34 个仓库
Mechanisms for protecting management interfaces and data access via passwords, API keys, and authentication proxies.
Distinct from API Access Security: Broader than API Access Security: covers the security of the entire web management interface and data access layers, not just the API.
Explore 34 awesome GitHub repositories matching security & cryptography · Interface Access Security. Refine with filters or upvote what's useful.
Kue is a Redis-backed job queue library for Node.js that provides a complete system for defining, scheduling, and processing background work. It stores job metadata and state in Redis lists and sorted sets, enabling persistent, in-memory operations with configurable concurrency control and priority-sorted processing. The library includes a RESTful HTTP API for managing jobs and a web-based monitoring dashboard for inspecting job status, progress, and logs. The system distinguishes itself through its event-driven worker model, where workers listen for job events via Redis pub/sub and process j
Ships TLS and HTTP basic authentication middleware to protect the web dashboard and REST API.
AI-on-the-edge-device is an edge AI meter digitizer and computer vision image processor designed to convert images of analog and digital utility meters into numeric values. It functions as an IoT gateway that runs neural network inference locally on hardware to monitor water, power, and gas readings. The system is distinguished by its ability to handle both analog pointers and digital digits through custom-trained neural networks. It includes specialized tools for image alignment, region-of-interest extraction, and hardware-level lighting control to minimize glare on glass surfaces. To mainta
Secures the web administration dashboard and API using username and password authentication.
Wealthfolio is a local-first personal finance tracker and multi-currency net worth calculator designed for managing investments, spending, and overall financial standing. It functions as an extensible portfolio management platform that allows users to maintain their data on their own devices, with an optional self-hosted Docker deployment for private server access. The platform is distinguished by an LLM-powered financial assistant that handles natural language transaction imports and portfolio querying. It further differentiates itself through a TypeScript-based SDK and plugin architecture,
Protects the self-hosted web interface using password hashing and cookie-based session management.
Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network traffic, indexing metadata, and performing network forensics. It functions as a network traffic indexer and security tool that enables the monitoring, querying, and browsing of large-scale network traffic across multi-cluster architectures. The platform distinguishes itself through its ability to manage distributed capture clusters from a centralized administrative dashboard. It integrates external data feeds with internal traffic logs to identify known threats and provides a pro
Protects captured packet data and management interfaces via API keys, passwords, and authentication proxies.
Moloch is a full packet capture system and network forensics platform designed for large scale network traffic recording and indexing. It functions as a distributed packet indexer that stores raw data in PCAP format for deep packet analysis and security investigations. The system distinguishes itself through a decentralized architecture that distributes capture and viewing components across multiple nodes to handle high volumes of network traffic. It utilizes a web-based management interface for browsing network sessions and provides a programmable API for exporting captured traffic and metad
Protects data and management interface access using encrypted connections, passwords, API keys, and authentication proxies.
SpringCloud-Learning is an educational project that demonstrates how to build microservices using Spring Cloud, covering the core patterns of service discovery, centralized configuration management, and API gateway routing. The project provides hands-on examples for registering and discovering microservice instances with Nacos, Eureka, or Consul, and for routing external API requests through Spring Cloud Gateway with support for filters and load balancing. The tutorials explore service resilience through circuit breakers and rate limiting with Sentinel and Hystrix, including custom fallback l
Requires authentication before accessing the management interface, eliminating the need for external network controls.
Star-Office-UI is a visual workspace and dashboard designed to map the activity and work states of AI agents to characters and zones within a virtual office. It functions as a multi-agent status monitor that tracks external entities via join keys and a desktop overlay application that renders a persistent, transparent window on the computer desktop. The project distinguishes itself through an integrated AI background generator that uses image generation APIs to create and update the virtual environment. It also includes a markdown activity logger that reads and displays sanitized daily summar
Protects the management sidebar with password authentication to prevent unauthorized access to active sessions.
