Button in Canvas: how to use Grafana authorization in requests to Node-RED?

Grafana
1

I am using Canvas plugin with several buttons to send HTTP POST requests to Node-RED, as described in this topic.

What is the most proper / easiest way to protect these requests with Grafana authorization? I.e. so as Node-RED accepted these requests only when user is authorized in Grafana?

Grafana version is 10.2

2

Manual states:

Button elements support triggering basic, unauthenticated API calls

Anyway, may be somebody can share best practices on making such API calls more secure…

3

what type of auth are you using? out of the box or custom?

4

out of the box

5

out of the box is basic uname and upass so would avoid that but instead I would implement bearer token if NR allows that

@grant2 is the man for that

https://nodered.org/docs/api/admin/methods/post/auth/token/

1 Like
6

Thank you, will look through @grant2 's posts