Re:Observable 2.0, a static site generator for data apps
by one_buggy_boi on Thursday February 15, 2024 @10:01PM
(#39392651)
What would be a good design pattern to put these dashboards behind auth? I suppose since they're static files you could just serve them with something like FastAPI or Spring Boot and have your CI/CD refresh the static files throughout the day on shared storage?
[ Parent
| on HN ]
Re:Observable 2.0, a static site generator for data apps
by apitman on Thursday February 15, 2024 @11:57PM
(#39393342)
I'd recommend a reverse proxy and login server using "forward auth". I made a list of such login servers here: https://github.com/lastlogin-io/obligator?tab=readme-ov-file...
Re:Observable 2.0, a static site generator for data apps
by a-ve on Thursday February 15, 2024 @10:08PM
(#39392710)
If you're putting these behind a reverse proxy (nginx, etc.) you can just setup client certificate authentication by using your own locally generated CA or by using something like Vault for UI-based certificate generation. When you visit this site with a certificate installed on your device, it will authenticate successfully, and for those who do not have a correct certificate installed, a "No certificate presented" error will be shown.
It's fairly easy to setup and there are multiple guides available for it. Here's one: https://fardog.io/blog/2017/12/30/client-side-certificate-au...