Link to that here - https://node-red.slack.com/archives/C1DH77X1V/p1545118091102600
as there are a couple of follow ups.
-
You can enable basic authentication as described in the docs (https://nodered.org/docs/security#http-node-security) or read the ExpressJS docs about middlewere
-
to answer your question “why can not change the Node-RED authentication to allow such authentication in the Dashboard?” - the simple answer is because no-one has done it
We know we need better auth options around the dashboard in particular - the existing options are not very flexible (basic auth only) or hard to do (custom middleware in your own express app).
But no-one has sat down and designed what it would be and how it would work
