Hey Guys, we just discovered that in our docker installation a certain port is exposed and airbyte can be accessed without any credentials. In the docker ps we can see that the airbyte/webapp:0.50.12 is opening the port. The port itself is redirecting to port 80. cc: @Leon Graf

New message text here

@Benjamin Steurer how are you launching Airbyte? Is this port different from 80/8001? Are you accessing Airbyte without the basic auth as

localhost:65012

? Did you edit the

.env

file?

@[DEPRECATED] Marcos Marx Launching with

docker compose up -d

yes, 8001 & 8000 requires user and pwd which I set in the .env file. I didn't edit this section of the .env file.

Thanks @Benjamin Steurer a PR was submitted to remove the expose 80 from the webapp and only allow to connect by the proxy ports. As described by Airbyte documentation for your deployment is expected to you create firewall and rules to only allow access to the specific ports Airbyte is using by the

airbyte-proxy

container.