You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 2, 2023. It is now read-only.
Is there a way to implement a password protection for uploads, so that only
people which know a password can upload a file?
In the first time, it could be possible to add a list of known passwords (defined in the config file), and deny file upload to users who don't supply a valid password.
Users who have a link the download a file don't need to know a valid password to get the file.
I think that a complete user authentication/authorization mechanism is beyond the scope of flaskup. A custom authentication mechanism could be added in the web server in front of flaskup (like mod_auth* in apache).
The text was updated successfully, but these errors were encountered:
If FLASKUP_UPLOAD_PASSWORDS is defined (as a list of valid passwords),
Flaskup will ask users to provide a password from this list when he
upload a file. If the password is not known the upload is denied.
If FLASKUP_UPLOAD_PASSWORDS is not defined (or the list is empty),
Flaskup acts as normal: no passwords needed.
In the first time, it could be possible to add a list of known passwords (defined in the config file), and deny file upload to users who don't supply a valid password.
Users who have a link the download a file don't need to know a valid password to get the file.
I think that a complete user authentication/authorization mechanism is beyond the scope of flaskup. A custom authentication mechanism could be added in the web server in front of flaskup (like mod_auth* in apache).
The text was updated successfully, but these errors were encountered: