Provide no access to an unauthenticated user (login page only)
Is your feature request related to a problem? Please describe. I waffled between starting this as a feature request vs issue as this isn't a bug but on the other hand, more information is made public than is necessary, which can pose minor-to-significant risks should any issues or vulnerabilities be found.
Manyfold shows the following things to unauthenticated users:
- Library names:
- Internal library names:
- The version:
- Stats:
- And interactable elements (e.g. can load but not see models, creators, collections, libraries, and the search box)
I recently made Manyfold publicly accessible (on the open internet) and would rather users just see the app name and a login screen, for example Immich:
This ensures all data is kept private and lessens the risk of issues, attacks, and the scope of attacks should vulnerabilities be found.
Describe the solution you'd like Unauthenticated users should only be presented with a login screen.
Describe alternatives you've considered N/A
Additional context N/A
Thanks - there's a couple of issues open already on this, and I've recently done some cleaning up of the access controls, so hopefully this can be better soon.