Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for authenticated iframe (with JWT) #326

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add support for authenticated iframe (with JWT) #326

wants to merge 1 commit into from

Commits on Sep 30, 2023

  1. Add support for authenticated iframe (with JWT) 

    The image renderer from Grafana is very slow and cpu heavy. Iframe is
not an option for most cases because it needs anonymous access to
Grafana. This commit adds JWT support to secure the Grafana access
when using iframe.
When a graph is loaded in Icinga web interface, the signed JWT token is
sent to Grafana in the request, if JWT is validated graph is displayed,
if anything goes wrong with the token validation, Grafana will refuse the
access.

The library Firebase PHP-JWT is used to create the token. For now, the
library is included in the vendor directory.

The JWT token uses RSA keys, these keys are generated automatically in
/etc when the user saves the configuration with jwt enabled.
    @epinter
    epinter committed Sep 30, 2023
    Configuration menu
    Copy the full SHA
    5f5cff8 View commit details
    Browse the repository at this point in the history