tobegit3hub/seagull

Support authentication and security stuff

Open

#27 opened on Dec 12, 2014

View on GitHub
 (1 comment) (0 reactions) (0 assignees)JavaScript (1,928 stars) (274 forks)batch import
enhancementhelp wanted

Description

Here's the comment from Solomon Shykes in HN.

Everything you say is true, but it doesn't mean this web ui is not useful, or a bad idea. It just means that it should add authentication :)

Since we are developing Docker's identity and authentication primitives separately from the main binary (https://github.com/docker/libtrust), it would be a cool experiment to try using that in Seagul.

Personally I think this is a cool project, and look forward to seeing it evolve!

Now seagull is kind of for developers. We don't consider about security a lot. Maybe we should know more about libtrust and try to support authentication.

Contributor guide

Tech stack
javascriptdocker
Domain
backendsecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
unclear
Prerequisites
Basic knowledge of DockerUnderstanding of authentication concepts
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
The issue lacks specific details. Start by examining the libtrust library (https://github.com/docker/libtrust) to understand its authentication primitives. Then design a secure authentication flow for the web UI, possibly using token based auth. Since the issue is from 2014, check if libtrust is still maintained and compatible with current Docker versions. Look at similar Docker web UIs for authentication patterns.