This message was deleted.
# announcementss
Slackbot
11/17/2020, 7:15 PMThis message was deleted.
m
Max Pumperla
11/17/2020, 7:17 PMe.g. if I want to do a vanilla AWS deployment, nothing fancy, but I want basic auth to protect my endpoint, what's the way to go?
c
Chaoyu
11/17/2020, 7:33 PMGot it - there is no built-in support for authentication in BentoML, the most common way to do it is to do it in a frontend proxying layer, for example, using JWT token and verify the token in a Nginx proxy server in front of BentoML api servers
Chaoyu
11/17/2020, 7:34 PMare you thinking about a HTTP basic auth?
m
Max Pumperla
11/17/2020, 7:34 PMgreat, straightforward enough.
👍 1
Max Pumperla
11/17/2020, 7:35 PMnah, just wanted to keep things simple in my question,
c
Chaoyu
11/17/2020, 7:35 PM👍
m
Max Pumperla
11/17/2020, 7:35 PMweb token auth is great, thanks again
c
Chaoyu
11/17/2020, 7:36 PMnp! let me know how it goes, happy to help
m
Max Pumperla
11/19/2020, 10:57 AM@Chaoyu follow-up question. if I do e.g. OAuth or whatever with a proxy, how does the swagger UI pick that up? OpenAPI 3.0 has support for many advanced auth solutions, and you can hence log into the Swagger UI for those endpoints. I don't know (yet) how bento builds up the swagger.yml, but I'd assume that could be an issue. Did you ever think about this?
2 Views