Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to add Authenticator for fuidd. #1419

Closed
SlimRG opened this issue Apr 22, 2024 · 4 comments
Closed

How to add Authenticator for fuidd. #1419

SlimRG opened this issue Apr 22, 2024 · 4 comments
Labels
?? - Help Wanted AAAAAAAH help! Extra attention is needed!

Comments

@SlimRG
Copy link

SlimRG commented Apr 22, 2024

Is your feature request related to a problem? Please describe

I have static ip (https://slimhome.tech/#/login) and fluiid.
So, my pass was brootforced by me by 45 days.
It's a secure problem, so I want to fix it.

Describe the solution you'd like

After entering login/pass show page to write google auth pin or with QR code to create it if no key inserted before.

Describe alternatives you've considered

No response

Additional information

https://www.rfc-editor.org/rfc/rfc6238
https://github.com/googleapis/google-auth-library-nodejs

@SlimRG SlimRG added the FR - Enhancement New feature or request label Apr 22, 2024
@SlimRG SlimRG changed the title How to add Authenticator for fuiid. How to add Authenticator for fuidd. Apr 22, 2024
@pedrolamas
Copy link
Member

pedrolamas commented Apr 22, 2024

Fluidd runs on the browser, so there is no way to ensure authorization (that would always have to be performed server side).

Such a feature would first need to be implemented as part of Moonraker which provides all the server side APIs to Fluidd.


On a side note, you should NOT expose a printer to the internet!

If someone somehow bypasses the Moonraker Authentication, they will have full access to your printer, to the point that they could turn the heater on until it melts the whole thing and causes a fire!

Use a VPN instead to ensure secure access to your resources or something like Cloudflare Tunnels.

@pedrolamas pedrolamas added GH - Upstream First Temporarily impossible because of other factors Upstream - Moonraker For everything API related ?? - Help Wanted AAAAAAAH help! Extra attention is needed! and removed FR - Enhancement New feature or request GH - Upstream First Temporarily impossible because of other factors Upstream - Moonraker For everything API related labels Apr 22, 2024
@SlimRG
Copy link
Author

SlimRG commented Apr 22, 2024

Arksine/moonraker#842

@SlimRG
Copy link
Author

SlimRG commented Apr 22, 2024

If someone somehow bypasses the Moonraker Authentication, they will have full access to your printer, to the point that they could turn the heater on until it melts the whole thing and causes a fire!

Use a VPN instead to ensure secure access to your resources or something like Cloudflare Tunnels.

If someone bypasses my home assistant - he could open terrariums, so.... But I uses secure two factor system and so...

VPN is under law in Russian federation! I don't want in prison

@SlimRG
Copy link
Author

SlimRG commented Apr 23, 2024

Add pull request with support for moonraker:
Arksine/moonraker#844

@SlimRG SlimRG closed this as completed Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
?? - Help Wanted AAAAAAAH help! Extra attention is needed!
Projects
None yet
Development

No branches or pull requests

2 participants