theforeman/foreman — pull request #1096 by eLobato (2013-12-17 11:24:28+00:00)
Title: Authenticate returns true for API requests when login:false

Unauthenticated API requests should go through when login:false. As of now they don't because the last line in our 'authenticate' method returns nil for API requests. Therefore, only the web UI works.