Cybrarist / Discount-Bandit

Track your wishlist items and get notified across multiple amazon stores
GNU General Public License v3.0
235 stars 8 forks source link

Additional Authentication Options #9

Open sjafferali opened 8 months ago

sjafferali commented 8 months ago

Great app. I have all my services behind a reverse proxy that handles authentication, and I want to use it to bypass the login screen and prevent having to login twice.

Are there any other methods of passing authentication information available now (such as headers)? If not, it is possible to use basic authentication, or disable authentication completely at the moment?

From a security standpoint, solutions using this method are proxying all traffic, so it's entirely safe to trust the presence of the header.

Cybrarist commented 8 months ago

hi @sjafferali , glad you liked it.

although i wouldn't recommend to login automatically, but if you add the following code in routes/web.php , then you should login automatically ( as the first user registered in the database ).

Route::get("/login", function (){ Auth::login(\App\Models\User::first()); return redirect("/"); })->name("filament.admin.auth.login");

sjafferali commented 8 months ago

Thanks, this works great. Although, it does limit this app to only being used by a single user.

Using Authelia or another provider is handle authentication is a fairly common method of protecting self hosted apps. It would be great if there was native support for passing the auth information in the headers via a reverse proxy to support this type of setup.

Thanks again for the great app!

Cybrarist commented 8 months ago

yea i might add these stuff later on , but I'd rather first to finish the features i have in my mind before moving into stuff that will be used by a small percentage of users