Home | Tutorials | Wiki | Issues
Ask Your Question
1

GZWeb: Security Options?

asked 2015-03-31 13:24:04 -0500

Jordan gravatar image

updated 2015-03-31 13:24:36 -0500

Hello,

Quick question about gzweb, the web client for Gazebo. I've set it up and it's working perfectly, no problems connecting. Is there any way to put some sort of security on it though? With the default install, I can connect to the web client from any computer on the open internet, which is a bit unnerving. Can access to the WebUI be credential protected in some way, or perhaps limited to access from specific IPs?

Thanks!

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
1

answered 2015-03-31 13:58:57 -0500

hugomatic gravatar image

Hi Jordan,

Unfortunately, gzweb does not support any security for the moment. We will probably add it as a feature in the future, but there is no time frame. If you want to add your own, you will have to secure 2 separate servers:

  • The node http server that serves the web app (in http/client)
  • The websocket server that publishes and subscribes to the Gazebo server (gzbridge)

Hugo Boyer, OSRF

edit flag offensive delete link more

Comments

Unfortunate, but a quick and clear answer. Thank you.

Jordan gravatar imageJordan ( 2015-03-31 14:09:17 -0500 )edit
0

answered 2016-02-03 11:32:22 -0500

suzanak gravatar image

You can start by adding logic to this function in gzbridge/ws_server.js to determine wether the origin is allowed or not:

function originIsAllowed(origin) {
return true; }

edit flag offensive delete link more
Login/Signup to Answer

Question Tools

1 follower

Stats

Asked: 2015-03-31 13:24:04 -0500

Seen: 254 times

Last updated: Feb 03 '16