The minimal authentication is to just have a static password. This would help validate the principle, but is obviously not a long term solution.
Acceptance Criteria:
- SEfC is protected by a static password and Basic auth
The minimal authentication is to just have a static password. This would help validate the principle, but is obviously not a long term solution.
Acceptance Criteria:
Setting up oauth2 seems easy enoug with nginx - https://www.nginx.com/blog/validating-oauth-2-0-access-tokens-nginx/. I propose we close this ticket and go straight to oauth2 solutions, it looks like it actually requires less tinkering.