Re: [Discussion] Add a key-based authentication to the dashboard

[Ming Wen]

I think we can add support for https at the same time. I wil do it.

Thanks,
Ming Wen, Apache APISIX
Twitter: _WenMing


Zhiyuan Ju <juzhiy...@apache.org> 于2020年2月27日周四 下午7:30写道：

> It's a good idea and can be landed on Dashboard quickly.
>
> Best Regards!
> @ Zhiyuan Ju <https://www.shaoyaoju.org/>
>
>
> doggieと杨 <88786...@qq.com> 于2020年2月27日周四 下午7:02写道：
>
> > this is a good way.
> >
> >
> >
> >
> > ------------------&nbsp;原始邮件&nbsp;------------------
> > 发件人:&nbsp;"YuanSheng Wang"<membp...@apache.org&gt;;
> > 发送时间:&nbsp;2020年2月27日(星期四) 晚上6:58
> > 收件人:&nbsp;"dev@apisix.apache.org"<dev@apisix.apache.org&gt;;
> >
> > 主题:&nbsp;[Discussion] Add a key-based authentication to the dashboard
> >
> >
> >
> > Hi:
> >
> > After the Apache APISIX instance is started, the current Admin API does
> not
> > have any authentication verification mechanism, which is very insecure
> for
> > users.
> >
> > I recommend adding a simple KEY token authentication to the Admin API.
> >
> > For example, specifying a whitelist of allowed tokens directly in
> > `conf/config.yaml` might be an easy way.
> >
> >
> >
> > --
> > *MembPhis*
> > My github: https://github.com/membphis
> > Apache APISIX: https://github.com/apache/incubator-apisix
>