Security

How to hide login information from URL?

subitha_kennedy
Loves-to-Learn Everything

I created a landing page for all applications.. but the login information is visible in url.. how can i change that xml..

I don't want to see the login information in url. Attached the code I am using .

<panel>
<input type="dropdown" token="user_name" searchWhenChanged="true">
<label>User Name</label>
<selectFirstChoice>true</selectFirstChoice>
<search>
<query>
| rest /services/authentication/current-context splunk_server=local | fields username | eval username=mvindex(split(username,"@"),0)
</query>
</search>
<fieldForLabel>username</fieldForLabel>
<fieldForValue>username</fieldForValue>
</input>

 

 

 

<div class="dropdown-content">
<a>$form.user_name$</a>
<a href="*" target="_blank">My Profile</a>
</div>

 

 

Any reply would be highly helpful..

 

 

Thanks,

Splunk lover

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @subitha_kennedy,

let me understand: you created a dashboard panel that displays the usernames of your user and you want to hide usernames, whay you did it?

Ciao.

Giuseppe

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The values of the tokens are passed in the URL - the only way to not have them present in the URL is to not have them in the first place (or by obfuscating the values and somehow unobfuscating when you need to use the original value).

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...