Forum Discussion

CarolineS's avatar
3 years ago

Best way to handle staging site basic auth?

Hi ya'll! In working with developers who are attempting to integrate 3rd party systems with our Khoros Community platform, one of the first things we encounter is the fact that our Khoros staging si...
  • MattV's avatar
    3 years ago

    Well, in Postman, instead of putting the auth as a URL, i'd suggest passing it as a header (Authorization Tab, Basic Auth). 

    Another, less desirable option would be to have HTACCESS removed on stage, and to prevent bots from crawling, add this to the page head content: 

    <#if config.getString("phase", "prod") == "stage"> <#-- disallow indexing for stage since HTACCESS is disabled -->
        <meta name="robots" content="noindex,nofollow">
    </#if>

     

    Obviously the problem with this is, stage would still be accessible via the broader internet.