authentication - 在 etherpad lite 中应用身份验证

Question

我们如何防止 etherpad lite pad 被公众访问。有什么方法可以防止未经授权访问 etherpad。只有拥有用户名和密码的用户才能访问键盘。

我在 Windows 上使用 etherpad lite。谢谢。

Answer 1

您必须在 etherpad 的 settings.json 中进行配置。原始配置有据可查。

这是您应该注意的配置部分。

  /* Users must have a session to access pads. This effectively allows only group pads to be accessed. */
  "requireSession" : true,

  /* Users may edit pads but not create new ones. Pad creation is only via the API. This applies both to group pads and regular pads. */
  "editOnly" : false,

  /* How long may clients use served javascript code (in seconds)? Without versioning this
     may cause problems during deployment. Set to 0 to disable caching */
  "maxAge" : 21600, // 60 * 60 * 6 = 6 hours

  /* This is the path to the Abiword executable. Setting it to null, disables abiword.
     Abiword is needed to advanced import/export features of pads*/  
  "abiword" : null,

  /* This setting is used if you require authentication of all users.
     Note: /admin always requires authentication. */
  "requireAuthentication": true,

  /* Require authorization by a module, or a user with is_admin set, see below. */
  "requireAuthorization": true,

  /* Users for basic authentication. is_admin = true gives access to /admin.
     If you do not uncomment this, /admin will not be available! */
  /*
  "users": {
    "admin": {
      "password": "changeme1",
      "is_admin": true
    },
    "user": {
      "password": "changeme1",
      "is_admin": false
    }
  },
  */