Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does username / password authentication to the web ui exist in v2? #384

Closed
jb510 opened this issue Apr 8, 2024 · 2 comments
Closed

Does username / password authentication to the web ui exist in v2? #384

jb510 opened this issue Apr 8, 2024 · 2 comments
Labels

Comments

@jb510
Copy link

jb510 commented Apr 8, 2024

I read everything I could find and think I've inferred that v2 has no authentication capability. The v2 web UI is publically visible on the network, and literally anyone with network access as full control.

Reading the 3.0 documentation it sounds authentication is a feature there, and it sounds an awful lot like HTTP Basic Authentication.

Questions before I break things my first day using this.

Am I correct in my assumptions above?
Is there any way to upload an .htaccess and .htpasswd file on v2 such that it is protected by basic auth?
If not, the super annoying question, how stable is 3.0 and could I use that instead?

@jb510 jb510 added the Question label Apr 8, 2024
Copy link

github-actions bot commented Apr 8, 2024

Thank your for submiting, please be sure you followed template or your issue may be dismissed.

@luc-github
Copy link
Owner

Authentication is available in ESP3D 2.1 and 3.0 but is not enabled by default :
2.1: https://github.com/luc-github/ESP3D/blob/2.1.x/esp3d/config.h#L88-L89
https://github.com/luc-github/ESP3D/?tab=readme-ov-file#default-configuration

3.0: https://github.com/luc-github/ESP3D/blob/2.1.x/esp3d/config.h#L88-L89
http://esp3d.io/esp3d/v3.x/documentation/authentication/index.html

The current mechanism is not the basic Auth - The login / password are send in POST then the FW keep tracking of the request of the IP and the Cookie generated by the IP and time. If no refresh between 3 min the cookie is revocate and need a new Login / password.
Because there is no support of https for the moment this the best that can be done for the moment.

Is there any way to upload an .htaccess and .htpasswd file on v2 such that it is protected by basic auth?

No, the webserver is not httpd but espressif webserver which is very light due to MCU performance

If not, the super annoying question, how stable is 3.0 and could I use that instead?

2.1 is frozen version
3.0 is developement version but it is usable, several people use it - the choice is up to you

Note

WebUI is not a stand alone solution it go with corresponding FW and Specific Version
WebUI 2.1 go with ESP3D 2.1, ESP3DLib 1.0, grblHAL
WebUI 3.0 go with ESP3D 3.0, ESP3DLib 3.0, grblHAL and ESP3D-TFT 1.0

Repository owner locked and limited conversation to collaborators Apr 9, 2024
@luc-github luc-github converted this issue into discussion #385 Apr 9, 2024

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
Projects
None yet
Development

No branches or pull requests

2 participants