From d76a43f466749aed7c6133ba899730f5d2c279f1 Mon Sep 17 00:00:00 2001 From: Niko Diamadis Date: Wed, 6 Oct 2021 23:47:59 +0200 Subject: [PATCH 1/3] docs: Add info about --dev parameter --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index eded72c5e0..92b16c6ba8 100644 --- a/README.md +++ b/README.md @@ -63,7 +63,9 @@ parse-dashboard --dev --appId yourAppId --masterKey yourMasterKey --serverURL "h You may set the host, port and mount path by supplying the `--host`, `--port` and `--mountPath` options to parse-dashboard. You can use anything you want as the app name, or leave it out in which case the app ID will be used. -NB: the `--dev` parameter is disabling production-ready security features, do not use this parameter when starting the dashboard in production. This parameter is useful if you are running on docker. +NB: the `--dev` parameter is disabling production-ready security features, do not use this parameter when starting the dashboard in production. This parameter is useful if you are running on docker. Use it to +- allow non HTTPS connections on localhost, +- allow no-auth access on localhost. After starting the dashboard, you can visit http://localhost:4040 in your browser: From efee68e15438a795bd66bb26bec6e06af7bbce1d Mon Sep 17 00:00:00 2001 From: Niko Diamadis Date: Thu, 7 Oct 2021 14:27:01 +0200 Subject: [PATCH 2/3] docs: restyle --dev parameter explanation --- README.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 92b16c6ba8..3dd2bd6af2 100644 --- a/README.md +++ b/README.md @@ -63,9 +63,13 @@ parse-dashboard --dev --appId yourAppId --masterKey yourMasterKey --serverURL "h You may set the host, port and mount path by supplying the `--host`, `--port` and `--mountPath` options to parse-dashboard. You can use anything you want as the app name, or leave it out in which case the app ID will be used. -NB: the `--dev` parameter is disabling production-ready security features, do not use this parameter when starting the dashboard in production. This parameter is useful if you are running on docker. Use it to -- allow non HTTPS connections on localhost, -- allow no-auth access on localhost. +NB: The `--dev` parameter disables production-ready security features. This parameter is useful when running Parse Dashboard on Docker. Using this parameter will: +- allow insecure http connections from anywhere, bypassing the option `allowInsecureHTTP` +- allow the Parse Server `masterKey` to be transmitted in cleartext without encryption +- allow dashboard access without user authentication +> ⚠️ Do not use this parameter when deploying Parse Dashboard in a production environment. + +--- After starting the dashboard, you can visit http://localhost:4040 in your browser: From eab54e53dd5304644a0594d6816e608e851d5ac4 Mon Sep 17 00:00:00 2001 From: Manuel <5673677+mtrezza@users.noreply.github.com> Date: Thu, 7 Oct 2021 16:00:34 +0200 Subject: [PATCH 3/3] minor reformatting --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 3dd2bd6af2..0e4b11f018 100644 --- a/README.md +++ b/README.md @@ -63,13 +63,13 @@ parse-dashboard --dev --appId yourAppId --masterKey yourMasterKey --serverURL "h You may set the host, port and mount path by supplying the `--host`, `--port` and `--mountPath` options to parse-dashboard. You can use anything you want as the app name, or leave it out in which case the app ID will be used. -NB: The `--dev` parameter disables production-ready security features. This parameter is useful when running Parse Dashboard on Docker. Using this parameter will: +The `--dev` parameter disables production-ready security features. This parameter is useful when running Parse Dashboard on Docker. Using this parameter will: + - allow insecure http connections from anywhere, bypassing the option `allowInsecureHTTP` - allow the Parse Server `masterKey` to be transmitted in cleartext without encryption - allow dashboard access without user authentication -> ⚠️ Do not use this parameter when deploying Parse Dashboard in a production environment. ---- +> ⚠️ Do not use this parameter when deploying Parse Dashboard in a production environment. After starting the dashboard, you can visit http://localhost:4040 in your browser: