I am having issues accessing a Magento API, as the magento folder is password protected. Is there a way to add an exception to this, so that any request to the API is allowed, but all other requests are blocked?
I am using IIS7.5 and Plesk 10.
I would first confirm that the issue is the password protection. If you turn off the password protection, does it work? In other words, is that the only cause of the failure.
Do you know how Plesk sets the password protection? Does it use IIS's built in features? If so, you can manually grant access to the API page only. If Plesk has a custom way to handle auth, you can choose to use IIS's auth instead of Plesk instead. Basically turn it off in Plesk, but disable the anonymous user on the site in IIS.