Start UD Dashboard on Localhost Only

Universal Dashboard Feature Requests
1

Hi,

I’ve been testing Universal Dashboard for the last 8 hours and I’m having trouble with the concept “How to access different systems without using a central service account”. The dashboard functions will always run in the context of the server, even when using authentication, which is not really the desired result.

So my idea is to publish the dashboard as a script module and start the application locally and using the client security context. For other services which require username and password (non AD), the password will be securely stored under the client user directory.

However, when starting the Dashboard it will always Publish on all IP addresses.

I would like to see a feature where you can start the Web Application as LocalhostOnly e.g. Start-UDDashboard -LocalhostOnly, Start-UDRestApi -LocalhostOnly. So all requests on the other IP Addresses are rejected/blocked. This would avoid anyone who knows my endpoints to run code as my security context.

Looking forward to your view on this matter.

Regards,
Glenn

1 Like
2

I think that’s a great idea. Please file an issue on GitHub.

It should be really easy to implement: https://github.com/ironmansoftware/universal-dashboard/blob/master/src/UniversalDashboard/Server/Server.cs#L102

1 Like
3

Done :slight_smile:

1 Like
4

@adam is this supported in Powershell Universal as well?

5

In Universal, you can use the appsettings.json to configure the listening address.

{
  "Kestrel": {
    "Endpoints": {
      "HTTP": {
        "Url": "http://localhost:5000"
      }
    }
  },