I have SharePoint 2019 updated with latest patch and people are using OneDrive onprem. We don't have hybrid setup everything is on prem.
By default all API access is enabled for users and I think by product it should be open. But can we _vti_bin /_api access to user ?
I have disabled it from web.config, everything seems perfect but its popping user credential first time and its working if you click cancel, but again prompting password if you enter the credential. So this is loop if you enter the credential then it will ask password else no.
I have use developer tool from web and allowed only required API after that it is not popping password on web browser. But still popping password in OneDrive Client.
Anyone has any clue, How we can disable API/vti_bin or allow only required API ?