Hydrospheredata / mist-cli

Mist command line interface
Apache License 2.0
2 stars 4 forks source link

mist-cli.rc and basic authorization support #18

Open dos65 opened 6 years ago

dos65 commented 6 years ago

Mist doesn't have authorization feature, but its http api may be protected by hiding it over nginx/apache/.. + basic authorization. In this case, mist-cli has to perform requests using basic authorization. Also, there should be a way to store login/password pairs for certain mist servers. We could use the same file format like in pypi.

blvp commented 6 years ago

Have you tried set basic auth in MIST_HOST environment like this: MIST_HOST=user:pass@localhost ?

zero88 commented 6 years ago

any status update for this ticket? I would like make it supports some common authorization http server method: digest, basic and later is forward (for external auth server and SSO). Sorry, what the purpose of mist-cli.rc?

I can contribute this ticket next month (12/2018)

blvp commented 6 years ago

For basic auth you can use my comment. mist.rc supposed to be a configuration file for http connection.

dos65 commented 6 years ago

@zero-88 This ticket is in status "nice to have".

Honestly, there aren't a lot of cases when we need to use auth because usually mist is deployed into private networks. This ticket was created for AWS EMR support feature and then we decided that having basic auth and passing credentials through host URL is enough for this moment.

If you interested in implementing it, we will appreciate your contribution.