alist-org / alist

🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序,使用 Gin 和 Solidjs。
https://alist.nn.ci
GNU Affero General Public License v3.0
42.52k stars 5.5k forks source link

Availability of long-term Authorization #6948

Closed Seele0oO closed 1 month ago

Seele0oO commented 1 month ago

Please make sure of the following things

Description of the feature / 需求描述

I noticed that the Authorization header in the alist v2 version was calculated via md5, in v3, this is implemented differently for security purposes.

I was wondering if it would be possible to provide a long term authentication method to make api calls and use webdav without exposing the original account password.

Suggested solution / 实现思路

Allow accounts to generate their own bearer key in place of the account password.

Additional context / 附件

No response

Muione commented 1 month ago

You can create a new account for webdav only in current version.