Remove SSL cert for localhost

This commit removes SSL certification creation and usage when running
webviz in localhost mode. This makes it HTTP-only for localhost with no
HTTPS option.

Author: pinkwah

.github/workflows/webviz-config.yml

@@ -68,7 +68,6 @@ jobs:
 
       - name: 🤖 Run tests
         run: |
-          webviz certificate
           webviz preferences --theme default
           pytest ./tests --headless --forked
           webviz docs --portable ./docs_build --skip-open

INTRODUCTION.md

@@ -82,15 +82,6 @@ webviz build ./examples/basic_example.yaml
 and then modify `./examples/basic_example.yaml` while the Webviz application is
 still running, a hot reload will occur.
 
-#### Localhost certificate
-
-For quick local analysis, `webviz-config` uses `https` and runs on `localhost`.
-In order to create your personal :lock: `https` certificate (only valid for `localhost`), run
-```bash
-webviz certificate --auto-install
-```
-Certificate installation guidelines will be given when running the command.
-
 #### User preferences
 
 You can set preferred :rainbow: theme and/or :earth_africa: browser, such that `webviz` remembers it for later

webviz_config/_docs/open_docs.py

@@ -30,7 +30,6 @@ def _index() -> str:
         host="localhost",
         port=port,
         debug=False,
-        ssl_context=webviz_config.certificate.LocalhostCertificate().ssl_context,
     )
 
 

webviz_config/_localhost_token.py

@@ -7,14 +7,13 @@
 
 
 class LocalhostToken:
-    """Uses a method similar to jupyter notebook (however, here we do it over
-    https in addition). This method is only used during interactive usage on
-    localhost, and the workflow is as follows:
+    """Uses a method similar to jupyter notebook. This method is only used during
+    interactive usage on localhost, and the workflow is as follows:
 
     - During the flask app building, a one-time-token (ott) and a cookie_token
       is generated.
     - When the app is ready, the user needs to "login" using this
-      one-time-token in the url (https://localhost:{port}?ott={token})
+      one-time-token in the url (http://localhost:{port}?ott={token})
     - If ott is valid - a cookie with a separate token is set, and the
       one-time-token is discarded. The cookie is then used for subsequent
       requests.
@@ -28,6 +27,7 @@ class LocalhostToken:
 
     The port is used as a postfix on the cookie name in order to make sure that
     two different localhost applications running simultaneously do not interfere.
+
     """
 
     def __init__(self, app: flask.app.Flask, port: int):

webviz_config/certificate/__init__.py

@@ -3,7 +3,6 @@
 import pathlib
 
 from ._build_webviz import build_webviz
-from .certificate._certificate_generator import create_ca
 from ._docs.open_docs import open_docs
 from ._docs._create_schema import create_schema
 from ._user_data_dir import user_data_dir
@@ -61,29 +60,6 @@ def main() -> None:
 
     parser_build.set_defaults(func=build_webviz)
 
-    # Add "certificate" parser:
-
-    parser_cert = subparsers.add_parser(
-        "certificate",
-        help="Create a https certificate authority for webviz "
-        "(validity limited to localhost only)",
-    )
-
-    parser_cert.add_argument(
-        "--force",
-        action="store_true",
-        help="Overwrite webviz root https certificate if it already exists",
-    )
-
-    parser_cert.add_argument(
-        "--auto-install",
-        action="store_true",
-        help="Automatically install the webviz certificate in "
-        "your personal public key infrastructure",
-    )
-
-    parser_cert.set_defaults(func=create_ca)
-
     # Add "documentation" parser:
 
     parser_docs = subparsers.add_parser(

webviz_config/certificate/_certificate_generator.py

@@ -16,7 +16,6 @@ import dash_html_components as html
 from flask_talisman import Talisman
 import webviz_config
 import webviz_config.plugins
-import webviz_config.certificate
 from webviz_config.themes import installed_themes
 from webviz_config.common_cache import CACHE
 from webviz_config.webviz_store import WEBVIZ_STORAGE
@@ -67,7 +66,9 @@ app._deprecated_webviz_settings = {
 CACHE.init_app(server)
 
 theme.adjust_csp({"script-src": app.csp_hashes()}, append=True)
-Talisman(server, content_security_policy=theme.csp, feature_policy=theme.feature_policy)
+if __name__ != "__main__":
+    # Do not increase security when running this script directly
+    Talisman(server, content_security_policy=theme.csp, feature_policy=theme.feature_policy)
 
 WEBVIZ_STORAGE.use_storage = {{portable}}
 WEBVIZ_STORAGE.storage_folder = Path(__file__).resolve().parent / "webviz_storage"
@@ -153,7 +154,6 @@ if __name__ == "__main__":
     app.run_server(
         host="localhost",
         port=port,
-        ssl_context=webviz_config.certificate.LocalhostCertificate().ssl_context,
         debug=False,
         use_reloader={{not portable}},
         dev_tools_prune_errors=False,