ioBroker.simple-api icon indicating copy to clipboard operation
ioBroker.simple-api copied to clipboard

Add HTTP Basic Auth support

Open klein0r opened this issue 5 years ago • 10 comments

Please add support for HTTP Basic authentication. Just extract the user information from the auth header for validation.

klein0r avatar Dec 30 '20 14:12 klein0r

would be awesome

dadude86 avatar Jan 11 '21 13:01 dadude86

Authentication password via url parameter is not secure

mesche avatar Jul 16 '21 12:07 mesche

@mesche hm ... with SSL it could be ... but still think about most do it home-network ...

Apollon77 avatar Jul 16 '21 14:07 Apollon77

Correct... but when I use the API with other systems (like Grafana for example), then I have to store the password in plain text. --> not quite ideal ;-)

but thank your for your support and the development .. great work

mesche avatar Jul 16 '21 15:07 mesche

@mesche How do you connect grafana with iobroker when auth is activated? i am trying with the grafana json plugin and iobroker simple api. it is working without auth activated, but when i activate it shows bad request. i can get value directly via url, so simple api is working. can you share your settings? many thanks and have a nice day

SirFlour avatar Apr 15 '23 21:04 SirFlour

@mesche How do you connect grafana with iobroker when auth is activated? i am trying with the grafana json plugin and iobroker simple api. it is working without auth activated, but when i activate it shows bad request. i can get value directly via url, so simple api is working. can you share your settings? many thanks and have a nice day

Not at all! That's why I hope that the simple-api adapter supports this function soon.

Currently I have 2 instances of the simple-api adapter running. For Grafana without auth and only with read permissions of the data points

mesche avatar Apr 16 '23 09:04 mesche

Ahhh now i understand you. Allright, your workaround with 2 instances is great. I will do one just for read and only available between the dockers containers. and the other one with auth and extra port.

i hope it can be added so that this workaround is not needed any more and simple-api gets better :)

SirFlour avatar Apr 16 '23 17:04 SirFlour

Any progress here ?

tommyMX avatar Feb 28 '24 09:02 tommyMX