Comments (4)
Seconded. I'd like to be able to switch between my admin and user accounts
from scot.
+1 this is also really needed from a security perspective.
Is it possible maybe to expire cookies automatically after a configurable period of time?
from scot.
Cookies do expire, setting is in scot.conf and defaults to 14400 seconds.
The problem is that most browsers store your basic auth credentials and
happy resupply them. This is
a common problem.
This is being addressed though, in the next version that is nearing
completion. The entire authentication system has
been reworked. There will be additional options to get you away from basic
auth if you wish.
The first option will be known as "Remoteuser" and relies on the Apache
front end to perform the authentication. This
will allow you to integrate SSO options through Apache modules. The second
option will be "LDAP" and that will present
a form based login that auths to your LDAP server and creates a session
that is revokable (logout). The final option
will be purely local auth, in other words, a form based login that
authenticates against a local database collection
within SCOT.
If none of those are acceptable, we would welcome additional methods that
you implement.
We are pushing for release in April.
Todd
On Thu, Mar 17, 2016 at 4:40 AM, ghub2015 [email protected] wrote:
+1 this is also really needed from a security perspective.
Is it possible maybe to expire cookies automatically after a configurable
period of time?—
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub
#14 (comment)
from scot.
Note: Remoteuser will always have difficulty with "logging off" due to the browser happily caching and providing authentication to the Apache web service. LDAP and Local should be able to "log-off". Still looking into this but if anybody wants to help, I'm listening. thanks.
from scot.
Related Issues (20)
- install.sh fails to get elasticsearch gpg key HOT 3
- Install script ends abruptly HOT 2
- github linked demo times out HOT 1
- Demo site down ? HOT 5
- Multiple questions HOT 3
- RPM spec HOT 8
- Authentication failure after installation HOT 1
- Docker-Perl does not install HOT 3
- /var/log/mongo directory missing HOT 6
- game exited with code 255 HOT 1
- User Defined Forms Not Persisting Input Data
- Online demo not working HOT 2
- mongodb errors on first-time login HOT 5
- Failed to log in due to bad CSRF token. Please reload the page and then log in. Error: Failed CSRF check HOT 1
- build failed on AArch64, Fedora 33 HOT 6
- Issues with docker-compose.yml HOT 5
- Unable to log in to SCOT - bad CSRF token HOT 1
- How to set Email Injest Parser module for Arcsight HOT 1
- Is there any Docker image of SCOT for development purposes? HOT 1
- Integrate MISP Platform HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scot.