[dev.icinga.com #6135] Protect installation wizard with token-auth

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6135

Created by jmeyer on 2014-05-06 13:42:49 +00:00

Assignee: (none)
Status: Resolved (closed on 2014-05-23 11:37:18 +00:00)
Target Version: 2.0-4
Last Update: 2014-05-23 11:37:18 +00:00 (in Redmine)

---

As a user, I do not want the installation wizard being publicly accessible.

Acceptance criteria:

• The wizard only starts when given a valid token
• A token is validated by comparing it with the contents of the file "{config}/setup.token"
  • This file must not publicly accessible
  • If it's accessible the wizard refuses to start

Changesets

2014-05-23 11:36:53 +00:00 by jmeyer ad4f7de

Add token authentication to the installation wizard

resolves #6135

---

Parent Task: #6136

[icinga-migration]

Updated by jmeyer on 2014-05-06 13:45:20 +00:00

• Estimated Hours set to 4

[icinga-migration]

Updated by jmeyer on 2014-05-06 14:12:35 +00:00

• Parent Id set to 6136

[icinga-migration]

Updated by jmeyer on 2014-05-23 11:37:19 +00:00

• Status changed from New to Resolved
• Done % changed from 0 to 100

Applied in changeset icingaweb2|ad4f7defc62baad62cb360806295491aae3a5284.