Are you sending a URL to connectors/ ? If so, then yes, you’ll need the HTTP_MODAUTH var.
An alternative is to create a Resource that is just a connector Resource, and have in it a snippet that calls:
$result = $modx->executeProcessor(array(
'action' => 'web/basket',
'processors_path' => $modx->getOption('core_path').'components/mycomponent/processors/',
));
That will have the same affect. However, doing it this way allows people to just POST straight to that file on a whim, which could lead to spam or CRSF attacks. You’ll have to protect it some way; that’s what HTTP_MODAUTH solves.
HTTP_MODAUTH can also be passed as a HTTP header called ’modAuth’ if you want, as well, if you don’t want to pass it as a GET/POST var.
