DFIRKuiper / Kuiper

Digital Forensics Investigation Platform
736 stars 110 forks source link

Authentication Feature #94

Closed archanchoudhury closed 1 year ago

archanchoudhury commented 1 year ago

Describe the bug I have used to docker version of it. And once launched, the web UI directory takes us to the admin panel. There is a logout button, but it seems not working. Do you have a feature where we can create an authentication process before accessing the web UI? If so, how to implement it?

salehmuhaysin commented 1 year ago

Hello there is a authentication via LDAP only if you have openLDAP or Microsoft AD you can link Kuiper with it, that's why the logout on the sidebar

you need to configure the LDAP in the environment file https://github.com/DFIRKuiper/Kuiper/blob/9ab1e7ac30b7655e5e9560e3101947a22d4ebe2d/.env#L32-L46

Note, the authentication will just give you access to Kuiper, there is no user management or autherization or anything, just request LDAP for the username and password, if correct, it will allow access.

archanchoudhury commented 1 year ago

Hello, Thanks for the clarification. Suppose, if I want to add an user management using AWS Cognito pool infront of this application. Where should I put the configuration?

salehmuhaysin commented 1 year ago

i did not work with AWS Cognito before so im not sure how to configure it and not implement in Kuiper

if you want to implement it youcan write it here

https://github.com/DFIRKuiper/Kuiper/blob/9ab1e7ac30b7655e5e9560e3101947a22d4ebe2d/kuiper/app/__init__.py#L192

let me know if you want ot implement it

archanchoudhury commented 1 year ago

The issue is resolved. I was able to implement Authentication process with an ALB in front of kuiper EC2 and integrated the Cognito with ALB. No code addition were required.