feat(Queue): require password to access jobs dashboard (#319)

* feat(Queue): add pw to access

* add example env

.env.local.example

@@ -20,6 +20,7 @@ NEXT_PUBLIC_CLERK_SIGN_UP_FALLBACK_REDIRECT_URL=/pull_requests
 NEXT_PUBLIC_APP_URL=
 NEXT_PUBLIC_APP_LOG_LEVEL=info
 QUEUE_DRIVER=redis
+QUEUE_DASHBOARD_PASSWORD=password
 
 # AWS
 AWS_SECRET_KEY_ID=

package.json

@@ -73,6 +73,7 @@
     "date-fns": "^3.6.0",
     "date-fns-tz": "^3.1.3",
     "eslint-plugin-jest": "^28.2.0",
+    "express-basic-auth": "^1.2.1",
     "framer-motion": "^11.1.9",
     "gray-matter": "^4.0.3",
     "he": "^1.2.0",

queue-dashboard.ts

@@ -1,13 +1,21 @@
 import express from 'express'
+import basicAuth from 'express-basic-auth'
 import { createBullBoard } from '@bull-board/api'
 import { BullMQAdapter } from '@bull-board/api/bullMQAdapter'
 import { ExpressAdapter } from '@bull-board/express'
 import { getQueue } from '@/queue/get-queue'
 import { config } from '@/config'
+import process from 'node:process'
 
 const serverAdapter = new ExpressAdapter()
 serverAdapter.setBasePath('/jobs')
 
+// Add auth to require password for access
+const auth = basicAuth({
+  users: { admin: process.env.QUEUE_DASHBOARD_PASSWORD ?? '' },
+  challenge: true, // Will show browser prompt
+})
+
 createBullBoard({
   queues: Object.keys(config.queue.queues).map(
     (queue) => new BullMQAdapter(getQueue(queue)),
@@ -17,6 +25,9 @@ createBullBoard({
 
 const app = express()
 
+// Apply auth middleware to all routes
+app.use(auth)
+
 app.use('/jobs', serverAdapter.getRouter())
 app.get('/', (_req, res) => res.send('ok'))