search

dotCMS / core

Headless/Hybrid Content Management System for Enterprises
http://dotcms.com
Other
846 stars 465 forks source link

Allow Edit Mode Anywhere app to send a custom HTTP header(s) for Authentication #21376

Closed yolabingo closed 1 month ago

yolabingo commented 2 years ago

It might be useful if the EMA app could send custom HTTP headers like Authorization: with its requests, so clients need not rely on IP whitelists to secure their rendering servers.

More broadly, perhaps this could be done with some or all outbound HTTP requests.

Cloud customers have asked us for the public IPs of their cloud servers in order to restrict access to their rendering servers. These IPs change at the whim of AWS, which imposes work on both dotCMS (to provide a current list of public IPs) and on cloud customers (to update their firewalls when the IPs change).

yolabingo commented 2 years ago

@fmontes @wezell does this seem reasonable?

stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

yolabingo commented 1 year ago

I think that providing a mechanism like this will be helpful

swicken-dotcms commented 1 year ago

Second user is now asking for this capability