Password-protected public album link

[pulsejet]

          BTW, @pulsejet how difficult would be to add a password to increase the security of sharing an album via public link? It would be nice to have an additional security layer when you share sensitive photos (e.g. children's albums)

Originally posted by @darguez in nextcloud/photos#1452 (comment)

[darguez]

How about a temporal workaround by requesting a password directly from the web server?

For instance in Apache 2 it could be:

<LocationMatch ^/apps/memories/a/[\w-]{32} >
     AuthUserFile /path/to/.htpasswd
     AuthName "Password Protected"
     AuthType Basic
     require valid-user
  </LocationMatch>

I've tried and the login/password is required when try to open a public sharing link, but after entering the credentials the message "Error" is shown in the center of the web page (and nothing else)

[ghost]

How about a temporal workaround by requesting a password directly from the web server?

For instance in Apache 2 it could be:

<LocationMatch ^/apps/memories/a/[\w-]{32} >
     AuthUserFile /path/to/.htpasswd
     AuthName "Password Protected"
     AuthType Basic
     require valid-user
  </LocationMatch>

I've tried and the login/password is required when try to open a public sharing link, but after entering the credentials the message "Error" is shown in the center of the web page (and nothing else)

Have the same problem with traefik proxy. The nextcloud server returns 401.

[luxzg]

I'd love something like this. For a few people (close family) I've created accounts, but for some stuff I'd like an album to be ... semi-private. Eg if I share a link + password to kindergarten chat, I'm ok with all the parents to have access, and if they fwd link+pass to their own relatives (though unlikely). But I don't want to share photos of 15-20 kids entirely publicly, nor do I want to create accounts for 20-30 people. So currently I don't share such albums at all, I just pick a few photos manually and post to chat directly. Having password protection would be easy way to skip all the extra work, plus if I add photos to album afterwards they'd be available. Not to mention all the perks of presentation inside a gallery vs sending files as files. I'd probably skip making accounts even for relatives, as they tend to forget how to login anyway ;D so sending link + pass for new albums would be way way better workflow for sharing.

[timdah]

Are you currently working on it @pulsejet or want some help? I'm new to nextcloud app development but would invest some spare time to speed up the implementation of the feature.

Yesterday I played around a bit and added a password form field and tried to reuse the nextcloud core template for file share password prompts. After a while I realized that it's all based on the share token created through the photos webDAV API. So as long as the this is the case, any password authentication implemented in the memories app would be pointless because the album is publicly visible through the photos app under /apps/photos/public/<token>.

Now I ask myself whether there is a (safe) way to give public access to files without a token generated by nextcloud core/photos.

[XRayBarnabey]

Hi ! Any way to have the "password on public link" via memories since those post ?

Thx !