[GH-ISSUE #370] how to put the dufs page with Login information into iframe by URL #197

Closed
opened 2026-04-08 16:51:05 +03:00 by zhus · 2 comments
Owner

Originally created by @hjx620 on GitHub (Mar 20, 2024).
Original GitHub issue: https://github.com/sigoden/dufs/issues/370

Specific Demand

put the page into iframe without Login

my dufs ip is http://192.168.5.67:32381. I want to embed the dufs page into another page without login.

I have url,which is http://admin:admin@192.168.5.67:32381. But the url with username and password is not identified by iframe. I must login with enter ing my username and password by my hand. I want to put
username and password in the url,which can be identified by iframe.what should i do?
thank you.

Implement Suggestion

Originally created by @hjx620 on GitHub (Mar 20, 2024). Original GitHub issue: https://github.com/sigoden/dufs/issues/370 ## Specific Demand put the page into iframe without Login <!-- What feature do you need, please describe it in detail. --> my dufs ip is http://192.168.5.67:32381. I want to embed the dufs page into another page without login. I have url,which is http://admin:admin@192.168.5.67:32381. But the url with username and password is not identified by iframe. I must login with enter ing my username and password by my hand. I want to put username and password in the url,which can be identified by iframe.what should i do? thank you. ## Implement Suggestion <!-- If you have any suggestion for complete this feature, you can tell us. -->
zhus closed this issue 2026-04-08 16:51:05 +03:00
Author
Owner

@hjx620 commented on GitHub (Mar 20, 2024):

how can i put the username and password into the URL effectively?

mmexport1710901107600

<!-- gh-comment-id:2008570368 --> @hjx620 commented on GitHub (Mar 20, 2024): how can i put the username and password into the URL effectively? ![mmexport1710901107600](https://github.com/sigoden/dufs/assets/73241960/49776170-2a63-4916-bd3e-2420a002f41c)
Author
Owner

@sigoden commented on GitHub (Mar 20, 2024):

All basic auth related behaviors are controlled by the browser. There's nothing dufs can do.

It is not safe to expose username and password on the front end.

Instead of setting the username and password and having it show up in the url, why not set read-only permissions on the directory via the auth control.

<!-- gh-comment-id:2008601812 --> @sigoden commented on GitHub (Mar 20, 2024): All basic auth related behaviors are controlled by the browser. There's nothing dufs can do. It is not safe to expose username and password on the front end. Instead of setting the username and password and having it show up in the url, why not set read-only permissions on the directory via the auth control.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sigoden/dufs#197