search

mescon / Muximux

A lightweight way to manage your HTPC
GNU General Public License v2.0
1.14k stars 83 forks source link

Password protect Settings modal #122

Closed calvinbui closed 4 years ago

calvinbui commented 7 years ago

In my configuration, I have a simple dashboard I have made as the landing page. This is not password protected as there is no risk here. If I only want an overview of what's happening I take a look at the landing page then leave.

All the other services, NZBGet, Couch, Sonarr, etc. are protected by a password prompt through NGINX.

The authentication option prompts for a password upon browsing to the URL which is not ideal. The only risk is if someone opens the Settings menu and puts their own services in or fakes the URL to capture my username and password unsuspectingly.

It'll therefore be beneficial to place the Settings modal behind a password prompt or have an option in the settings.ini.php file to disable it completely.

mescon commented 7 years ago

Interesting - I see your point. As this function was mainly developed by @d8ahazard (as most of the 2.0 stuff was), we'll see what he thinks.

2wheelsdown commented 7 years ago

Can I 'vote' for this too?

I like the 'landing' page with all the app shortcuts, and each of the underlying web apps you can jump to are all password protected using their own functionality, so again the only problem for me is if one of my users decides to monkey around with the settings for Muximux.

johnalanyoung commented 6 years ago

This is definitely a feature I would need because without it, a public facing landing page is open to misuse.

Is there any further updates on this one at all?

d8ahazard commented 6 years ago

It's on my list.

On Aug 22, 2017 4:13 AM, "John Young" notifications@github.com wrote:

This is definitely a feature I would need because without it, a public facing landing page is open to misuse.

Is there any further updates on this one at all?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/mescon/Muximux/issues/122#issuecomment-323967752, or mute the thread https://github.com/notifications/unsubscribe-auth/ABjuNA4pEI_SYwbqkT_u3tewFqfz9dH_ks5sapu4gaJpZM4L-adf .