Introduce security for local HTTP API

goecharger / go-eController-API

API specification for go-eController

9 stars 1 forks source link

Introduce security for local HTTP API #10

Open ai91 opened 5 months ago

ai91 commented 5 months ago

Firmware v1.0.6 allows to enable local HTTP API v2, which is great. Unfortunately the HTTP API is not secured anyhow. What means anyone who got access to the local network may send any request, including configuration modifications.

Suggestion: add some minimal security, like Basic Auth.