Skip to main content

SphereGate: a sign-in in front of any web service

Peter Ekhator
NewConsole

Every team ends up writing a login screen for staging, an internal tool or a client demo. Now you don't have to: turn on SphereGate and every request is checked before it reaches your app. Your code doesn't change.

  • Team sign-in: only people in your ComputeSphere account get in. Let in everyone, or only the Owner, Admins or Members.
  • Password: one shared password for demos and client review. Changing it signs everyone out.
  • Limit by IP address: add an IP allow list, and a visitor needs an allowed address and a sign-in.
  • Every address: your service's default address and every custom domain attached to it.
  • Out of the way: a sign-in carries on for up to 24 hours without asking again. We check every hour, so someone you remove from your account loses access within an hour.
  • Webhooks and health checks: always-public paths let them through with no sign-in.
  • In your app: read who signed in from the X-SphereGate-Email header, and verify the signed token in X-SphereGate-Token.

Turn it on under your service's Settings › Networking › Access protection.

Read the guide →