Clever Geek Handbook

Can you see the code for shiny shimmery apps

Hi, this is more a code security issue, not a straight coding issue. But I was wondering if it is possible to see the code in ui.R

and server.R

and that creates the application's web browser page?

eg. Although I'm sure I can just ask Garrett to see the code ... is it possible, without permission, to somehow see the code associated with this URL http://glimmer.rstudio.com/gsee/TFX/ that launches the shinny app? As this can be a problem when posting sensitive data / code etc.

Is there a way to add a secure username and password to shinny apps? so that only select users can access the app?

I know obviously you can see the code that launches shinny apps from the gists, but was more curious about glimpses of apps.

PS Garrett (if you can see that), I'm just using your app as a good example app ... since it uses flicker ... and its attractive code in my opinion.

+3


source to share


2 answers


As you talk about shiny applications running on glimmer.rstudio.com

, you are talking about applications that run on a shiny server (as opposed to applications that run locally through a call runApp

).

A, such as ui.R

and server.R

located on the server, and they are not loaded on your computer when you start it. What's more, they seem to be shiny protected as if you were trying to access them via a URL like http://shinyserver.example.com/app/server.R all you get is an HTTP 404 error ...

Thus, just as it is impossible to access PHP or Ruby files that a website or web applications use, you cannot, for obvious security reasons, access R files for a brilliant application.



As far as securing access to a shiny application, I'm not sure if this is a built-in feature on the shiny server, but if you run it behind an Apache or Nginx proxy it should be able to use HTTP authentication for it.

Note: I am not a brilliant expert, so this answer may be partially wrong. I just hope not completely :)

+4


source


Right now, don't put sensitive code or data on flicker server! It is insecure and any user on the server can access the code / data of other users. A bug report has been sent and the developers are working on it, to my surprise the server is still online.



Username / passwords won't help with this error. If you want to be safe, host Shiny Server yourself as the Flash Server is not secure.

0


source






More articles:


All Articles