Lua webserver no loginname required
Referring to ticket: #9671 (closed)
I know you wont remove the password need for the local webserver due to users not knowing what they are doing.
Anyway, is it possible to add a username to the Lua webinterface so I can autologin using a specific URL?
For now users can add a very simply password only containing 1 letter which can easily be guessed.
I see the need for security within the local webinterface but why just set a password. Automatic login to the status website to read info (for plugins other apps etc) is zero to non without supplying a username / password combo.
Many thanks
Activity
Replying to [ticket:15578 carni84]:
I see the need for security within the local webinterface but why just set a password. Automatic login to the status website to read info (for plugins other apps etc) is zero to non without supplying a username / password combo.
Passing the username and password via the URL is a bad idea and was explicitly removed/obsoleted by the URL specifications.
I can programmatically access the VLC HTTP interface with wget without issue. Generally, any reasonable HTTP "API" should allow passing username and/or password as out-of-band parameters.
added Status::not VLC label