Forum Discussion

CarolineS's avatar
CarolineS
Boss
3 years ago

Best way to handle staging site basic auth?

Hi ya'll! In working with developers who are attempting to integrate 3rd party systems with our Khoros Community platform, one of the first things we encounter is the fact that our Khoros staging si...
API
Community API
  • MattV's avatar
    MattV
    3 years ago

    Well, in Postman, instead of putting the auth as a URL, i'd suggest passing it as a header (Authorization Tab, Basic Auth). 

    Another, less desirable option would be to have HTACCESS removed on stage, and to prevent bots from crawling, add this to the page head content: 

    <#if config.getString("phase", "prod") == "stage"> <#-- disallow indexing for stage since HTACCESS is disabled -->
    <meta name="robots" content="noindex,nofollow">
</#if>

     

    Obviously the problem with this is, stage would still be accessible via the broader internet.

CarolineS's avatar
CarolineS
Boss

Thanks! Does it work to send both the http basic auth AND your session key / whatever Khoros auth info that’s needed in the header? I’ve struggled with that a bit (but also don’t really know what I’m doing :))

MattV's avatar
MattV
Khoros Staff
3 years ago

Yes, you can do both at the same time.