HTTPS and user auth

[tedraymond]

Anyone try implementing https and user authentication via local db or ldap? Curious if gradio cann easily support or would it be better to run behind nginx or other web platform.

[BrunoBosshard]

I use nginx as https front-end for Gradio and it works well. I don't see a problem with user authentication with nginx, I don't think that you can do what you want with Gradio alone.

[tedraymond]

Thanks for the insight. I'll kind of lean that direction.

[tedraymond]

Accomplished in the uvicorn main.py

[ne-ak]

@tedraymond Could you explain how did you accomplish it? I installed mkcert for making certificates. Then added following to main.py but both Edge and Firefox prevents the access. I see this "Warning: Potential Security Risk Ahead"
uvicorn.run(app,
host="0.0.0.0",
port=8001,
ssl_keyfile="./localhost+2-key.pem",
ssl_certfile="./localhost+2.pem"
)

[tedraymond]

Yes , that will happen with self signed certificates. On your local browser you should be able to install the certificate to bypass that or you can use a public signing authority to create “real” certificates.

…

On Tue, Jul 9, 2024 at 09:07 ne-ak ***@***.***> wrote: @tedraymond <https://github.com/tedraymond> Could you explain how did you accomplish it? I installed mkcert for making certificates. Then added following to main.py but both Edge and Firefox prevents the access. I see this "Warning: Potential Security Risk Ahead" uvicorn.run(app, host="0.0.0.0", port=8001, ssl_keyfile="./localhost+2-key.pem", ssl_certfile="./localhost+2.pem" ) — Reply to this email directly, view it on GitHub <#1362 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARNCCWNMOLSG3TUZF3GTJGDZLPVA3AVCNFSM6AAAAABAG6LC4GVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TSOJZGA3TM> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[wesleyscaldwell]

This is not directly relevant, but might be.

Has anyone tried configuring a reverse proxy to handle URL prefixes for privategpt? For instance, directing traffic from https://example.com/myapp/ to the backend without hardcoding the slug in the application code.
Any experiences or tips on using headers like X-Forwarded-Prefix to dynamically manage these paths would be helpful.

I have the UI rendering, but there is a "connection errored out" message.