chendo / lifx-http

A HTTP API for controlling LIFX devices.
MIT License
91 stars 13 forks source link

Add some sort of authentication? #13

Open l3rady opened 10 years ago

l3rady commented 10 years ago

I'm currently running this on a windows server and have it open to the internet so I can control my lights away from home. I'm also using a Pebble watch app that works with this API allowing my to control my lights from my wrist.

All in all very happy with my setup but there is one thing troubling me. That is the api is open and public and if anyone came across the public api they would be able to control my lights.

So I would like to request if it is possible to add some sort of authentication to the api.

E.G. a username and password or an API token of some sorts.

Thanks

Scott

lanej0 commented 10 years ago

Can you add some sort of Basic Auth from your web server for the time being? I've just set up HTTP Basic Auth on my *nix server where this is running.

To clarify: I'm proxying requests through Apache to :56780