Can I use conductor-ui only as a viewer without authentication?

[earlbread]

Hello, I'm considering using conductor, and I expect there will be very few use cases to manipulate the workflow in the UI. Is it possible to use the UI only in viewer mode without additional authentication or authorization?

[flavioschuindt]

By default the UI has no authentication/authorization at all. It is just a simple UI application. You can just make it up and running and will just work. In the future, if you want to add any auth/authZ you can put it behind an API Gateway which can take care of it for you.

[aravindanr]

Can you elaborate what you are referring to as a "write" operation? The UI does not allow creation of workflows, tasks or event handlers. Those are possible only using the apis.

[earlbread]

By default, we can restart workflow or retry task. But we can restrict the operations in viewer role with authentication. I wonder if it can be used only as a viewer without authentication.

[aravindanr]

In the current ui, it's not possible. The new UI coming in 3.3.0, might have better ways to accomplish this. cc: @peterlau

[earlbread]

Got it, thank you for your answers.

[peterlau]

In the new 3.x UI authentication is completely decoupled from the UI implementation. However as stateful actions are restricted to buttons in a few places it would not be difficult to implement the effect you desire. It would look something like:

1. Implement useAuthentication to retrieve session state. Precise implementation would depend on your auth strategy.
2. Wrap those action buttons in a predicate to not display unless authN & authZ context matches the desired values.