The backend web UI management does not have a password, and any user can operate it, which is not secure

[mmm8955405]

Feature description

Add backend administrator password

[lovromazgon]

Hi @mmm8955405! This seems more like a feature request than a bug, so I marked it as such. The current UI is not meant to be publicly hosted, although we have discussed adding user management to Conduit, but there were more essential features we had to focus on.

In the meantime, while this is not implemented in Conduit, I propose you look into adding a proxy server that sets up authentication in front of Conduit (e.g. nginx).

[devarispbrown]

@mmm8955405 can you talk more about what you're trying to do that you would need a password for the UI?

[mmm8955405]

Hi @mmm8955405! This seems more like a feature request than a bug, so I marked it as such. The current UI is not meant to be publicly hosted, although we have discussed adding user management to Conduit, but there were more essential features we had to focus on.

In the meantime, while this is not implemented in Conduit, I propose you look into adding a proxy server that sets up authentication in front of Conduit (e.g. nginx).

Okay, but I think we need the password for the UI

[mmm8955405]

@mmm8955405 can you talk more about what you're trying to do that you would need a password for the UI?

Yes, a password for the UI should be required. Even though there is still a lot to be done at the moment

[mmm8955405]

There may still be some issues at present. In the latest Docker image:
#1207

[lovromazgon]

UI will be deprecated soon, see #1911.