SD.Next is an all-in-one web interface and multi-backend inference engine for generating, editing, and processing images and videos using diffusion models. It functions as a comprehensive tool for diffusion model management and an automated image processing pipeline for bulk operations. The project is distinguished by its hardware-backend abstraction layer, which provides automatic detection and acceleration for NVIDIA CUDA, AMD ROCm, Intel OpenVINO, and DirectML. It features a headless generative API and a programmatic command interface, allowing users to trigger tasks via REST API or CLI wi
Protects the web interface using authentication, encryption, and restricted network listening.
This project is a collection of practical implementation examples and demonstrations for building mobile applications using a JavaScript-based native framework. It serves as a cross-platform mobile framework demo, providing a gallery of interactive interface patterns and native integration suites. The repository showcases specialized capabilities including high-performance 2D and 3D visual content through OpenGL graphics implementation. It also features a suite of native hardware integrations, covering biometric authentication via fingerprint scanning and gesture-based unlock patterns. The p
Protects content using a custom pattern-based unlock mechanism requiring a specific touch sequence.
Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi
Secures the web management interface using username and password authentication for remote access.
Pinot is a distributed, columnar analytical database designed for high-concurrency, low-latency query processing. It functions as a real-time OLAP datastore, enabling interactive, user-facing analytics by ingesting and querying massive datasets from both streaming and batch sources. The system architecture relies on a centralized controller for cluster coordination and a distributed segment-based storage model to ensure horizontal scalability. The platform distinguishes itself through a hybrid ingestion pipeline that unifies real-time event streams and historical batch data into a single quer
Protects data and management endpoints using basic authentication.
该项目是一个参考实现,为 Spring Data 生态系统中的数据访问模式和仓库抽象提供了大量实用示例。它作为一个全面的展示,用于在各种关系型和非关系型数据库中实现一致的数据层。 该仓库专门演示了通过在单个应用程序中集成关系型、文档型和向量数据库来实现多存储持久化。它包括用于管理高维嵌入和跨不同数据库技术的相似性搜索的向量搜索实现。 涵盖的其他功能包括用于非阻塞操作的响应式数据访问和异步数据流。该项目还提供了关于原生镜像优化的指导,以通过提前编译(AOT)提高启动性能和内存使用率。 这些示例进一步说明了多租户数据隔离、数据仓库 API 的设计以及地理空间和全文搜索的集成。
Restricts data access based on user authentication by securing the repository layer.
JHenTai 是一个专用的图库客户端和媒体浏览器,用于访问成人图像库和漫画。它作为一个多源媒体下载器和本地图像库管理器,允许用户从远程来源查找、查看和保存内容。 该应用程序具有基于生物识别的访问控制功能,使用指纹扫描来保护私人图像库和账户资料。它还包括一个基于回退的请求路由系统,当主要数据提供程序无法响应时,将内容请求重定向到次要来源。 该平台涵盖了广泛的内容发现和管理功能,包括关键词搜索、基于标签的过滤以及带有任务恢复功能的队列式下载系统。它提供了用于本地库组织、本地文件与远程上传者元数据自动同步的工具,以及支持多种布局模式以适应不同屏幕尺寸的媒体查看器。 用户身份和社区互动通过账户认证、资料切换以及提交评分、投票标签和发布评论的工具进行管理。
Secures the application interface and private media libraries using biometric fingerprint authentication.
This project is a Telegram API client and media archiving system designed to programmatically retrieve chat histories and export media. It functions as a download manager and message forwarder, allowing users to back up photos, videos, and documents from Telegram chats into structured local archives. The system distinguishes itself through advanced content filtering and forwarding capabilities. It can monitor chats for new messages, apply custom regular expressions to filter media by size or date, and automatically forward content between chats. This includes the ability to export protected c
Protects the management interface using secret login keys and configurable host bindings.
