podman-desktop-extension-ai-lab icon indicating copy to clipboard operation
podman-desktop-extension-ai-lab copied to clipboard

User should be able to turn off/on the web server in the configurations

Open axel7083 opened this issue 1 year ago • 4 comments

Is your enhancement related to a problem? Please describe

Since https://github.com/containers/podman-desktop-extension-ai-lab/pull/1544 we by default start a REST server when AI Lab is started

Describe the solution you'd like

Having an option to disable it in the configuration. And IMO have it disabled by default.

Describe alternatives you've considered

No response

Additional context

cc @feloy @benoitf @jeffmaury

axel7083 avatar Aug 26 '24 14:08 axel7083

it should also require also some authentication else we'll start to receive some CVE

benoitf avatar Aug 26 '24 14:08 benoitf

it should also require also some authentication else we'll start to receive some CVE

What do you mean, you would like us to generate some token that people will have to include in their authorization request ?

axel7083 avatar Aug 26 '24 14:08 axel7083

It should be enabled by default. Authentication is an issue as we want to be ollama compatible so maybe we should more restrictive about network addresses

jeffmaury avatar Aug 26 '24 14:08 jeffmaury

it should also require also some authentication else we'll start to receive some CVE

What do you mean, you would like us to generate some token that people will have to include in their authorization request >?

everytime that there is a server listening without an authentication, then people will do for example a request in a webpage calling something to the server to do things on behalf of the user (but without its agreement) so at the end, I saw security requests

benoitf avatar Aug 26 '24 14:08 benoitf