LambStatus icon indicating copy to clipboard operation
LambStatus copied to clipboard

Authorization for the Status page

Open nodomain opened this issue 5 years ago • 3 comments

Idea: provide an optional authentication for "internal" status pages. WDYT?

nodomain avatar Sep 10 '18 14:09 nodomain

Thank you for the suggestion. Yes, some people may want the authentication for status pages.

The article below describes how to protect the s3 bucket with the BASIC auth. I think we can protect the s3 bucket of the status page in this way. http://kynatro.com/blog/2018/01/03/a-step-by-step-guide-to-creating-a-password-protected-s3-bucket/

It would be great if we can automatically do this (like by changing auth settings in the admin page), but I'm not very sure when I can take the time to implement the feature.

ks888 avatar Sep 16 '18 15:09 ks888

Hi, First of really like the solution, I was able to implement the s3 Basic auth. However would it be possible to also integrate status page authentication using cognito?

stopkaya avatar May 09 '19 09:05 stopkaya

Thank you for the suggestion. Yes, some people may want the authentication for status pages.

The article below describes how to protect the s3 bucket with the BASIC auth. I think we can protect the s3 bucket of the status page in this way. http://kynatro.com/blog/2018/01/03/a-step-by-step-guide-to-creating-a-password-protected-s3-bucket/

It would be great if we can automatically do this (like by changing auth settings in the admin page), but I'm not very sure when I can take the time to implement the feature.

Hey @ks888,

could you give us a hint what files or functions need to be changed to support this topic and create a pull request.

  • We would need a new cognito user pool right ?
  • Will this be created in the lamb-status.yml or outside in a js file ?
  • What do I need to add in the frontend part ? Same dialog as in the backend right ? Any special thing I need to take into consideration ?

Greetings,

Flo

pharindoko avatar May 19 '19 18:05 pharindoko