Hangfire icon indicating copy to clipboard operation
Hangfire copied to clipboard

all dashboards requests will include initial query string

Open Alexei000 opened this issue 4 years ago • 2 comments

If initial query to dashboard (i.e. /hangfire) also provides a query string, this will be used for all links and requests within the dashboard.

This is useful to make the dashboard accessible based on a bearer token or similar. See this discussion.

If the query string is empty (default case), no link / url is changed.

Alexei000 avatar Apr 23 '20 16:04 Alexei000

Hi @Alexei000, this is an interesting idea to make everything work with SPA. But I have a question related to security – do I understand everything correctly, and some other person who can see the URL and that query string may use it to access the Dashboard UI?

odinserj avatar Apr 30 '20 16:04 odinserj

Hello, @odinserj! Indeed this is an issue, although I expect the string not to be entirely visible. This should be regarded more as a workaround until a better solution is found.

Thanks.

Alexei000 avatar May 22 '20 20:05 Alexei000