Whitelist device(s) for the content server?

[GeekDrop]

I have my calibre content server set to use a login + pw to access it, but I'd also like to be able to whitelist certain devices, like my Nook Tablet and my cell phone, so that if that device tries to access my server it won't ask me for the login creds.

This way it's protected from "unauthorized" access (unless I specifically give the creds out), while at the same time, not a hassle for me specifically.

Is there some way to add specific devices to a caliber content server whitelist? Doing so by MAC filtering would be great.

[kovidgoyal]

You know that MACs can be spoofed and that sniffing MACs sent over a wireless connection is trivial, right?

You cannot use anything other than an authentication scheme to do authentication, it would be meaningless. You might as well just do away with the password completely.

[GeekDrop]

Originally Posted by kovidgoyal

You know that MACs can be spoofed and that sniffing MACs sent over a wireless connection is trivial, right?

Yep, I actually wrote a program named WarDrive ToolBox years ago that had a feature to spoof MAC Addresses.

My Calibre library isn't "Top Secret", if someone wants to expend the effort required to sniff out one of the whitelisted MACs that can access my eBook library they're welcome to take a look around once they get in, it's more for just blocking out the laymen, who may just be doing broad scans for open Calibre servers to leech from.

[GeekDrop]

Another idea aside from MAC could be by internal IP address; I have my devices setup to always use the same reserved DHCP IP. That way if I'm at home on the device, it would be whitelisted, and when I'm out and logged in via my VPN, it would also be whitelisted.

[kovidgoyal]

The server is not going to have any such functionality, but you are free to reverse proxy it behind any other http server like apache or iis or nginx or whatever with whatever authentication logic you like.

http://manual.calibre-ebook.com/serv...-reverse-proxy