Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passwordless dashboard #767

Open
8666 opened this issue Feb 12, 2025 · 3 comments
Open

Passwordless dashboard #767

8666 opened this issue Feb 12, 2025 · 3 comments

Comments

@8666
Copy link

8666 commented Feb 12, 2025

Is your feature request related to a problem? Please describe.
Using password for sending messages is fine. However I would like to be able to display the server web page without password on a screen without a need for password.

Describe the solution you'd like
Some apps should have a switch "public" and the messages from these clients should be displayed on a "public" page

It should be only list of messages:

Image

Describe alternatives you've considered
Should work in a iframe

Additional context

@8666 8666 added the a:feature New feature or request label Feb 12, 2025
@eternal-flame-AD
Copy link
Member

I can see the usefulness of this feature, but maybe implementation details can be polished:

Can only admin users post public messages? Do these public messages appear on the feeds of logged in users? Should we allow unauthenticated websocket connections.

Opening an RFC to gauge interest and exact use case, please react 👍 if you want this feature too.

Related: #678 it seems in general there is a need for some kind of mechanism to make messages cross user boundaries.

@8666
Copy link
Author

8666 commented Feb 13, 2025

I currently use free Slack account so different home automation services can post (with authentication) but I can not embed that in a iframe without authentication.

Gotify seems to me something that can be hosted locally but still requires authentication to see them.

I suppose "public" will be defined by the token used.. so messages from particular services will be all public, visible by anyone, on a link accessible before being logged in.

@eternal-flame-AD
Copy link
Member

eternal-flame-AD commented Feb 13, 2025

Thanks for the input, I think it is possible with reasonable complexity (I can't guarantee it will be done in the near future though because I will have to look through existing code to make sure it doesn't exacerbate existing issues like XSS/CSRF and likely will be done after #695 ).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants