New user here. I have enabled adminAuth using the default user/pass. It worked great. Once. Now when I open the workspace it doesn't ask for credentials, it just opens like adminAuth is not enabled. Tried Edge and Chrome, and with both the first time I connect it asks for user/pass, then every time…

This is normal and working as expected. The token for your session is stored in your browser's local storage after you log in. It has a validity of one week. So if you're not using a private window/tab ("incognito mode") or clear your data on exit (or explicitly log out), you will stay logged in.

I was about to write a post for the same issue.... [image] Simple Password Authentication for Dashboard (Caution: Very Low Security, for simple application only) (asks for a password when I open the editor (well, not every time exactly, even though i have NOT SAVED password in browser but many t…

[image] kuema: It has a validity of one week. can this be changed to say one hour ?

My guess would be via settings.js. But it's undocumented, so you'd have to try it or ask one of the developers. EDIT: It is documented, but not in the settings.js by default. See Nicks comment below. :flushed:

Documented here: Securing Node-RED : Node-RED

Ah, thanks Nick. I have only looked in the settings.js for that. :slightly_smiling_face:

Thank you for the quick and useful information everyone! I do appreciate it. I will try the recommendations.

Node-RED

Node-RED Forum

Password adminAuth not working

General

smanjunath211 4 February 2022 07:29 3

I was about to write a post for the same issue....

Topic		Replies	Views
Logon authentication and token expiry General	10	1429	11 October 2020
SessionExpirytime not working as expected, can we force the session logout on browser exit.? General	9	193	29 November 2023
Trying authorization on flow editor without secret key General security	8	318	22 February 2023
Authentication problems Dashboard	7	389	12 August 2020
Problem authentication General security	9	294	9 January 2024

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Password adminAuth not working

Related topics