Support FF Auth on Remote Instances

[joepavitt]

Description

We support FF User auth for Hosted Instances, but not Remote. This had been avoided originally because we cannot guarantee that Remote Instances are running in an online environment, given many customers run in closed/offline environments.

However, if customers want to use FF Auth, then we should not stop them. There is value, especially in use cases with FlowFuse Dashboard, to have FF User Auth enabled and securing remote Dashboards, especially when paired with the FF User Plugin.

Which customers would this be available to

• https://app-eu1.hubspot.com/contacts/26586079/record/0-2/10177258183

Have you provided an initial effort estimate for this issue?

I have provided an initial effort estimate

Tasks

Preview Give feedback

1. Add support for httpNodeAuth settings on devices #5068
   +0
2. Add support for httpNodeAuth device-agent#341
   +0
3. Publish Device Agent 3.1
4. Change log entry

[joepavitt]

Status - both #5068 and FlowFuse/device-agent#341 are ready to merge, just need to coordinate.

@knolleary is this something we can do today?

[knolleary]

@joepavitt the device agent PR has been merged. We are not ready to cut the release as I want to see if we can get #5069 included as a significant DX improvement. I'm looking at that today.

Once the release is cut, we can then merge #5068 and have it go live.

[joepavitt]

Thanks Nick

[joepavitt]

@hardillb are you okay to verify this please so that we can close it out?

[hardillb]

I'll try and set up a device on prod this afternoon and verify.

I did test it all locally as part of the review, so should be good.

[knolleary]

Issue reported by customer: https://app-eu1.hubspot.com/help-desk/26586079/view/233410279/ticket/88305701084/thread/10233611463#email

If the device's local access is via http, but the platform is https, the platform redirects back to https on the device which doesn't work.

Need to check the referrer origin on the request to ensure it is applied when redirecting.

[hardillb]

I've just tested on prod and the final redirect got the HTTP vs HTTPS wrong (the redirect was to https://localhost:1880 not http://localhost:1880

[knolleary]

Fix for http/https issue in FlowFuse/device-agent#353

Once that is merged and we cut the 3.1.2 release of Device Agent, we can verify and close this issue.

[hardillb]

I have verified this with 3.1.2 and production.