Comments (5)
You can certainly restrict access by IP address via the Azure Portal. Since you are already hosted on Azure, I'm unclear on why you wouldn't just auth to your own AAD principal.
I'll double check w/ team w.r.t. thoughts on backdoor you've identified.
from chat-copilot.
Checking with the team, those test user accounts are expected to be Microsoft accounts.
We do have a feature update just about to land that is a significant evolution in our security model...including a "noauth" option. I'll have the feature owner follow-up as it becomes ready to merge next week.
from chat-copilot.
Sounds good. Looking forward to it.
from chat-copilot.
Hi @hacker01111000, I just submitted this PR last week: #126
This change enables users to run Chat Copilot locally with no authentication, so you are no longer required to set up an app registration and sign in with a Microsoft account. Instead, the user is treated as a pseudonymous "Default User" and multi-user features are disabled.
We still require Azure Active Directory authentication by default when deploying Chat Copilot to Azure. (To add to what Chris said before, those test accounts in the .env file are for our testing pipeline.) If you'd like to allow users to sign in with an authentication provider other than Azure/Microsoft, I encourage you to explore that and submit a PR!
from chat-copilot.
I'm going to go ahead and close this issue since I think the latest changes I mentioned above address your question. However, if you have further questions, please feel free to reactivate it or open a new issue. Thank you!
from chat-copilot.
Related Issues (20)
- [Help Required] Moving to Managed Identity for Azure Resource Authentication HOT 1
- Chat extension log output is not as informative as it used to be HOT 1
- Docker-compose up not working HOT 2
- How do I add support for csv, ppt, and support for other document types? HOT 1
- Unable to generate bot response. Details: Error: 500: Internal Server Error HOT 1
- Unable to access the web app HOT 7
- Conflict between appsettings and code HOT 1
- Infinite questions in copilot HOT 1
- Chat memories are not deleted when chat session is deleted HOT 7
- ChatPlugin crashes on Azure OpenAI gpt-35-turbo 1106 HOT 4
- What's the default queue name for AzureQueue? HOT 5
- Power Platform Chatbot Copilot Studio: Issue with publishing Copilots HOT 1
- User Feedback content violation
- After running the memory pipeline, it keeps throwing an error: 'File not found: chatmemory/{GUID}/__pipeline_status.json HOT 3
- Can't retrieve document memory in chat HOT 6
- Cannot read properties of undefined (reading 'getLogger') HOT 6
- Definition of quality health care HOT 1
- Definition of quality health care HOT 1
- Getting 404 - Ressource not found HOT 2
- 我如何在本地部署
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from chat-copilot.