comparison Resources/Configuration.json @ 3506:d2b9981017c4

better handling of HTTP security
author Sebastien Jodogne <s.jodogne@gmail.com>
date Wed, 28 Aug 2019 15:19:04 +0200
parents 0d248cc63ded
children f07352e0375c
comparison
equal deleted inserted replaced
3505:b2d4dd16dae8 3506:d2b9981017c4
137 137
138 /** 138 /**
139 * Security-related options for the HTTP server 139 * Security-related options for the HTTP server
140 **/ 140 **/
141 141
142 // Whether remote hosts can connect to the HTTP server. For security 142 // Whether remote hosts can connect to the HTTP server
143 // reasons, starting with Orthanc 1.5.8, as soon as this option is
144 // set to "true", authentication is enabled, and you have to declare
145 // an user in "RegisteredUsers" to access the HTTP server.
146 "RemoteAccessAllowed" : false, 143 "RemoteAccessAllowed" : false,
147 144
148 // Whether or not SSL is enabled 145 // Whether or not SSL is enabled
149 "SslEnabled" : false, 146 "SslEnabled" : false,
150 147
151 // Path to the SSL certificate in the PEM format (meaningful only if 148 // Path to the SSL certificate in the PEM format (meaningful only if
152 // SSL is enabled) 149 // SSL is enabled)
153 "SslCertificate" : "certificate.pem", 150 "SslCertificate" : "certificate.pem",
154 151
155 // Whether or not the password protection is enabled. Starting with 152 // Whether or not the password protection is enabled (using HTTP
156 // Orthanc 1.5.8, password protection is automatically enabled as 153 // basic access authentication). Starting with Orthanc 1.5.8, if
157 // soon as "RemoteAccessAllowed" is set to "true". 154 // "AuthenticationEnabled" is not explicitly set, authentication is
158 "AuthenticationEnabled" : false, 155 // enabled iff. remote access is allowed (i.e. the default value of
156 // "AuthenticationEnabled" equals that of "RemoteAccessAllowed").
157 /**
158 "AuthenticationEnabled" : false,
159 **/
159 160
160 // The list of the registered users. Because Orthanc uses HTTP 161 // The list of the registered users. Because Orthanc uses HTTP
161 // Basic Authentication, the passwords are stored as plain text. 162 // Basic Authentication, the passwords are stored as plain text.
162 "RegisteredUsers" : { 163 "RegisteredUsers" : {
163 // "alice" : "alicePassword" 164 // "alice" : "alicePassword"