undefined | Better HN

0 pointsgrahamj1y ago0 comments

You can read and write HA entities via HTTP API so I think you could have done this with nothing but HA, but either way it's a fun project :)

One of my more fun HA project was scraping my snow removal service's tractor tracking API and passing the result for the closest tractor into HA so I can be notified (by voice with Alexa and/or push notification) when there's one nearby in case I need to move the car.

0 comments

amosesdev1y ago

Do you mean outside of the API that I talk about in the article? If I exposed the HA API via the frontend, users would be able to just take the bearer token and do whatever they wanted with it (even deleting the entities used for the doors). That's why the express server is sitting in the middle to only expose the relevant information (proxying w/ the bearer token, which the end users have no access to)

grahamjOP1y ago

I meant via webhook triggers as those don't require auth:

https://www.home-assistant.io/docs/automation/trigger/#webho...

I guess you'd still want a proxy or firewall so not sure it ends up being much less complex, but it should be doable.

j / k navigate · click thread line to collapse