Change record status: 
Project: 
Introduced in branch: 
8.x
Description: 

Configuration files that define a REST service now support the Authentication System.

A REST resource can define which authentication methods it does support in the same way routes do. For example, the following resource defined at rest.settings.yml will only accept requests authenticated with the http_basic authentication provider:

resources:
  'entity:node':
    POST:
      supported_formats:
        - json
      supported_auth:
        - http_basic
Impacts: 
Site builders, administrators, editors
Module developers