QuickStackQuickStack
How ToNetworking

Basic Authentication

Protect your QuickStack applications with HTTP Basic Authentication via Traefik middleware.

Basic Authentication adds a username/password prompt in front of your application at the ingress level. It is implemented via Traefik middleware — your application code needs no changes.

How it works Traefik intercepts all requests and prompts for credentials before forwarding to your container. Authentication is per-domain; unauthenticated requests receive 401 Unauthorized.

Adding credentials

  1. Open the app in the Project Canvas and go to Settings → Advanced.
  2. Scroll to the Basic Authentication card.
  3. Click Add Auth Credential.
  4. Enter a Username and Password.
  5. Click Save, then Deploy.

Redeployment required All credential changes (add, edit, remove) require a redeployment to take effect.

Use cases

  • Protecting staging environments from public access
  • Adding an extra layer to admin panels
  • Temporary access for clients or testers (easy to revoke)

Security considerations

Limitations

  • Basic Auth transmits credentials as Base64 on every request — always use HTTPS.
  • Not suitable as the sole authentication mechanism for sensitive data.
  • No session — browsers re-send credentials on each request.

Recommendations

  • Use strong, random passwords.
  • Rotate credentials when access is no longer needed.

Troubleshooting

SymptomFix
Login prompt not appearingEnsure app was redeployed after adding credentials
Prompt appears but credentials rejectedClear browser cache; try incognito window
No credentials configuredCheck that at least one credential is saved

QuickStack.me Domain

Use the built-in quickstack.me domain service for instant HTTPS access without manual DNS configuration.

Node Ports

Expose non-HTTP application ports directly on cluster nodes using Kubernetes NodePorts for TCP/UDP workloads.

On this page

Adding credentialsUse casesSecurity considerationsTroubleshootingRelated