Htpasswd bridge

(Tom Barrett) #1

Gday all


Matrix already has an asset that can read user data from an LDAP directory and allow those users to log in to Matrix (the LDAP bridge).



I'm thinking that I could build an asset to do the same same with user data from a .htpasswd file



Obviously the file would only contain usernames and passwords, but IIRC Matrix can assign metadata for shadow assets so more info about the users could be stored there subsequently.



Does this sound like it'd work? Anything I'm missing?



Tom

(Greg Sherwood) #2

This certainly sounds possible, but you can't apply metadata to those shadow assets so you'd need to source names, usernames, passwords and emails from a local file (or make up anything you can't get).


The other option is to actually have user accounts created locally but create a custom auth system that checks the .htpasswd file to verify passwords. So the passwords stored locally would be completely random, long and (hopefully) impossible to guess. Or they could be real passwords, used as a backup in case the auth system didn't work for some reason and fell through to the default auth system.