RFC - How to deal with basic auth #357
Replies: 3 comments
-
|
Another user who has configured basicAUth with the main ui credentials. We need some kind of clarification. |
Beta Was this translation helpful? Give feedback.
-
|
I propose to drop basic authentication and only support API key. This reduces complexity and code without removing value for the users in my opinion. What do you think? If you agree I'll plan to remove the basic authentication code completely from the extension. |
Beta Was this translation helpful? Give feedback.
-
|
I think the reason basic auth is supported is that when running behind a reverse proxy with basic auth (as described in the docs), you need it. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
I am facing error reports with "not working" connections and several times the reason where configured basic auth credentials on installations without a basic auth setup.
People think the have to fill in ther connection credentials for their ssh acces or their main ui credentials.
I am looking for feedback on how we can improve this.
I would like to keep basic auth settings somehow, but make it kind of harder to configure.
So that people who know why they are configuring basic auth, have little more effort to do and users who just fill those fields "beccause they are available" get pointed on a possible misconfiguration.
Any ideas on how we can improve this are welcome.
Beta Was this translation helpful? Give feedback.
All reactions