[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PSA: Make sure your Airflow instance isn't public and isn't Google indexed

> On 5 Jun 2018, at 19:51, Maxime Beauchemin <maximebeauchemin@xxxxxxxxx> wrote:
> What about a clear alert on the UI showing when auth is off? Perhaps a
> large red triangle-exclamation icon on the navbar with a tooltip
> "Authentication is off, this Airflow instance in not secure." and clicking
> take you to the doc's security page.

I think this would be super useful.

I also like the Jupyter approach where each notebook is protected with a random token by default (if auth is False) 
and you need to use `--LabApp.token=“"` in the opposite case.