# HTTP Node security on IBM Cloud Node Red

**URL:** https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388
**Category:** Dashboard
**Created:** [18 August 2018 14:50 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388 "2018-08-18T14:50:55Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![mtoko](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mtoko/32/138_2.png) [@mtoko](https://discourse.nodered.org/u/mtoko)
#### Post date: [18 August 2018 14:50 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/1 "2018-08-18T14:50:55Z")

</div>

I have NR running on IBM Cloud and have worked out continuous delivery and toolchain etc. I would like to have basic security for the Dashboard as descibed in the Security section of the Getting Started but there is no  
The `httpNodeAuth` property in your `settings.js` file can be used to define a single username and password that will be allowed to access the routes.

Any advice appreciated

---

<div class="post-metadata">

### Author: ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)
#### Post date: [18 August 2018 15:50 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/2 "2018-08-18T15:50:44Z")

</div>

On IBM Cloud the file is bluemix\_settings.js

---

<div class="post-metadata">

### Author: ![mtoko](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mtoko/32/138_2.png) [@mtoko](https://discourse.nodered.org/u/mtoko)
#### Post date: [18 August 2018 16:21 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/3 "2018-08-18T16:21:23Z")

</div>

Yes thanks I have seen that but where and what do I edit. I have this working on a pi but it only needs uncommenting and adding a user and bcrpyt password.

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [18 August 2018 19:22 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/4 "2018-08-18T19:22:50Z")

</div>

The files do look a little bit different, but hopefully you can see they both have a block that starts `module.exports = {`

Copy over the setting you want into that block - make sure it is comma separated from any previous or following setting.

---

<div class="post-metadata">

### Author: ![mtoko](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mtoko/32/138_2.png) [@mtoko](https://discourse.nodered.org/u/mtoko)
#### Post date: [20 August 2018 10:33 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/5 "2018-08-20T10:33:15Z")

</div>

Thanks it seems like a silly question when you see the answer:grinning:

---

<div class="post-metadata">

### Author: ![said8888](https://avatars.discourse-cdn.com/v4/letter/s/df788c/32.png) [@said8888](https://discourse.nodered.org/u/said8888)
#### Post date: [4 October 2020 17:15 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/6 "2020-10-04T17:15:24Z")

</div>

please if you solved the issue can u screenshot the file

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [4 October 2020 18:03 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/7 "2020-10-04T18:03:43Z")

</div>

What have you tried?

You'll need to add an `httpNodeAuth` setting inside the `module.exports` block of your `bluemix-settings.js` file - [https://github.com/IBM/node-red-app/blob/master/bluemix-settings.js](https://github.com/IBM/node-red-app/blob/master/bluemix-settings.js)

The details of what to use for the setting are documented here: [https://nodered.org/docs/user-guide/runtime/securing-node-red#http-node-security](https://nodered.org/docs/user-guide/runtime/securing-node-red#http-node-security)

---

<div class="post-metadata">

### Author: ![said8888](https://avatars.discourse-cdn.com/v4/letter/s/df788c/32.png) [@said8888](https://discourse.nodered.org/u/said8888)
#### Post date: [4 October 2020 20:27 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/8 "2020-10-04T20:27:50Z")

</div>

i copied the httpNodeAuth: {user:"xxxx",pass:"$2b$08$8TNd8W.YHbtlYQLccCAw8ejJPkT2DmE/LS37Qit0gY.qRm9.xQQHK"},  
to bluemix\_settings.js but didn't work

---

<div class="post-metadata">

### Author: ![said8888](https://avatars.discourse-cdn.com/v4/letter/s/df788c/32.png) [@said8888](https://discourse.nodered.org/u/said8888)
#### Post date: [5 October 2020 00:24 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/9 "2020-10-05T00:24:05Z")

</div>

it only needed to stop the application and update thz bluemix-settings-js and re-deploy the application ( if anyone had the same issue as me) thank you.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [19 October 2020 00:24 UTC](https://discourse.nodered.org/t/http-node-security-on-ibm-cloud-node-red/2388/10 "2020-10-19T00:24:10Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
