CurtRod / SimpleEVSE-WiFi

Brings EVSE WB/DIN into your WiFi
https://www.evse-wifi.de
78 stars 33 forks source link

No authentication possible on Safari MacOS and iOS #15

Closed HA-TB303 closed 5 years ago

HA-TB303 commented 6 years ago

It's not possible to authenticate on iOS and MacOS because apple devices do not allow basic auth without https.

In short, it's not possible to use the webUI from and Apple IOS device at all and It's not possible to use the webUI on a Apple Macbook using the Safari webbrowser. It does work on a Macbook when using Chrome or Firefox.

HA-TB303 commented 6 years ago

A colleague of mine just informed me that it has nothing to do with basic auth without https, but Safari simply does not allow basic auth for websockets.

https://serverfault.com/questions/910702/apache2-safari-exclude-basic-authentication-for-websockets

njordan77 commented 6 years ago

can confirm this....on Win10 everything connects perfect to APmode....but iphone does show the login mask but from there it does not continue with correct password into the main GUI.....is there a way to fix this?

njordan77 commented 6 years ago

Any progress here, or solution that could fix the issue?

CurtRod commented 6 years ago

Sorry for late response. I will try to find a solution asap.

Leftaf commented 6 years ago

I found following https://github.com/Links2004/arduinoWebSockets

and Issue https://github.com/Links2004/arduinoWebSockets/issues/25

may this help to improve security to iOS

njordan77 commented 5 years ago

Hi, any update? Tried recently the latest version + hoped naively that IOS12 could have fixed it - but no success. Still not able to connect in AP Mode from my Iphone. Connecting with my PC (Win+Firefox) is no problem at all. Regards Norbert

CurtRod commented 5 years ago

I suspect the error in the JS part of the web interface. Unfortunately, I do not have a Mac to hit the debugger in Safari. So at the moment I can not analyze what exactly the problem is. Does anyone have the opportunity to do this? That would be great.

njordan77 commented 5 years ago

hi, i would love to support - but the only thing i have in hand is an iphone 6s - if that may help. Thanks for the support!

HA-TB303 commented 5 years ago

image

HA-TB303 commented 5 years ago

Safari does not allow basic auth for websockets.

https://serverfault.com/questions/910702/apache2-safari-exclude-basic-authentication-for-websockets

HA-TB303 commented 5 years ago

@CurtRod , if you need any help testing, I have an iMac, macbook, iPhone and iPad available.

CurtRod commented 5 years ago

@michel72 , thank you. I wondered, because i've seen some other projects using websockets with basic auth and there are no problems with safari. I have only an iPhone 7 for testing here but there is no way to debug with that. good news for all Apple users: In the next release will be an option to deactivate the basic auth, however this should only be a work around and not a preferred solution.