search

botherder / kraken

Cross-platform Yara scanner written in Go
GNU General Public License v3.0
330 stars 43 forks source link

HTTP Authentication #10

Closed wizardlevel9 closed 3 years ago

wizardlevel9 commented 3 years ago

Is it possible to add authentication (username and password) to the api requests?

Use case - Agent registers with the Web UI server, but I have enabled .htpasswd to prevent everyone from viewing the data. As such the agent is not able to register. If I remove the .htpasswd then all the data is visible to everyone without authentication.

I believe that this enhancement could be accomplished by modifiying the api.go file using resty.User and altering the SetBody.

This enhancement would be very welcome.

Thankyou.

botherder commented 3 years ago

Sorry, but I currently do not have the time to do any development on this. FWIW, you can have htpasswd and just set an exclusion to /api/.