Disable authentication for the API (Make it public!)

---

Hi,

I’d like to make the API public (/api/device/ifttt-device/trigger). Currently it asks for username and password and I would like to use IFTTT integration:

https://github.com/baswenneker/pimatic-ifttt#todo-integrate-node-ifttt

“For this to work the pimatic API should be publicly accessible. Your router should route traffic from outside your local lan to pimatic.”

I’ve set my router up, but when I visit the URL it asks for username and password in a dialog box.

Any help would be much appreciated - even if it disables the whole pimatic authentication - it doesn’t matter to me.

Thanks,
Tristan

@tristan1990 Disabling authentication completely is possible. See https://forum.pimatic.org/topic/1106/disable-pimatic-authentication

I don’t think thats a good idea, though. If you call the api like http://username:password@mypimatic.com/api/ it should work with activated authentication, too.

@michbeck100 said in Disable authentication for the API (Make it public!):

http://username:password@mypimatic.com/api/

I share your view. Note, however, that the use of credentials as part of the URL has been deprecated due to security concerns and thus, should be avoided. If basic authentication is used on the external service interface it is essential to use HTTPS only for the external access.

Thanks, I did find that thread and try it, but must have formatted it wrong. I will give this another attempt.

Thanks for the feedback re authentication. I did initially try the URL authentication but that didn’t seem to work.

Thanks.

@mwittig said in Disable authentication for the API (Make it public!):

@tristan1990 Disabling authentication completely is possible. See https://forum.pimatic.org/topic/1106/disable-pimatic-authentication