What the exact way to enable login in node-red?

[Luiey]

Hi,

I have downloaded node-red with the fresh start based from documentation that I've follow from https://nodered.org/docs/getting-started/installation. After that, I install the dashboard for UI

npm install node-red-dashboard

Now my intention is to secure the access to the node-red view with authorization. Currently, I have follow step from https://nodered.org/docs/configuration on how to modify the settings.js file but when I access both node-red and UI, all direct divert to it without navigating to login authentication.

I attach the settings.js file for perusal.

I have find another guide to understanding how to enable it but it getting complicated in my brain because I have perform and stop and continue with another guide. I'm confuse with the "adminAuth" and "https"

I'm running node-red locally on pc. Running the file from downloaded folder (not global install). Because this will be copied to another pc to sync what the node that it have.

https://hoast.dk/wordpress/2015/10/24/securing-node-red/

https://nodered.org/docs/security

https://stackoverflow.com/questions/44037162/how-to-secure-the-access-to-my-node-red-ui-with-httpnodeauth

## I would like to have 2 kind of access. First is admin, second is user. How to make it appear UI for both admin and user and flow only for admin?

***Request assist on understanding the lack of my step.

[Julian Knight]

https is a way to secure the link between your browser and Node-RED server. You will want that to complete your security as without it you are sending data in clear text over the wire. Ideally you would get this working first though it probably doesn't matter much if you are only experimenting on a local network. As a rule of thumb, never allow any application traffic over open networks (especially the Internet) without using https (technically TLS).

adminAuth defines a login for the Node-RED admin UI. If it isn't working, you might want to simplify your settings to be similar to those here: https://nodered.org/docs/security.html to see if that works. After that you can add in your second user and then the session timeout.

[Colin Law]

On 2 August 2017 at 09:48, Luiey <fadhl...@gmail.com> wrote:
> ...

> ## I would like to have 2 kind of access. First is admin, second is user.
> How to make it appear UI for both admin and user and flow only for admin?

I don't think you can do that at the moment, not easily anyway.

Colin