This project provides a collection of official base images for building and running .NET applications across various operating systems and hardware architectures. It includes standardized runtime environments, containerized development kits, and specialized images designed for isolated application execution. The collection is distinguished by its focus on image optimization and security hardening. It offers distroless images that remove shells and package managers to reduce the attack surface, as well as composite layering and ahead-of-time compilation to improve startup performance and lower
Provides mechanisms to protect management interfaces and telemetry endpoints using API keys, certificates, and OpenID Connect.
宝塔面板 (BaoTa) 是一个基于 Web 的 Linux 服务器控制面板和系统管理仪表盘,专为管理托管环境和系统资源而设计。它提供图形化界面,将管理操作转化为系统级配置,使用户无需完全依赖命令行即可管理 Linux 服务器和 Web 托管栈。 该平台通过 AI 驱动的服务器运维脱颖而出,利用人工智能进行性能分析,并通过自然语言命令执行维护任务。它支持多节点编排,能够从单一界面协调多个服务器实例,实现负载均衡、数据复制和机器迁移。 该软件涵盖了广泛的管理功能,包括 Docker 容器编排、数据库生命周期管理和自动 SSL 证书签发。它提供了全面的安全加固工具,如系统防火墙、暴力破解防护和多因素身份验证,以及用于实时性能跟踪和自动健康报告的监控工具。 面板的安装和部署通过在纯净 Linux 系统上运行命令行脚本来完成。
Protects the web management interface using basic authentication, dynamic passwords, and custom ports.
Seedbox-lite 是一个自托管的媒体中心和种子流媒体网关。它作为一个容器化应用程序,编排种子引擎和响应式 Web 界面来管理下载并流式传输视频内容。 该系统通过 REST API 将种子后端与前端分离。它支持从种子文件中实时播放视频,允许在完整传输完成之前开始观看。 该平台涵盖了使用磁力链接的种子下载管理、带有字幕集成的媒体播放以及磁盘缓存管理。访问通过基于密码的身份验证进行保护,并且系统包含零上传策略,通过禁用跟踪器和终止连接来实现。 该应用程序使用 Docker Compose 进行部署,以实现一致的环境管理。
Protects the management interface and data access layers via password-based security.
Devilbox is a containerized development environment that provides a reproducible suite of web servers, databases, and language runtimes managed through a unified configuration. It functions as a Docker-based local development stack for LAMP and MEAN software stacks and as a manager for switching between different versions of these services to match specific project requirements. The system distinguishes itself by automating local network orchestration. It includes a Docker-based virtual host manager that automatically maps local directories to custom domains and a local DNS and SSL orchestrat
Provides mechanisms to password-protect or disable the built-in administration interface.
该项目是一个专为 Laravel 应用设计的基于 Web 的日志查看器和管理界面。它作为一个集中式仪表板,用于浏览、搜索和管理系统日志,而无需直接访问原始文件或 SSH。 该系统作为多主机日志聚合器,利用远程代理在同一位置查看和索引来自多台服务器的日志。它包括一个基于正则表达式的解析器,用于解释来自非标准日志文件的结构化数据,从而允许自定义日志格式定义和严重性级别映射。 广泛的功能包括基于索引的文件导航(带有压缩存储以提升性能)、基于块的全局搜索,以及过滤应用特定堆栈跟踪的能力。该项目还提供用于日志检索和文件夹管理的编程 API,以及用于保护生产环境的基于中间件的访问控制安全层。
Protects the web management interface and API requests via custom authorization middleware.
obs-websocket 是一个用于 OBS Studio 的 WebSocket 远程控制插件和扩展。它作为一个 JSON-RPC 网络 API,允许外部设备和应用程序管理软件设置、场景和流媒体操作。 该项目提供了一个标准化的网络协议,支持远程命令执行和事件驱动的状态同步。它使用加盐挑战身份验证来保护这些连接,以验证客户端身份。 该接口涵盖了广泛的生产功能,包括场景和源管理、音频电平控制以及用于录制和流媒体的输出管理。它还支持系统统计查询和软件状态监控,以促进实时广播监控和工作流自动化。
Protects the remote management interface with password-based authentication to prevent unauthorized control.