search

equinor / BetterTogether

GNU Affero General Public License v3.0
0 stars 3 forks source link

Client authentication with secret #62

Closed pgdr closed 6 years ago

pgdr commented 6 years ago

An authentication secret/token should be required when accessing either the rest api or the web visualization page. If authentication fails, the server should respond with 403.

example: https://bettertogether.com/all_users?token=super-secret-token

ohald commented 6 years ago

Client auth = token (saved as environment variable)