How can we secure self hosted promptfoo server?

[harshaa947]

Request for shareable URL is done without any authentication config.

promptfoo/src/share.ts

Line 22 in 6cf39fa

const response = await fetchWithProxy(`${apiBaseUrl}/api/eval`, {

[efung]

Alternatively, is there a way we can pass headers to the client used to talk to the server?

For example, if our self-hosted server is behind something that implements Basic Auth, we could configure the HTTP headers sent by the promptfoo client to pass the authentication secret.