# Require website user authentication

**URL:** <https://community.novulo.com/t/require-website-user-authentication/496>\
**Category:** \[Q&A\] Components, Datasets and Plug-ins\
**Tags:** rest\
**Created:** [September 23, 2024, 7:15am UTC](https://community.novulo.com/t/require-website-user-authentication/496 "2024-09-23T07:15:44Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![heppener\_anker](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@heppener\_anker](https://community.novulo.com/u/heppener_anker)\
**Post date:** [September 23, 2024, 7:15am UTC](https://community.novulo.com/t/require-website-user-authentication/496/1 "2024-09-23T07:15:44Z")

</div>

Hi,

When using the “Require website user authentication” within a REST data endpoint where can I set the bearer token? I can give it as a header in Postman and it recognizes it:  
 ![image](https://canada1.discourse-cdn.com/flex008/uploads/novulo/original/1X/0ed6b8d99d58922f1a913955b826ca985a13ca99.png)

but I need to set it somewhere to validate against. Where can I do this?

Greetings,  
Timothy

---

<div class="post-metadata">

**Author:** ![gweijman](https://yyz2.discourse-cdn.com/flex008/user_avatar/community.novulo.com/gweijman/32/444_2.png) [@gweijman](https://community.novulo.com/u/gweijman)\
**Post date:** [September 23, 2024, 8:30am UTC](https://community.novulo.com/t/require-website-user-authentication/496/2 "2024-09-23T08:30:10Z")

</div>

Hi Timothy,

can you tell more about how you configured the endpoint in Novulo?

And is the authorization option based on a bearer token already available? From what I read they are working on it:  
[Using bearer token for authentication for end points - [Q&A] Components, Datasets and Plug-ins - Novulo](https://community.novulo.com/t/using-bearer-token-for-authentication-for-end-points/325)

Cheers!

---

<div class="post-metadata">

**Author:** ![heppener\_anker](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@heppener\_anker](https://community.novulo.com/u/heppener_anker)\
**Post date:** [September 23, 2024, 8:39am UTC](https://community.novulo.com/t/require-website-user-authentication/496/3 "2024-09-23T08:39:31Z")

</div>

Hi Geertjan,

I have service authentication type set to “Basic”. But checked the box next to “Require website user authentication”:

 ![image](https://canada1.discourse-cdn.com/flex008/uploads/novulo/original/1X/3190bcad7598fc88847b2e0a0d916e0735a51f45.png)

---

<div class="post-metadata">

**Author:** ![gweijman](https://yyz2.discourse-cdn.com/flex008/user_avatar/community.novulo.com/gweijman/32/444_2.png) [@gweijman](https://community.novulo.com/u/gweijman)\
**Post date:** [September 23, 2024, 8:52am UTC](https://community.novulo.com/t/require-website-user-authentication/496/4 "2024-09-23T08:52:26Z")

</div>

Hi Timothy,

thanks for the information.  
The token that is used to authenticate against the website user can be found at the CMS user:

1. Go to Settings\> Overviews and Search for CMS users
2. Open the CMS user you want to authenticate against
3. The token is given and if needed you can revoke it:  
 ![token-cmsuser](https://canada1.discourse-cdn.com/flex008/uploads/novulo/original/1X/3977caab47739a56878a4eabb2631626198e4cbb.png)

Have a nice day!

---

<div class="post-metadata">

**Author:** ![heppener\_anker](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@heppener\_anker](https://community.novulo.com/u/heppener_anker)\
**Post date:** [September 23, 2024, 8:55am UTC](https://community.novulo.com/t/require-website-user-authentication/496/5 "2024-09-23T08:55:25Z")

</div>

Hi Geertjan,

This solved it for me. I now can get data from endpoints while using a bearer token as an extra authentication layer. Thank you!