Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

If it is public let EVERYONE see it just with the URL (without any restriction) #259

Open
9acca9 opened this issue Apr 7, 2024 · 2 comments

Comments

@9acca9
Copy link

9acca9 commented Apr 7, 2024

Im using a user/password to dont let everyone use my microbin BUT i will like to share with other some paste that i made.

I will find useful if when the paste is set to "public" that anyone, even those that dont have access to the server can see it.
I mean, if they have the link then they can see it, without the need for user/password to enter the site.

I understand that i could leave the site without user/password, accessible to anyone and put a password for my "secret" paste... but....... almost all my paste are secret and i just want to share a few, so...

Hope this is understood, i dont speak english.

@pooh22
Copy link

pooh22 commented May 6, 2024

I agree, creating a paste should (could) require a password (upload password), but once you get the URL, you should be able to read the contents unless it is encrypted with a password. All other restrictions should still apply (burn after reading, expire time).

I guess basic-authentication is not very useful for a pastebin type of service, which makes it a confusing option and it doesn't work for receivers of the URL, with whom you don't want to share your authentication.

My suggestion would be:

  • remove basic authentication entirely (I don't see a use case for it)
  • when set, use upload password to restrict adding paste's or uploaded files

Optionally, having user accounts with permissions to add pastes/uploads would be useful in more complicated setups.

@SR-G
Copy link

SR-G commented May 15, 2024

Same use case for me.
I'm surprised this is not the default behavior indeed.
I would like :

  • All URLs to be password protected ("/admin", "/", "/list")
  • EXCEPT (at least) "/upload" and "/raw" = the one allowing to view the content of what has been uploaded

In order to have an instance "not usable by everyone" (but only usable by whoever has the password / is registered) but still to be able to have 100% public uploads.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants