STM32CubeMonitor Security/Credentials critical issues

[acv_atr]

Hi everyone.

I'm trying to secure STM32CubeMonitor Editor and UI as defined to Node-RED, but is not possible secure STM32CubeMonitor.

After define a user and password at settings.js (even only for STM32 CubeMonitor) the editor and UI breaks and are simply useless.

 

 

This is a critical issue nowadays, not been able to secure a webserver that can be exposed to remote access, to provide REST API's and so on...

Tested STM32CubeMonitor v1.3.0

In other hand, this features works perfectly on native Node-RED instances.

There is a known workaround to secure STM32CubeMonitor editor and UI with user-password login?

[stephane.legargeant · Accepted solution]

Hi @Andrea cavani​ 

The release 1.5.0 is online. It should be possible now to secure the editor properly.

Please, let us know if it is ok with the new version.

Please note: In the default setting.js, the remote access is now disabled by default.

Best regards

Stephane