Forum Discussion

CarolineS's avatar
CarolineS
Boss
3 years ago

Best way to handle staging site basic auth?

Hi ya'll! In working with developers who are attempting to integrate 3rd party systems with our Khoros Community platform, one of the first things we encounter is the fact that our Khoros staging si...
API
Community API
  • MattV's avatar
    MattV
    3 years ago

    Well, in Postman, instead of putting the auth as a URL, i'd suggest passing it as a header (Authorization Tab, Basic Auth). 

    Another, less desirable option would be to have HTACCESS removed on stage, and to prevent bots from crawling, add this to the page head content: 

    <#if config.getString("phase", "prod") == "stage"> <#-- disallow indexing for stage since HTACCESS is disabled -->
    <meta name="robots" content="noindex,nofollow">
</#if>

     

    Obviously the problem with this is, stage would still be accessible via the broader internet.

MattV's avatar
MattV
Khoros Staff
3 years ago

If they are using a corporate network or VPN, you can contact support to have their corporate vpn IP address whitelisted on stage so they don't get the password prompt.