hello_jupyter_proxy 0.2

Building applications to proxy

This is meant as a starting point for building useful applications to run in Jupyter Server Proxy. See the JSP docs and especially the examples page for more information.

For real web applications in Python, you will want a web framework rather than the low-level http.server module. There are many choices, but Tornado (used by Jupyter) and Flask are two well known ones.

Security: Once user A launches your application through Jupyter, it is listening on a TCP port, and user B can also connect to it and send requests. You might want to consider:

• Limiting what the application can do and what information it can retrieve, so accessing another user’s server is not too dangerous.

• Listening only on localhost (as in this example), to limit access to only users who can log into the same machine.

• Finding some way to verify that the user sending the request matches the user which the application is running as.

Which measures make sense will depend on your application and the environment in which you expect to use it.