Digital Developer Conference: a FREE half-day online conference focused on AI & Cloud – North America: Nov 2 – India: Nov 9 – Europe: Nov 14 – Asia Nov 23 Register now

Close outline
  • United States
IBM?
  • Site map
IBM?
  • Marketplace

  • Close
    Search
  • Sign in
    • Sign in
    • Register
  • IBM Navigation
IBM Developer Answers
  • Spaces
    • Blockchain
    • IBM Cloud platform
    • Internet of Things
    • Predictive Analytics
    • Watson
    • See all spaces
  • Tags
  • Users
  • Badges
  • FAQ
  • Help
Close

Name

Community

  • Learn
  • Develop
  • Connect

Discover IBM

  • ConnectMarketplace
  • Products
  • Services
  • Industries
  • Careers
  • Partners
  • Support
10.190.13.195

Hybrid Cloud Core×

Refine your search by using the following advanced search options.

Criteria Usage
Questions with keyword1 or keyword2 keyword1 keyword2
Questions with a mandatory word, e.g. keyword2 keyword1 +keyword2
Questions excluding a word, e.g. keyword2 keyword1 -keyword2
Questions with keyword(s) and a specific tag keyword1 [tag1]
Questions with keyword(s) and either of two or more specific tags keyword1 [tag1] [tag2]
To search for all posts by a user or all posts with a specific tag, start typing and choose from the suggestion list. Do not use a plus or minus sign with a tag, e.g., +[tag1].
  • Ask a question

Node-Red on Bluemix seems to be able to be accessed by anyone without any login

270007M9PF gravatar image
Question by ToshihiroKoshiba  (32) | Aug 10, 2015 at 07:44 PM securitynode-redibmcloud

Hi Team !

I developed my app by Node-Red on Bluemix.

And, it seems that any one without any login status can access node-red flow!

I have (e.g.) myAppABC on Bluemix and its route is like myAppABC.mybluemix.net , and I can access http://myAppABC.mybluemix.net from any browser on any PC, on that I have never logged in by my (or other's) IBM account.

It means, anyone can access and touch (sometimes destroy or copy) my app easily without any authorities.

It seems a very large problem, and I hope it should be modified ASAP.

Thank you very much for your understanding.

Sorry, if I'm missunderstanding.

Also, sorry for any other post on the same matter before, I'm not reading other posts yet, because I think "Time is Money" ... Thank you !

Best Regards,

People who like this

  0
Comment
10 |3000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster

1 reply

  • Sort: 
060001QHD8 gravatar image
Accepted answer

Answer by KrisKobylinski (5283) | Aug 10, 2015 at 08:37 PM

You can add access control to your node-red application. To find out how to do that go to your application and on the initial page find the "Learn how to password-protect your instance" link as shown in the screenshot. This link will lead you to instructions how to set password for your flow.

alt text


node-red-password.jpg (13.0 kB)
Comment
@chughts

People who like this

  1   Show 1   Share
10 |3000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
270007M9PF gravatar image ToshihiroKoshiba (32)   Aug 11, 2015 at 09:26 PM 0
Share

Thank you !

I can do it !!

Follow this question

65 people are following this question.

Answers

Answers & comments

Related questions

WebSocket authentication/Security in Node-RED on Bluemix 1 Answer

For Node-RED in Bluemix, how can I protect email credentials? 3 Answers

Address for accessing TCP socket and port in NODE RED BlueMix 2 Answers

IBM IOT Out Node with Arduino Registered.ino example 1 Answer

Network Error/Issues with Bluemix 2 Answers

  • Contact
  • Privacy
  • IBM Developer Terms of use
  • Accessibility
  • Report Abuse
  • Cookie Preferences

Powered by AnswerHub

Authentication check. Please ignore.
  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Spaces
  • API Connect
  • Analytic Hybrid Cloud Core
  • Application Performance Management
  • Appsecdev
  • BPM
  • Blockchain
  • Business Transaction Intelligence
  • CAPI
  • CAPI SNAP
  • CICS
  • Cloud Analytics
  • Cloud Automation
  • Cloud Object Storage
  • Cloud marketplace
  • Collaboration
  • Content Services (ECM)
  • Continuous Testing
  • Courses
  • Customer Experience Analytics
  • DB2 LUW
  • Data and AI
  • DataPower
  • Decision Optimization
  • DevOps Build
  • DevOps Services
  • Developers IBM MX
  • Digital Commerce
  • Digital Experience
  • Finance
  • Global Entrepreneur Program
  • Hadoop
  • Hybrid Cloud Core
  • Hyper Protect
  • IBM Cloud platform
  • IBM Design
  • IBM Forms Experience Builder
  • IBM Maximo Developer
  • IBM StoredIQ
  • IBM StoredIQ-Cartridges
  • IIDR
  • ITOA
  • InformationServer
  • Integration Bus
  • Internet of Things
  • Kenexa
  • Linux on Power
  • LinuxONE
  • MDM
  • Mainframe
  • Messaging
  • Node.js
  • ODM
  • Open
  • PartnerWorld Developer Support
  • PowerAI
  • PowerVC
  • Predictive Analytics
  • Product Insights
  • PureData for Analytics
  • Push
  • QRadar App Development
  • Run Book Automation
  • Search Insights
  • Security Core
  • Storage
  • Storage Core
  • Streamsdev
  • Supply Chain Business Network
  • Supply Chain Insights
  • Swift
  • UBX Capture
  • Universal Behavior Exchange
  • UrbanCode
  • WASdev
  • WSRR
  • Watson
  • Watson Campaign Automation
  • Watson Content Hub
  • Watson Marketing Insights
  • dW Answers Help
  • dW Premium
  • developerWorks Sandbox
  • developerWorks Team
  • Watson Health
  • More
  • Tags
  • Questions
  • Users
  • Badges