Security for remote access

[fonsp]

Single access tokens or password or ?

[fonsp]

I added instructions for setting up an SSH tunnel on the README (which is secure), that should be enough for now.

[Ellipse0934]

It would be useful to have a password page similar to jupyter-nb. When running Pluto inside a container in a random cluster machine it's not feasible to get a link or to pass an access key back to the user, neither is it feasible to have no security at all. A password page would avoid this altogether.
Maybe consider reopening this issue ?

[fonsp]

For those setups we recommend that you build on top of an existing authentication system, like an authenticated nginx forward proxy or JupyterLab, and set require_secret_for_access=false. (This is not disabling all security.)

[3f6a]

I added instructions for setting up an SSH tunnel on the README (which is secure), that should be enough for now.

I can't find this on the readme. (I realize this is an old thread so maybe this comment is outdated?)

For those setups we recommend that you build on top of an existing authentication system, like an authenticated nginx forward proxy or JupyterLab, and set require_secret_for_access=false. (This is not disabling all security.)

Where can I read more about how to setup this?