You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2021/12/15 05:25:21 UTC

[GitHub] [superset] akmr9 opened a new issue #17759: How to secure superset charts embedded using iframes into public websites

akmr9 opened a new issue #17759:
URL: https://github.com/apache/superset/issues/17759


   Hello,
   
   I am new to superset. Can someone please guide me on how to secure the superset charts embedded into public websites using iframes? Basically I want to restrict the usage of the charts outside of my website. Can we use host application authentication to authenticate with superset or can we use csrf tokens etc? 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] aeperalta commented on issue #17759: How to secure superset charts embedded using iframes into public websites

Posted by GitBox <gi...@apache.org>.
aeperalta commented on issue #17759:
URL: https://github.com/apache/superset/issues/17759#issuecomment-995758035


   There is [SIP-75](https://github.com/apache/superset/issues/17187) that is gonna be released the next year Q1-Q2 I readed in [slack](https://apache-superset.slack.com/archives/C01EP56QGTS/p1637830159042800). And there is the solution that @przemekd said. Personally, I'll wait for the "official" authentication embedding.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] przemekd commented on issue #17759: How to secure superset charts embedded using iframes into public websites

Posted by GitBox <gi...@apache.org>.
przemekd commented on issue #17759:
URL: https://github.com/apache/superset/issues/17759#issuecomment-995750769


   Yep, you can implement a custom authentication module (see https://sairamkrish.medium.com/apache-superset-custom-authentication-and-integrate-with-other-micro-services-8217956273c1).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org