search

mocdaniel / dashing-icinga2

Dashing dashboard for Icinga 2 using the REST API
MIT License
204 stars 47 forks source link

Dashboard iFrame without authentication #67

Closed taalas closed 6 years ago

taalas commented 6 years ago

Hi,

the iFrames at the bottom currently only work if the browser has a valid authenticated session with Icinga Web. Is this correct? Is there any way to have the dashboard retrieve the information without authentication (but without disabling authentication altogether)?

dnsmichi commented 6 years ago

Iframes do not allow to pass authentication information, neither hardcoded in the URL nor with anything else.

You'll need to login once the page is loaded, or you provide an instance of Icinga Web 2 which is read only and requires no auth (e.g. with a specific IP address space configured in Apache/Nginx there).

This isn't specific to Icinga Web 2 or Dashing, more of a general security implementation in the HTML standard. Unfortunately there isn't a fix for this, so closing this issue.