available for module ban (1.1.0). Field Formatter Range 2.0.0 Major update available for module field_formatter_range (2.0.0). Field Formatter Range 8.x-1.8 Minor update available for module field_formatter_range (8.x-1.8). UI Patterns (SDC in Drupal UI) 2.0.18 Minor update available for module ui_patterns (2.0.18). Varbase FAQs 9.2.1 Minor update available for module varbase_faqs (9.2.1). Search API Solr 4.3.11 Module search_api_solr updated after 14 months of inactivity (4.3.11). Provus Mega Menu Module provus_mega_menu crossed 1,000 active installs.

Null auth

No security coverage
View on drupal.org

This module allows anonymous users to access Drupal REST resources through an auto-login method. It provides a "null" authentication provider that can be configured via the REST UI module to grant access to specific resources. Use with caution in controlled environments.

Drupal Null Authentication Provider module

This module is a null authentication provider. Enabling anonymous user access to Drupal 8 REST Resources, using an auto-login method.

WARNING: This module does not control any flood and give auto-login for all requests. Use only in environments with controlled access.

Configuration and usage instructions

There is no specific configuration for this module, it enables automatically a null authentication method. You need to add a _null_auth query parameter to all your requests.

Using the contrib module REST UI, you can enable REST Resources using the Authentication Provider null, remember to enable the specific permissions for the REST Resource to anonymous user.

Steps:

  1. Get the X-CSRF-Token: GET /rest/session/token
    HEADERS:
           - Content-Type: application/json
  2. Create a new user: POST /entity/user?_format=json&_null_auth=1
    HEADERS:
           - Content-Type: application/json
           - X-CSRF-Token: ---
         BODY:
         {
           "name":{
             "value":"userName"
           },
           "mail":{
             "value":"userMail"
           }
         }

Get in touch with us for customizations and consultancy.

Activity

Total releases
1
First release
Nov 2025
Latest release
7 months ago
Releases (12 mo)
1 ▲ from 0
Maintenance
Slowing

Releases

Version Type Release date
2.x-dev Dev Nov 25, 2025