New user here. I have enabled adminAuth using the default user/pass. It worked great. Once. Now when I open the workspace it doesn't ask for credentials, it just opens like adminAuth is not enabled. Tried Edge and Chrome, and with both the first time I connect it asks for user/pass, then every time…

This is normal and working as expected. The token for your session is stored in your browser's local storage after you log in. It has a validity of one week. So if you're not using a private window/tab ("incognito mode") or clear your data on exit (or explicitly log out), you will stay logged in.

I was about to write a post for the same issue.... [image] Simple Password Authentication for Dashboard (Caution: Very Low Security, for simple application only) (asks for a password when I open the editor (well, not every time exactly, even though i have NOT SAVED password in browser but many t…

[image] kuema: It has a validity of one week. can this be changed to say one hour ?

My guess would be via settings.js. But it's undocumented, so you'd have to try it or ask one of the developers. EDIT: It is documented, but not in the settings.js by default. See Nicks comment below. :flushed:

Documented here: Securing Node-RED : Node-RED

Ah, thanks Nick. I have only looked in the settings.js for that. :slightly_smiling_face:

Thank you for the quick and useful information everyone! I do appreciate it. I will try the recommendations.

Node-RED

Node-RED Forum

Password adminAuth not working

General

smanjunath211 4 February 2022 07:29 3

I was about to write a post for the same issue....

Topic		Replies	Views
Logon authentication and token expiry General	9	1455	12 August 2020
SessionExpirytime not working as expected, can we force the session logout on browser exit.? General	8	205	15 November 2023
Trying authorization on flow editor without secret key General security	7	331	8 February 2023
Authentication problems Dashboard	6	398	13 July 2020
Problem authentication General security	8	317	10 November 2023

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Password adminAuth not working

Related topics