search

openhab / openhab-cloud

Cloud companion for openHAB instances
Eclipse Public License 2.0
312 stars 162 forks source link

[Feature Request] 2-Step authentication for openHab Cloud #125

Open mavris opened 6 years ago

mavris commented 6 years ago

Hi, I am using openHab cloud in order to use Alexa's skill for openHab. Everything is working fine but I am feeling weird about the issue that anyone who can 'break' into my account could control my entire house. I think 2-step authentication is crucial for cloud.

marziman commented 6 years ago

Hi, That s a good idea. Donyou have any idea or special proposal. If not I would check how we could introduce that.

Thx & BR Mehmet

bergminze commented 6 years ago

A very relevant objection by mavris!

What about certificate based PKI authentication? Managing openHAB from the several devices (Android etc.) connected to the openHAB cloud (by openHAB cloud connector) should only be possible with "certificate registered, known, valid and authorized" clients.

With this approach, for example when connectect by web browser to the dashboard (HABPANEL, BasicUI) over cloud service, it could be avoided to request for username/password (realm "users") again and again after timed out user sessions.

guw commented 5 years ago

I haven't checked the code yet but I think https://github.com/speakeasyjs/speakeasy is very common for NodeJS apps.