conduit icon indicating copy to clipboard operation
conduit copied to clipboard

The backend web UI management does not have a password, and any user can operate it, which is not secure

Open mmm8955405 opened this issue 2 years ago • 5 comments

Feature description

Add backend administrator password

mmm8955405 avatar Sep 12 '23 01:09 mmm8955405

Hi @mmm8955405! This seems more like a feature request than a bug, so I marked it as such. The current UI is not meant to be publicly hosted, although we have discussed adding user management to Conduit, but there were more essential features we had to focus on.

In the meantime, while this is not implemented in Conduit, I propose you look into adding a proxy server that sets up authentication in front of Conduit (e.g. nginx).

lovromazgon avatar Sep 12 '23 14:09 lovromazgon

@mmm8955405 can you talk more about what you're trying to do that you would need a password for the UI?

devarispbrown avatar Sep 13 '23 02:09 devarispbrown

Hi @mmm8955405! This seems more like a feature request than a bug, so I marked it as such. The current UI is not meant to be publicly hosted, although we have discussed adding user management to Conduit, but there were more essential features we had to focus on.

In the meantime, while this is not implemented in Conduit, I propose you look into adding a proxy server that sets up authentication in front of Conduit (e.g. nginx).

Okay, but I think we need the password for the UI

mmm8955405 avatar Sep 15 '23 05:09 mmm8955405

@mmm8955405 can you talk more about what you're trying to do that you would need a password for the UI?

Yes, a password for the UI should be required. Even though there is still a lot to be done at the moment

mmm8955405 avatar Sep 15 '23 05:09 mmm8955405

There may still be some issues at present. In the latest Docker image: https://github.com/ConduitIO/conduit/issues/1207

mmm8955405 avatar Sep 15 '23 05:09 mmm8955405