Closed callumforrester closed 5 months ago
Fixes #25
Remove token feature and allow the browser to do basic auth.
Without the token, the browser will prompt for credentials when an API call is made and embed them automatically: https://stackoverflow.com/questions/23004942/how-can-i-get-browser-authentication-popup
This will only last as long as the browser is open, the user will have to be prompted again after a restart. It's not perfect but it is sufficient for MVP.
Longer-term we will need to use cookies and graylog's session endpoint: https://go2docs.graylog.org/5-0/setting_up_graylog/rest_api.html
Fixes #25
Remove token feature and allow the browser to do basic auth.
Without the token, the browser will prompt for credentials when an API call is made and embed them automatically: https://stackoverflow.com/questions/23004942/how-can-i-get-browser-authentication-popup
This will only last as long as the browser is open, the user will have to be prompted again after a restart. It's not perfect but it is sufficient for MVP.
Longer-term we will need to use cookies and graylog's session endpoint: https://go2docs.graylog.org/5-0/setting_up_graylog/rest_api.html