search

kerberos-io / kerberos-docker

Run Kerberos Open Source inside a docker container.
http://doc.kerberos.io/opensource/installation#docker
103 stars 31 forks source link

Security issue: /stream is not secured #13

Open h3rj4n opened 5 years ago

h3rj4n commented 5 years ago

I'm using this docker image to run the service. I want to open the service to the internet but the /stream URI is not secured using any password.

location /stream {
        proxy_set_header Authorization $http_authorization;
        proxy_read_timeout 1s;
        proxy_pass http://localhost:8889;
}

I don't have a solution right now. The 'normal' authentication uses PHP, the /stream URI proxies straight to the other service. There is no PHP in between, so no authentication.