Project

General

Profile

Bug #38783

Add ability to log directly into new UI with a token

Added by Ken Moore about 2 years ago. Updated about 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
Erin Clark
Category:
GUI (new)
Target version:
Seen in:
Severity:
High
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

The new UI appears to be missing a way to supply an authentication token via the URL in order to automatically login to the UI (bypassing the username/password prompt).

This is a regression as the old UI had this available specifically so that TrueView could manage handing out login sessions to FreeNAS instances via temporary auth tokens.

If I recall correctly, the URL for the old UI just needed something like "?token=[auth_token]" appended in order to pass that token into the UI and the UI promptly redirected to the standard URL (so the user does not see the token) after saving the token into memory or something.


Related issues

Blocked by FreeNAS - Feature #40344: Add API endpoint to pass MIDDLEWARE_TOKEN to web UIDone

Associated revisions

Revision 1f000986 (diff)
Added by Erin Clark about 2 years ago

Add ability to log directly in with a token Ticket: #38783

Revision 1ba734bb (diff)
Added by Erin Clark about 2 years ago

Token should be nullified before the callback Ticket: #38783

History

#1 Updated by Erin Clark about 2 years ago

  • Status changed from Unscreened to Screened
  • Assignee changed from Release Council to Erin Clark
  • Seen in changed from 11.2-BETA3 to 11.2-BETA1

#3 Updated by William Grzybowski about 2 years ago

I will note that passing auth token to the URL poses a security issue.

Not sure how possible that is but we should investigate alternatives (e.g. using POST)

#4 Updated by Dru Lavigne about 2 years ago

  • Target version changed from Backlog to 11.2-BETA3

#6 Avatar?id=13649&size=24x24 Updated by Ben Gadd about 2 years ago

TrueView is depending on this feature, do not drop from this release.

#12 Updated by Erin Clark about 2 years ago

  • Blocked by Feature #40344: Add API endpoint to pass MIDDLEWARE_TOKEN to web UI added

#14 Updated by Erin Clark about 2 years ago

  • Status changed from Screened to In Progress

#16 Updated by Dru Lavigne about 2 years ago

  • Subject changed from Regression: Missing auth token login routine to Add ability to log directly into new UI with a token

#17 Updated by Erin Clark about 2 years ago

  • Status changed from In Progress to Ready for Testing

#18 Updated by Dru Lavigne about 2 years ago

  • Needs Merging changed from Yes to No

#19 Updated by Bonnie Follweiler about 2 years ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Test Passed in FreeNAS-11.2-MASTER-201808300858

#21 Updated by Dru Lavigne about 2 years ago

  • Status changed from Passed Testing to Done
  • Needs Doc changed from Yes to No

Also available in: Atom PDF