Hi folks, Paul ( @Paul-Reed ) reported an issue about my new node-red-contrib-xterm node: [image] Would really to have it solved, since that is the last 'known' issue before I can publish my first version on NPM. But I'm stuck ... I found out that I can reproduce the problem, by activating the (d…

How have you defined the endpoint that serves that resource? How are you trying to load it?

Hey Nick, I assume it must be something very stupid ... My endpoint is defined here : RED.httpAdmin.get('/xterm_shell/:terminal_id/:command/:info', RED.auth.needsPermission('xterm.write'), function(req, res) { Although I think it must be a POST when I use permission 'xterm.write', and a GET for…

[image] BartButenaers: Although I think it must be a POST when I use permission 'xterm.write' , and a GET for permission 'xterm.read' ? No, its .read if its something a user with read-only access should have access to and .write if its something that requires full read/write access. Do not e…

Thanks a lot again Nick! That is very clear information. Will try it tomorrow and will get back here. Have a nice sunday !

The separate endpoint for static resources (without needsPermission), has solved the problem for both me and Paul!

Unauthorized when accessing custom admin endpoint

Developing Nodes

knolleary 11 January 2020 22:23 2

How have you defined the endpoint that serves that resource?
How are you trying to load it?

[Announce] node-red-contrib-ui-contextmenu

Topic		Replies	Views
Odd problem with Bearer Authentication General security	20	5534	3 January 2023
$.ajax is not including Bearer if called from HTML General	2	253	2 October 2021
[ANNOUNCE]node-red-contrib-xterm : second beta (sidebar) Share Your Nodes	118	6166	10 February 2020
When to use which? RED.httpNode vs RED.httpAdmin Developing Nodes	4	3271	3 May 2020
Securing Node-RED: Using a custom HTTP header (tokenHeader) with regular "credentials" adminAuth General security	5	274	28 October 2023

Unauthorized when accessing custom admin endpoint

Related topics