Authentication function on the Web UI

[SiempreII]

In RPKI Validator 3, I don't see kiosk mode or a similar function that was visible on RPKI Validator version 2 in order to restrict the change permission on the Web UI for some users.
It would be useful to have the authentication function brought back to version 3.

[lolepezy]

Hi,

Not having authentication in validator 3 was a deliberate decision, because having one would normally assume that we also support SSL, maybe some kind of role system and so, while we wanted to keep it simple. In principle, if you need to protect the validator from modifications, it is enough to use proxy in front of it, and restrict POST and PUT requests (that's what we've done on https://rpki-validator.ripe.net).

I understand that you probably find it a handy feature and we probably implement it in the future, but it will be at the bottom of the priority list.

[as9009]

It would be handy to have a switch to enable kiosk mode and turn off Web UI write access all together.