Oauth?

[stevenbaert]

Hi,

Fantastic project!

The only thing stopping me from fully adopting it is the security aspect. Perplexity supports user settings and OAuth. It would be great if Perplexica offered similar features! This way, I could place it behind my reverse proxy and access it securely from anywhere only offering oauth (avoiding brute force password attempts) 😁

Looking forward to your thoughts.

Kind regards,
Steven

[papiche]

Facing the same problem,

Perplexica runs in my LAN, but "no access control" is made, so I cannot open this service to the Web.
I solved it with a trick : allowing ssh reverse tunnel from my users (which public key is placed in ~/.ssh/authorized_keys)

Then this script is run by remote users to get access to Perplexica

#!/bin/bash

echo "Looking for already open tunnel"
tunnelPID=$(lsof -i :5000 | grep ssh | xargs | cut -d ' ' -f 2)
[[ ! -z $tunnelPID ]] && kill -9 $tunnelPID && echo "5000 port found"
tunnelPID=$(lsof -i :3001 | grep ssh | xargs | cut -d ' ' -f 2)
[[ ! -z $tunnelPID ]] && kill -9 $tunnelPID && echo "3001 port found"

echo "Reverse Tunnels"
echo "Perplexica"
ssh -fN -L 5000:127.0.0.1:3000 me@myIP -p 22222
echo "Perplexica API"
ssh -fN -L 3001:127.0.0.1:3001 me@myIP -p 22222

xdg-open http://127.0.0.1:5000

NB: activate fail2ban & forward port 22222 to 22 on LAN router