{"action":"created","issue":{"url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/13","labels_url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/13/comments","events_url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/13/events","html_url":"https://github.com/jupyter-incubator/dashboards/issues/13","id":108853832,"number":13,"title":"Make deployed dashboards secure, scalable","user":{"login":"parente","id":153745,"avatar_url":"https://avatars.githubusercontent.com/u/153745?v=3","gravatar_id":"","url":"https://api.github.com/users/parente","html_url":"https://github.com/parente","followers_url":"https://api.github.com/users/parente/followers","following_url":"https://api.github.com/users/parente/following{/other_user}","gists_url":"https://api.github.com/users/parente/gists{/gist_id}","starred_url":"https://api.github.com/users/parente/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parente/subscriptions","organizations_url":"https://api.github.com/users/parente/orgs","repos_url":"https://api.github.com/users/parente/repos","events_url":"https://api.github.com/users/parente/events{/privacy}","received_events_url":"https://api.github.com/users/parente/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/jupyter-incubator/dashboards/labels/maturation","name":"maturation","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-09-29T11:53:32Z","updated_at":"2015-09-29T15:28:38Z","closed_at":null,"body":"* There's no API auth on the kernel provider at the moment (tmpnb, Jupyter)\r\n* There's no concept of authentication in the generated dashboard app\r\n* The original code is exposed in the dashboard frontend HTML and can be manipulated arbitrarily by any user\r\n\r\nLong-term solution that probably involves:\r\n\r\n1. Using the jupyter-incubator/kernel-gateway remotely (or something like it) with proper API auth\r\n2. Writing a new kernel gateway client using jupyter-js-services\r\n3. Writing a new dashboard backend that acts as a proxy between the browser client that requests code execution and the kernel gateway."},"comment":{"url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/comments/144094456","html_url":"https://github.com/jupyter-incubator/dashboards/issues/13#issuecomment-144094456","issue_url":"https://api.github.com/repos/jupyter-incubator/dashboards/issues/13","id":144094456,"user":{"login":"JanSchulz","id":890156,"avatar_url":"https://avatars.githubusercontent.com/u/890156?v=3","gravatar_id":"","url":"https://api.github.com/users/JanSchulz","html_url":"https://github.com/JanSchulz","followers_url":"https://api.github.com/users/JanSchulz/followers","following_url":"https://api.github.com/users/JanSchulz/following{/other_user}","gists_url":"https://api.github.com/users/JanSchulz/gists{/gist_id}","starred_url":"https://api.github.com/users/JanSchulz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JanSchulz/subscriptions","organizations_url":"https://api.github.com/users/JanSchulz/orgs","repos_url":"https://api.github.com/users/JanSchulz/repos","events_url":"https://api.github.com/users/JanSchulz/events{/privacy}","received_events_url":"https://api.github.com/users/JanSchulz/received_events","type":"User","site_admin":false},"created_at":"2015-09-29T15:28:38Z","updated_at":"2015-09-29T15:28:38Z","body":"Sounds reasonable...\r\n\r\nI would still love to see a \"jupyter notebook only\" solutions, so that I could send out an URL to my students and they could play with some dashboard without me fiddling with node.js, php or whatever :-)"}}