Comments (3)
Yes, it's easy to create whitelist array and to get the self.client_address[0]
from the request.
from broadlink-http-rest.
I've managed to get Google Assistant integrated, a significant milestone. However, to make things easy, I used IFTTT (if this then that) and the "WebHooks" service they have to send random HTML requests. This can be expanded to way beyond just Google Assistant since IFTTT supports just about anything as a trigger. If you want to lower the temperature of house when a stock rises, I think you could do that!
However, WebHooks requests are made from the Internet, so security is a major concern. Here is a list of security-related issues I've implemented (about to push to my tree) for comment. All in "General"
- serverAddress = IP to listen on, rather than 0.0.0.0
- serverPort = listen port (defaults to 8080)
- learnFrom = IP addresses that can issue new commands to learn from (default is any)
- broadcastAddress = a pending patch to python-broadlink will allow device discover to use a specified broadcast IP
- Autodetect = if set to an int, do device discovery and add detected devices to settings.ini Timeout in the given seconds. This option won't persist and is auto-cleared.
- allowOverwrite = if set to anything, allow learned commands to overwrite an existing entry. The default is to deny changing a command that is already learned
- restrictAccess = restrict all operations to this list of IPs
- password = allow password-protected POST operations from any address
If password is specified, then GET operations are only allowed from hosts in restrictAccess. GET operations won't need a password, but they'll only be allowed from specific hosts. There is currently no way to restrict hosts AND require a password, but serverAddress combined with firewall rules on the underlying host would be solution for the security paranoid, setting password and not restrictAccess.
from broadlink-http-rest.
Resolved by #13
from broadlink-http-rest.
Related Issues (20)
- running issues
- Learn command problem HOT 3
- Unable to send commands HOT 4
- Interested in Advanced Features? HOT 2
- Where is the "learned code" saved? HOT 1
- Could you please provide an example of how to make a simple Macro Command? HOT 2
- 'module' object has no attribute 'SIGUSR1' HOT 2
- On/Off commands not sent HOT 5
- consecutive commands issue HOT 14
- RF does not receive and send HOT 18
- Duraflame?
- RM3 Mini support? HOT 4
- Send TV Channel Number HOT 4
- sendCommand not working after migration HOT 7
- AttributeError: rm instance has no attribute 'key' HOT 2
- SyntaxError: JSON.parse: unexpected character at line 1 column 1 after a new learn HOT 5
- Copy an paste commands differnt devices HOT 3
- Sky Q Black HOT 2
- Is this offical? HOT 1
- NameError: name 'GlobalPassword' is not defined HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from broadlink-http-rest.