Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Local API Access #273

Open
muhlba91 opened this issue Dec 10, 2024 · 0 comments
Open

Local API Access #273

muhlba91 opened this issue Dec 10, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@muhlba91
Copy link
Owner

According to https://github.com/hella-info/onyx_api/tree/master?tab=readme-ov-file#local-access, ONYX.Center supports local API access.

The corresponding feature request in the client library is muhlba91/onyx-client#275.

To support local API access in Home Assistant, we need to disable certificate validation on a per-session basis.
Even if disabling it globally is supported, this would open the ecosystem to harmful attacks and is not an option.
Hence, to re-use Home Assistant HTTP client management, we must determine if disabling certificate validation is possible.

Additionally, to enhance security, it would be beneficial to disable certificate validation only during the first connection and then perform certificate pinning for further connections. However, this is a second priority because local access already provides a better security encapsulation regarding man-in-the-middle attacks.

@muhlba91 muhlba91 added the enhancement New feature or request label Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant