Basic Authentication

[Soosbrecht]

Hi, i just wanted to ask if there is any plan on implementing some sort of authentication for the HomeAssistant Add On? Please correct me if im wrong and just to stupid to find it :D

[bbernhard]

see #519 and in particular #519 (comment)

[CodeShellDev]

Hi, i just wanted to ask if there is any plan on implementing some sort of authentication for the HomeAssistant Add On? Please correct me if im wrong and just to stupid to find it :D

Sorry for making cross-repo replies,
but just wanted to tell you @Soosbrecht that currently Home Assistant is not supported since they do not support any kind of auth (submitted a PR but due to their strict guidelines adding auth just for proxies is not wanted 🫤),
so I have implemented Path Auth (/@auth=TOKEN) for secured-signal-api and also prepared a guide for integrating Home Assistant, that will release tomorrow 😁 for v1.5.0.

Hope that this fits your setup!

[Soosbrecht]

@CodeShellDev awesome thanks for your work :) I'm looking forward to it

[CodeShellDev]

@CodeShellDev awesome thanks for your work :) I'm looking forward to it

It has now been released come check it out @Soosbrecht ! 😁 (I have been bugtesting as much as possible but, there might still be some tiny bugs)

[CodeShellDev]

@CodeShellDev awesome thanks for your work :) I'm looking forward to it

It has now been released come check it out @Soosbrecht ! 😁 (I have been bugtesting as much as possible but, there might still be some tiny bugs)

Let me know if you have any questions, or any issues 😁

[vithurshanselvarajah]

@Soosbrecht wanted to mention i set up signal notifications on home assistant. I setup a reverse proxy via Apache with basic Auth for signal. In home assistant I set the URL to the equivalent of this - https://username:password@url

Seems to be working solidly for me

[CodeShellDev]

Wait you can add the username and password in the url of Home Assistant (natively)?
I didn't even know 😅...

I guess pysignalclirest api is providing this functionallity? Or are you using a custom setup?
Thanks in advance!

EDIT:

I really didn't know this was an URL standard, thank you @vithurshanselvarajah!

[vithurshanselvarajah]

Wait you can add the username and password in the url of Home Assistant (natively)?
I didn't even know 😅...

I guess pysignalclirest api is providing this functionallity? Or are you using a custom setup?
Thanks in advance!

EDIT:

I really didn't know this was an URL standard, thank you @vithurshanselvarajah!

I wasn't sure if it would work. I was very pleasantly surprised. Although let's not forget basic Auth is technically not secure and exposes the username and password with every request. If you go down this route. Use HTTPS! It's at least one layer of security

[CodeShellDev]

I thought that it is added as a Authorization header?
I have just tried it out and to my knowledge the client parses the url and may or may not add the credentials to the Authorization header, which I think doesn‘t expose the credentials…

So it doesn‘t behave differently from what Bearer Token would do…