Accessing image stream by passing username and pw in URL not working

[BlackLantern]

I'm trying to access the image stream via URL by passing the username and password as query string params but it is still kicking me to the UI3 login screen. Here are the steps:

1. Created a non admin user
2. Enter the following url in browser: http://IP:serverport/image/camshortname/?username=myuser&pw=mypassword

But as stated, it just loads the UI3 login screen as if the username and password parameters weren't there. Any thoughts on the issue?

 

[bp2008]

You need to disable "Use secure sessions keys and login page" in order for credentials in the URL to work.

 

[BlackLantern]

Sorry to resurrect this old thread, but is this a "bad practice" from a security point of view?

 

[bp2008]

Among all the ways you could authenticate, I can't think of anything less secure than embedding credentials in a URL. Cybersecurity is a very complex topic though. You could mitigate most of the risk by connecting to Blue Iris through an HTTPS reverse proxy server or VPN server running on your BI server or another machine on your LAN.

 

[BlackLantern]

Thanks for the feedback. I only have my blue iris server available behind my LAN firewall, and use a VPN to connect remotely.