Secure Authentication

[ekawahyu]

What would be the better way of doing authentication rather than modifying the Python code where the line saying password = None to password = 'mypassword'? Thanks.

[coleifer]

You can specify it from the command-line using -P or --password. This will cause you to be prompted to securely enter the password.

[ekawahyu]

But if I run it as systemd service, ps -ax | grep sqlite_web would reveal the -P option to other users in the system. I am still trying to figure out how I can actually hash the password and not worry about keeping it as a plain text. Any suggestion? Thank you.

[coleifer]

It should not -- it will prompt you for a password which is collected securely (using getpass). The password is not even echo-ed back when you type it in.

[coleifer]

For what it's worth, if you're running it as a daemon, it might make sense to put nginx/apache in front of it and use nginx/apache basic auth to secure things.

[ekawahyu]

alright, cool, thank you!