Webserver: Introduce authentication

[Baklap4]

Currently anyone with the host's ip address can add/delete/reorder songs. This should be an admin (event host) only feature unless otherwise specified.

I'm suggesting the following:

• [ ] Switch in game to enable/disable admin feature.
  • [ ] If enabled you must login as admin to add/remove/reorder songs
  • [ ] if enabled and not logged in you'll have a readonly version where one can:
    • [ ] View database
    • [ ] View playlist
    • [ ] Search database
  • [ ] if disabled anyone can do anything
• [ ] Create a way to authenticate yourself
  • [ ] Basic auth would be good enough
  • [ ] Authorize through the url: localhost/admin
  • [ ] Auth credentials can be set within the config
  • [ ] Nice to have: Auth credentials can be set within the game (which writes to above said config)

[nieknooijens]

might be a good alternative for all those booklets I carry around with me, because those are getting pretty thick (64 pages or more)

[Baklap4]

@nieknooijens i still have no clue why you started printing them in the first place :joy: This in combination with #192 would be a golden feature then 👍

[Lord-Kamina]

Maybe Maybe he likes hoarding and carrying around the booklets; don't judge!

On October 24, 2017 at 03:48:46, Arjan Spieard ([email protected]) wrote:

@nieknooijens https://github.com/nieknooijens i still have no clue why you started printing them in the first place xD This in combination with #192 https://github.com/performous/performous/issues/192 would be a golden feature then 👍

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/performous/performous/issues/296#issuecomment-338891124, or mute the thread https://github.com/notifications/unsubscribe-auth/AGJfLGkIaTWOu-1tGaoU3LY0SbosamFzks5svYhNgaJpZM4QDUl8 .