Restricting access

eniston offers various options to restrict a workspace from being accessed. By default, anyone with a link can view the categories and articles. If you want to restrict access, we offer the following options:

  • Frontend authentication

  • IP whitelist

  • IP blacklist

  • Simple password

Frontend authentication

When activating “Frontend authentication,” only members of your team can access the workspace. You have to actively invite them to your team. If you don’t want team members to be able to make any content changes, you can assign them the “Read-only” role.

IP whitelist

As the name suggests, you can block all IP addresses from accessing your workspace and only allow specific IP addresses entrance. You can add multiple IP addresses separated by commas.

We currently only support IPv4 addresses.

IP blacklist

If you generally want to allow access to any IP but need to block certain IP addresses, use this. You can add multiple IP addresses separated by commas.

We currently only support IPv4 addresses.

Simple password

You can also restrict access with a simple password. This is available for the entire workspace, as well as on a per-category basis. Both work the same way, and you can combine them. The category password can be defined in the category settings.

Passing the password via URL

If you want to pass the password via a URL parameter, you can do that by simply adding ?pw=YOUR-PASSWORD at the end of the URL. By doing so, viewers automatically gain access to the password-protected workspace and/or category. If you don’t want people to see the actual password, you can use the pwe parameter instead and pass the encrypted password (keep reading).

Encrypt via OpenSSL

To encrypt the password, use openssl_encrypt with your preferred programming language. Please also make sure to use the AES-256-CBC algorithm.

openssl_encrypt("YOUR-PASSWORD-HERE", 'AES-256-CBC', "WORKSPACE-ID", 0, 'SECRET');
 
// Q9r+NoOsI0wxJBgld5O9DA==

You can obtain the WORKSPACE-ID and the 16-digit SECRET within your workspace settings.

Use this hash for the pwe parameter, eg. https://help.domain.com?pwe=Q9r+NoOsI0wxJBgld5O9DA==


Was this article helpful?