You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/01/22 07:43:54 UTC

[GitHub] [apisix-dashboard] mojerro opened a new issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

mojerro opened a new issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292


   当前设置的密码都是明文密码，存储在文件中，有一定的安全隐患。
   同时目前登陆界面如果处于公网，没有登录尝试次数限制，有可能会被爆破


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] mojerro commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
mojerro commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1020923836


   I'll have a try, and I belive that apisix will go better~


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] juzhiyuan commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
juzhiyuan commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1038032564


   Hi @jwrookie, @mojerro here has one doc about V3 Planning https://docs.qq.com/doc/DTkdBcG5IT3V6VER3 you could leave comments to it 😉 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] jwrookie commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
jwrookie commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1033252677


   MFA(Multi-Factor Authentication) can help us, and also not recommended to open it to the public network


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] zaunist commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
zaunist commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1019493016


   Hi, @mojerro . If you have any idea, welcome to PRs.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] bzp2010 commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
bzp2010 commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1019707679


   @mojerro 
   
   We already understand your needs. Possibly implement it in an upcoming release, and if you'd like to submit a PR to do it that would be great.
   
   BTW, typically the dashboard will be deployed on the corporate intranet rather than opened to the public network, where it is often protected by VPNs etc. Even if the current dashboard supports the features you are pointing out now, it is not recommended to open it to the public network.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] mojerro commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
mojerro commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1020923836


   I'll have a try, and I belive that apisix will go better~


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-dashboard] juzhiyuan commented on issue #2292: 希望支持设置密文密码，而不是明文密码。同时为登陆增加简单的登陆尝试限制

Posted by GitBox <gi...@apache.org>.
juzhiyuan commented on issue #2292:
URL: https://github.com/apache/apisix-dashboard/issues/2292#issuecomment-1038032564


   Hi @jwrookie, @mojerro here has one doc about V3 Planning https://docs.qq.com/doc/DTkdBcG5IT3V6VER3 you could leave comments to it 😉 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org