JSON credentials

[CW!]

Nope, it gives " invalid credentials". CORS seems ok. Thanks for helping, though.

[Dr. McKay]

I guess you could try doing this as future-proofing against Google removing credentials in XHR URLs:

xhr.setRequestHeader('Authorization', 'Basic ' + btoa('user:pass'));

Not sure how nicely it'll play with same-origin policy though. Dunno how your environment is set up.

[CW!]

If I understand you, it's Chrome. The JSON HTTP is generated in javascript in a Chrome window, i.e. pushing a "button" in a Chrome webpage causes a javascript XMLHttpRequest, and the reply is processed there as well (xhr.responseText)

[Dr. McKay]

What are you using to consume the JSON response?

[CW!]

"HTTP Basic Authenification" was the clue I needed.

Found on the internet at
https://developer.mozilla.org/en-US/...Authentication

"Many clients also let you avoid the login prompt by using an encoded URL containing the username and the password like this:

https://usernameassword@www.example.com/

The use of these URLs is deprecated. In Chrome, the usernameassword@ part in URLs is even stripped out for security reasons. In Firefox, it is checked if the site actually requires authentication and if not, Firefox will warn the user with a prompt"

So I wonder how long this will work...

[Dr. McKay]

It works because the local web interface (not MyHS) uses HTTP Basic authentication, and that's how you embed credentials into a URL for use with that.

[CW!]

Thanks, but I already had "no password required..." checked.

Dr McKay's recommendation actually works, but I have no idea why - undocumented?

[Dr. McKay]

You can also try http://user:pass@LOCAL_IP/JSON?...

[lveatch]

Do you have "No Password Required for Local (same subnet) Login" under Setup -> Network enabled/checked?

[CW!]

The SDK, as an example, requires a status request to be in the following form:

https://myhs.homeseer.com/getsystems...USER&pass=PASS

It also says:

For accessing a local system, the user/pass is not required, just use the IP address of the system like:

http://IP_OF_SYSTEM/JSON?user=demo@h...uest=getstatus

(which is weird, because the example "like" has credential info)


I've been trying for hours to get a JSON command to work WITHOUT credentials, as it says above. I'm generating the JSON command from the local network, but it won't take a command without credentials. Are credentials now required even on local lan?