# /ui protection using httpNodeAuth in settings.js

**URL:** https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430
**Category:** Dashboard
**Created:** [4 September 2020 05:18 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430 "2020-09-04T05:18:55Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![josekavunkal](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/josekavunkal/32/18505_2.png) [@josekavunkal](https://discourse.nodered.org/u/josekavunkal)
#### Post date: [4 September 2020 05:18 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430/1 "2020-09-04T05:18:55Z")

</div>

I am trying to protect /ui with user name and password ,and I am aware that I can do this with  
httpNodeAuth in settings.js .

The problem I am facing is my application have many other endpoint which does not need any protection or in other words open to public usage .But httpNodeAuth settings impact not just /ui but all http endpoint.

If there a way to protect only /ui and not other endpoints?

Kindly comment.

---

<div class="post-metadata">

### Author: ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)
#### Post date: [4 September 2020 07:21 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430/2 "2020-09-04T07:21:57Z")

</div>

Hi , no the protection applies to all.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [4 September 2020 13:51 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430/3 "2020-09-04T13:51:26Z")

</div>

Dave has answered your question but I'll point out that I am working (slowly) on a separate authentication & authorisation capability for uibuilder. That will be completely independent of the Node-RED native user configuration.

---

<div class="post-metadata">

### Author: ![josekavunkal](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/josekavunkal/32/18505_2.png) [@josekavunkal](https://discourse.nodered.org/u/josekavunkal)
#### Post date: [4 September 2020 14:06 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430/4 "2020-09-04T14:06:18Z")

</div>

Thank you Dave for quick reply .  
Yes I feel we need separate authentication ,now I am forced to start new instance just to have  
my own authentication for http endpoint other than /ui.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [3 November 2020 14:06 UTC](https://discourse.nodered.org/t/ui-protection-using-httpnodeauth-in-settings-js/32430/5 "2020-11-03T14:06:20Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
