search

roflcoopter / viseron

Self-hosted, local only NVR and AI Computer Vision software. With features such as object detection, motion detection, face recognition and more, it gives you the power to keep an eye on your home, office or any other place you want to monitor.
MIT License
1.5k stars 154 forks source link

MJPEG streams also requring auth #570

Open k0stett opened 1 year ago

k0stett commented 1 year ago

https://viseron.netlify.app/components-explorer/components/ffmpeg#mjepg-streams

I turned on authorization in viseron (thank you very much for that update!) but it applies not only web interface but for static mjpeg streams too. May be there is a possibility to allow unauthorized access to mjpeg streams?

roflcoopter commented 1 year ago

Auth applies to everything atm (API endpoints, streams static files etc)

How are you consuming the MJPEG streams? There is an entity with a camera access token that can be used to construct the proper URL with the token.

My long term plan is to be able to create API tokens that you can use in third party tools and document how the auth works a bit better.

roflcoopter commented 1 year ago

Maybe something like an allowed networks list that is allowed to bypass auth as well

k0stett commented 1 year ago

How are you consuming the MJPEG streams?

I link them to HASS cause linking with mqtt images is very slow in updating camera pictures.

API tokens seems legitimate way to do it, I like it if it gonna appear