ovh/celery-director

API is not secure

creteurlouis opened this issue · 2 comments

creteurlouis commented

Since the API is open, it makes the package obsolete for production.
A simple basic auth using Flask-HTTPAuth would solve the problem and allows us to integrate with Lambda Functions

ziirish commented

Hello,

You are absolutely right. We are aware of this situation and this point is on our roadmap.

ncrocfer commented

It's also important to note that it's possible to use Director behind a reverse proxy adding the authentication layer (it's what we're doing in OVH), so no it's not totally obsolete for production 😉

However you're totally right, it's not really user-friendly to use a reverse proxy so we need to provide another way to authenticate users. Basic and digest auth can be a first step, but we would like to add other mechanisms like LDAP or OAuth.

We'll come back to you soon with a solution 😃

  • 👍1