SmartThingsCommunity / smartapp-sdk-nodejs

Javascript/NodeJS SDK to create SmartThings SmartApps
https://smartthings.developer.samsung.com/
Apache License 2.0
146 stars 80 forks source link

feat: Removed auto-confirmation for API Access apps #142

Closed bflorian closed 4 years ago

bflorian commented 4 years ago

Removed auto-confirmation of API Access app target URLs as it is a security issue. Addresses issue #139

Note that while not a breaking change to the functionality of an API Access app that has already been deployed, this change does affect the app development process in that the app will no longer automatically response to a registration request and therefore the callbacks state will remain PENDING until the user visits the URL printed to the server log.