You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You can see there is no authentication option enabled by default for the HTTP(GUI) endpoint ( we can confirm this by simply setting up a docker instance of mindsdb). Also, we should add a mindsdb: username and an empty password for the MySQL weak credential tester too.
There is no authentication enabled by default but we can find configuration files in the documentation that are using basic authentication too with usernames and passwords like mindsdb:123, the authentication is a basic authentication header so we can easily test weak credentials.
for post-login validation, we can send an HTTP GET request to our tsunami callback server easily by trying to add a file as Datasource with an arbitrary URL:
The text was updated successfully, but these errors were encountered:
tooryx
added
the
Contributor queue
When a contributor has already one issue/PR in review, we put the following ones on hold with this.
label
May 22, 2024
Mindsdb has a default configuration file when we spin up an instance with the docker:
You can see there is no authentication option enabled by default for the HTTP(GUI) endpoint ( we can confirm this by simply setting up a docker instance of mindsdb). Also, we should add a
mindsdb:
username and an empty password for the MySQL weak credential tester too.There is no authentication enabled by default but we can find configuration files in the documentation that are using basic authentication too with usernames and passwords like
mindsdb:123
, the authentication is a basic authentication header so we can easily test weak credentials.for post-login validation, we can send an HTTP GET request to our tsunami callback server easily by trying to add a file as Datasource with an arbitrary URL:
![image](https://private-user-images.githubusercontent.com/86597176/331187939-cf1803ac-7b32-4cd0-8d89-5aaae004b415.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yXb_VB-9qmpNThQ-Xl1k0zJMmlYwpy9hBOGz_E2emrU)
The text was updated successfully, but these errors were encountered: