search

rszimm / sprinklers_pi

Sprinkling System Control Program for the Raspberry Pi
GNU General Public License v2.0
310 stars 100 forks source link

Securing access? #7

Closed Paddy-Wa closed 10 years ago

Paddy-Wa commented 10 years ago

Is there any way to secure the site similar to apache authentication via .htaccess files or something?

rszimm commented 10 years ago

There really isn't right now. I've toyed with the idea of adding basic access authentication which wouldn't be particularly difficult (just a new field in the settings and an additional tag in the HTTP header). Is this something that you find is a deal killer?

Paddy-Wa commented 10 years ago

Not a deal killer for sure. I really like the interface.

I was thinking that a security layer would allow it to be made accessible externally for monitoring or adjusting while away on vacation etc.

Best Regards, Patrick Donohue

On Fri, Nov 15, 2013 at 4:09 PM, rszimm notifications@github.com wrote:

There really isn't right now. I've toyed with the idea of adding basic access authentication which wouldn't be particularly difficult (just a new field in the settings and an additional tag in the HTTP header). Is this something that you find is a deal killer?

— Reply to this email directly or view it on GitHubhttps://github.com/rszimm/sprinklers_pi/issues/7#issuecomment-28611179 .

Paddy-Wa commented 10 years ago

After working with it for a bit I would offer the following suggestions based on my use FWIW: 1) Schedules that kick off only during a particular date range would facilitate seasonal schedules that don't need to be changed manually. 2) As mentioned some level of security would prevent unauthorized use (or accidental use). Further security levels might allow manual intervention but not schedule changes. Just a thought...

On another note, it would be great if there were some way of adapting this for use in an existing Apache setup and even better is it could be controlled from a separate webserver from the hardware server.

I have no idea how active you may or may not be in development of this but if you are looking for enhancement ideas these would be mine at this point.

I really do prefer this application to the mobile web app it is well thought out and easy to follow.