Allow docs endpoint to be behind authentication #6675

Closed
opened 2025-12-29 19:43:48 +01:00 by adam · 1 comment
Owner

Originally created by @abhi1693 on GitHub (Jul 17, 2022).

NetBox version

v3.2.6

Feature type

New functionality

Proposed functionality

The /static/docs/ should optionally be behind a login page. This can be made optional for backward compatibility.

Use case

The /static/docs/ should optionally be behind a login page for those setups where the developers have added custom plugins with their own documentation. This documentation may hold sensitive information which should only be visible to those with access to the plugin.

As of today, anyone with the base URL can go through the documentation which is not desirable in production environments.

Database changes

I don't think so

External dependencies

I don't know

Originally created by @abhi1693 on GitHub (Jul 17, 2022). ### NetBox version v3.2.6 ### Feature type New functionality ### Proposed functionality The `/static/docs/` should optionally be behind a login page. This can be made optional for backward compatibility. ### Use case The `/static/docs/` should optionally be behind a login page for those setups where the developers have added custom plugins with their own documentation. This documentation may hold sensitive information which should only be visible to those with access to the plugin. As of today, anyone with the base URL can go through the documentation which is not desirable in production environments. ### Database changes I don't think so ### External dependencies I don't know
adam added the type: feature label 2025-12-29 19:43:48 +01:00
adam closed this issue 2025-12-29 19:43:48 +01:00
Author
Owner

@jeremystretch commented on GitHub (Jul 18, 2022):

The /static/docs/ should optionally be behind a login page for those setups where the developers have added custom plugins with their own documentation.

Nothing confidential should appear in the plugin's documentation. Alternatively, you have the option to restrict access to static resources via the frontend HTTP server (e.g. nginx or Apache) configuration, however this is out of scope for NetBox itself.

@jeremystretch commented on GitHub (Jul 18, 2022): > The /static/docs/ should optionally be behind a login page for those setups where the developers have added custom plugins with their own documentation. Nothing confidential should appear in the plugin's documentation. Alternatively, you have the option to restrict access to static resources via the frontend HTTP server (e.g. nginx or Apache) configuration, however this is out of scope for NetBox itself.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#6675