Secure frontend behind authentication #25

New issue

Griefed · 2026-06-23T18:35:05+02:00

Griefed commented

2026-06-23 18:35:05 +02:00

@Griefed on GitLab · https://git.griefed.de/Griefed/Monitoring/-/issues/7

Allow locking of frontend behind authentication.
Said authentication should be disableable (is that a word?) via property.

> **@Griefed** on **GitLab** · https://git.griefed.de/Griefed/Monitoring/-/issues/7 Allow locking of frontend behind authentication. Said authentication should be disableable (is that a word?) via property.

Griefed commented

2026-06-23 18:35:05 +02:00

@Griefed on GitLab

Security https://spring.io/guides/gs/securing-web/

> **@Griefed** on **GitLab** Security https://spring.io/guides/gs/securing-web/

Griefed commented

2026-06-23 18:35:05 +02:00

@Griefed on GitLab

Maybe make auth-requirement configurable to the extent of

Settings (always secured)
Information (toggle)

> **@Griefed** on **GitLab** Maybe make auth-requirement configurable to the extent of - Settings (always secured) - Information (toggle)

Griefed commented

2026-06-23 18:35:05 +02:00

@Griefed on GitLab

de.griefed.monitoring.security.all=all should result in settings AND information being secured

de.griefed.monitoring.security.all=settings should result in settings being secured and informantion NOT being secured

de.griefed.monitoring.security.all=none should result in neither settings nor information being secured. (usefull if you run Monitoring at home and you are the only one in your network, or want to use an external authentication setup, like Authelia or something like that)

> **@Griefed** on **GitLab** `de.griefed.monitoring.security.all=all` should result in settings AND information being secured `de.griefed.monitoring.security.all=settings` should result in settings being secured and informantion NOT being secured `de.griefed.monitoring.security.all=none` should result in neither settings nor information being secured. (usefull if you run Monitoring at home and you are the only one in your network, or want to use an external authentication setup, like Authelia or something like that)

Griefed commented

2026-06-23 18:35:06 +02:00

@Griefed on GitLab

https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter

> **@Griefed** on **GitLab** https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter

Griefed commented

2026-06-23 18:35:06 +02:00

@Griefed on GitLab

https://medium.com/@altunkan/spring-boot-authentication-with-vuejs-jwt-http-only-cookie-4d8cfe7e4f0f

> **@Griefed** on **GitLab** https://medium.com/@altunkan/spring-boot-authentication-with-vuejs-jwt-http-only-cookie-4d8cfe7e4f0f

Sign in to join this conversation.