search

mediacloud / news-search-api

Internal API server that offers search access to the Media Cloud Online News Archive (in Elasticsearch).
https://mediacloud.org
GNU Affero General Public License v3.0
1 stars 3 forks source link

Lockdown: Some kind of Authentication pattern #31

Closed pgulley closed 9 months ago

pgulley commented 9 months ago

We want this API to be closed to the public- so the api server needs to implement some kind of auth. Some hard-coded http auth would be minimally invasive- do we need a more sophisticated solution, like tokens/handshakes?

philbudne commented 9 months ago

I've added basic authentication to the proxy at https://news-search-api.tarbell.mediacloud.org

rahulbot commented 9 months ago

HTTP auth is good with me. Is the same applied to news-search-query?

rahulbot commented 9 months ago

This is resolved; there isn't any more public access for the API and query tool. Developers can set up an SSH tunnel for testing.