From fc86e10a68a5b36ae7cae1a1dd8d4786b8feb415 Mon Sep 17 00:00:00 2001 From: Niko Diamadis Date: Thu, 7 Oct 2021 14:01:58 +0000 Subject: [PATCH] docs: add info about --dev parameter (#1842) * docs: Add info about --dev parameter * docs: restyle --dev parameter explanation * minor reformatting Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com> --- README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index eded72c5e0..0e4b11f018 100644 --- a/README.md +++ b/README.md @@ -63,7 +63,13 @@ parse-dashboard --dev --appId yourAppId --masterKey yourMasterKey --serverURL "h You may set the host, port and mount path by supplying the `--host`, `--port` and `--mountPath` options to parse-dashboard. You can use anything you want as the app name, or leave it out in which case the app ID will be used. -NB: the `--dev` parameter is disabling production-ready security features, do not use this parameter when starting the dashboard in production. This parameter is useful if you are running on docker. +The `--dev` parameter disables production-ready security features. This parameter is useful when running Parse Dashboard on Docker. Using this parameter will: + +- allow insecure http connections from anywhere, bypassing the option `allowInsecureHTTP` +- allow the Parse Server `masterKey` to be transmitted in cleartext without encryption +- allow dashboard access without user authentication + +> ⚠️ Do not use this parameter when deploying Parse Dashboard in a production environment. After starting the dashboard, you can visit http://localhost:4040 in your browser: