Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement local authentication for the admin tool #314

Closed
GUI opened this issue Dec 8, 2016 · 0 comments
Closed

Implement local authentication for the admin tool #314

GUI opened this issue Dec 8, 2016 · 0 comments
Milestone

Comments

@GUI
Copy link
Member

GUI commented Dec 8, 2016

Right now, to login to the API Umbrella admin tool, it currently relies on 3rd party login providers (like Google, GitHub, etc). One of the providers we enabled by default was Persona, which was nice, since it didn't require any oauth2 tokens or configuration on the part of the API Umbrella administrator. This let you login to the API Umbrella admin immediately after installing a stock API Umbrella installation without any further configuration.

However, with Persona going away (#313), it means we don't really have an easy option for logging into the admin without requiring the API Umbrella administrator to setup tokens with at least 1 authentication provider.

While I like not dealing with authentication, I think it might be worth implementing a simple local login option that API Umbrella admins could use. They could still disable this local login option if they'd prefer to rely only on 3rd parties, but having a local login option might be the lowest friction option for people looking to try API Umbrella. The need for a local login option has also come up previously for more firewalled environments that might not be able to utilize 3rd party logins (eg, #124, #247).

With our usage of Devise to handle logins, it actually shouldn't a huge lift to implement a very basic login mechanism, since Devise does most all of that for us. We mainly just need to enable Devise's default behavior around having local accounts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant