How to secure superset charts embedded using iframes into public websites

[akmr9]

Hello,

I am new to superset. Can someone please guide me on how to secure the superset charts embedded into public websites using iframes? Basically I want to restrict the usage of the charts outside of my website. Can we use host application authentication to authenticate with superset or can we use csrf tokens etc?

[przemekd]

Yep, you can implement a custom authentication module (see https://sairamkrish.medium.com/apache-superset-custom-authentication-and-integrate-with-other-micro-services-8217956273c1).

[aeperalta]

There is SIP-75 that is gonna be released the next year Q1-Q2 I readed in slack. And there is the solution that @przemekd said. Personally, I'll wait for the "official" authentication embedding.