Comments (3)
I am also looking at packaging this app for Sandstorm (sandstorm.org) and we eradicate authentication. If there is a way to tell it to accept a username from a HTTP header, it avoids us having to hack it together ourselves. ;)
We are obviously not unique in this strategy, so upstream support for it would likely benefit multiple self-hosting setups.
From a security standpoint, solutions using this method are proxying all traffic, so it's entirely safe to trust the presence of the header.
https://docs.sandstorm.io/en/latest/developing/auth/
from wallos.
I wouldn't know how to implement that securely at the moment. I'll give that a read and add this suggestion to my list.
Anyway, for now, you should only have to login once every 30 days (per device).
Thank you.
from wallos.
+1 self-hosted apps should have this by default: accept login tokens inbound via header as self-hosted environments or specific apps are reached via Tunnels or other VPN setups where inbound traffic is proxied through a reverse proxy, ideally pre-authenticated.
SSO makes total sense. Since containers are spun up quickly, a multitude of apps running locally, isolated in a secure way but have a common login layer. It drives me bonkers to login to all my different apps when switching tabs^^
Some of them are linked to OpenID or similar but its still a lot of silos making my life harder than it needs to be :-)
from wallos.
Related Issues (20)
- Inaccurate payment time HOT 3
- Feature request: set subscription period, expiration cancellation reminder to unsubscribe HOT 1
- [Feature request] Use Fixer alternative that don't need an API key HOT 2
- Webhook not working with Discord HOT 9
- [Feature Request] Add a parameter to indicate the day of your salary
- [Feature Request] Pay off credits, enter credit rates
- [Feature Request] - Number of Licenses for Each Service
- ERR_EMPTY_RESPONSE after docker run HOT 2
- smtp setting error HOT 2
- Add sqlite to docker image for database dump HOT 2
- Discord notification not working HOT 11
- [Feature Request] CSV export format
- Move USD/CA "$" to left of amount on alerts
- Pushover Notification Not Working HOT 2
- Feature Request: Able to pick notifications earlier than 7 days HOT 1
- Docker deployed Wallos was infected with the kdevtmpfsi virus HOT 5
- Allow me to add Wallos to my Wallos by enabling GitHub Sponsorship HOT 4
- [Feature Request] Set longer reminder time HOT 3
- PHP(?) errors whens adding/saving subscriptions ("Deprecated : htmlspecialchars_decode(): Passing null to parameter")
- Getting "Error Failed to load subscription" upon clicking the edit button HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wallos.