Skip to content
This repository has been archived by the owner on Feb 7, 2023. It is now read-only.

Implement API client basic authentication #1

Closed
dmsimard opened this issue Apr 17, 2019 · 1 comment
Closed

Implement API client basic authentication #1

dmsimard opened this issue Apr 17, 2019 · 1 comment

Comments

@dmsimard
Copy link
Contributor

The API can require authentication for reads and writes: https://ara.readthedocs.io/en/feature-1.0/api-security.html

We're using axios (example) to query the API and it supports basic authentication: https://stackoverflow.com/questions/44072750/how-to-send-basic-auth-with-axios

How should the user supply the necessary credentials ? It would probably need to be some sort of login screen ? I'm not knowledgeable about the best practices for authentication in javascript apps.

For what it's worth, CORS is already working between the API and ara-web.
The whitelist can be provided through ARA_CORS_ORIGIN_WHITELIST.

@dmsimard
Copy link
Contributor Author

This is WIP in https://review.opendev.org/#/c/662017/

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant