search

w3c / wot-thing-description

Web of Things (WoT) Thing Description
http://w3c.github.io/wot-thing-description/
Other
131 stars 63 forks source link

Mapping `tuya` device #1880

Open relu91 opened 2 years ago

relu91 commented 2 years ago

We are trying to map Tuya devices in node wot (https://github.com/eclipse/thingweb.node-wot/pull/735), but we struggled to fit their authentication mechanism inside the set of Thing Description SecuritySchemes. For the time being, we are opting for a workaround: defining a custom security scheme. However, I would like to understand if the tuya signature algorithm actually fits inside of the BearerSecurityScheme.

Reading the docs it seems that they are using a custom alg (HMAC-SHA256) plus a custom format (no jws or anything else). Do you think is it feasible to describe that algorithm using the regular BearerSecurityScheme but with specific values of alg and format ?

mmccool commented 9 months ago

I think this needs to move to the TD repo, but labelled with "Security" so the security TF will review it.