Enable the "visitor" mode

[digitalLumberjack]

Allow other users to connect the manager throught a visitor mode.
The means to add some sort of authentication.

[sveetch]

Well there is two things in you issue.

• Enable authentification. This is either with the Django session/auth or either a webserver auth (like with htacess). The first one can be enabled easily, but i planned to totally remove the session/auth to totally avoid database usage, to enlight cpu/memory usage. The other is for "real" webserver, like Apache/lhttpd/nginx/etc.. but actually we don't have one (again to save memory/cpu usage).
• Visitor mode. Depend on choice for the previous part.

Frankly, for the first release i thought we don't really have to bother on these things.

[digitalLumberjack]

I was not thinking about the first release. Just an idea

Le lun. 21 sept. 2015 à 13:39, David THENON notifications@github.com a
écrit :

Well there is two things in you issue.

Enable authentification. This is either with the Django session/auth
or either a webserver auth (like with htacess). The first one can be
enabled easily, but i planned to totally remove the session/auth to totally
avoid database usage, to enlight cpu/memory usage. The other is for "real"
webserver, like Apache/lhttpd/nginx/etc.. but actually we don't have one
(again to save memory/cpu usage).

Visitor mode. Depend on choice for the previous part.

Frankly, for the first release i thought we don't really have to bother on
these things.

—
Reply to this email directly or view it on GitHub
#23 (comment)
.

[MaxCorpEnjoy]

Adding some sort of authentification should be a requirement if you are not alone on your LAN, or if, for some reason, you want to access your recalbox from the internet.
So it would be good if there was a variable somewhere in the recalbox to :

• either enabling/disabling the whole interface
• or enabling/disabling authentification (and setting the password)

[sveetch]

If we "secure" the manager interface it wont be a switchable feature, because the machinery need for authentication is too complex to implement it as a conditional feature and will require too many time to build and manage.

I'm agree about authentication requirement for non private LAN, it's just on raspberry we are somewhat restrained on ressources, but enabling will take some more ressources in the django instance.

The recalbox team should validate than the manager can take some more ressources on system, so i will be more confident about enabling authentication. Itself the authentication is pretty easy to enable.