0xfurai / 0xfurai/peekaping

Optional password protection for status pages

Đang mở
#197 2 bình luận 3 reaction 0 người được giao Xem trên GitHub
enhancement
Ngôn ngữ chính
Go
Star
1.2k
Fork
69
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

**Is your feature request related to a problem? Please describe.**
At the moment, all status pages in Peekaping are public and can be accessed by anyone who knows the URL. While this works well for transparency, in many cases I would prefer to restrict access to certain audiences (e.g. only internal teams, customers with credentials, or while testing before going public). This lack of access control can be problematic when sensitive infrastructure details should not be visible to the general public.

**Describe the solution you'd like**
I would like to have an **optional password protection** (or simple authentication) for status pages. Ideally:
- A toggle in the admin UI to enable/disable protection.
- A configurable password that needs to be entered before the page is displayed.
- A simple login prompt (HTTP Basic Auth or lightweight form).
- Secure storage of the password (e.g. hashed).
- Backward compatibility: status pages remain public unless protection is explicitly enabled.

**Describe alternatives you've considered**
- Hosting Peekaping behind a reverse proxy with authentication rules (e.g. Nginx basic auth). This works, but is less convenient, requires extra infrastructure, and cannot be configured per status page inside Peekaping.
- Restricting access at the network/firewall level, but this removes the flexibility to share the page selectively with clients.
- Waiting for a potential larger role-based access system, but a simple password protection would already cover the most common needs with much less complexity.

**Additional context**
- Use case: sharing a status page only with paying customers or internal staff before making it public.
- This feature would align with future plans for user accounts or groups, but could be implemented as a lightweight intermediate solution.
- It would increase the adoption of Peekaping in environments with compliance or security requirements.

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Hướng nghiên cứu

Look at the status page rendering logic and admin UI components. The feature requires adding an authentication toggle, password storage (likely hashed in the database), and a login prompt (HTTP Basic Auth or a form). Check existing user/auth patterns in the codebase. A newcomer would need to understand the project's structure for handling routes, middleware, and configuration.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Đánh giá

Công nghệ
go
Lĩnh vực
authentication, security
Loại issue
Tính năng
Độ khó
4/5
Thời gian dự kiến
3-5 ngày
Mức độ hoạt động
Đình trệ
Độ rõ ràng
Đặc tả rõ ràng
Mức phù hợp với người mới
45/100

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.