API Access Without Authentication for Specific Devices/IPs

[krasty633]

Hello NextPVR Team,

I am using NextPVR in a Docker environment and would like to access the recording.list API method automatically. Currently, this is only possible with a valid session, which makes automated access difficult.

Feature request:
Please allow specific devices or IP addresses to access the API without additional authentication, or alternatively provide a permanent API token for a device.

Purpose:
To query recording status for monitoring or similar automation tasks


Thank you for considering this request!

[mvallevand]

Did you to get a token is pretty simple with most languages so I don't see the need to fully open API access. There is already Home Assistant integration (untested) here https://github.com/breendan/ha-nextpvr that shows how to get the tuners status in python in more detail then I ever coded.

I do see use case to easily get the recording status remotely using the current unautenticated access logic but the current call http://localhost:8866/services/service?m...ormat=json can return username and passwords so a safer method would be better However I would caution that any automation or action that could shutdown or restart the server could in theory corrupt files and the database even when not recording so better to manually check before doing maintenance.

I like the thought of permanent tokens but I still think that some two factor is necessary

Martin

[sub]

There was a <PermanentSIDs> setting you could specify in config.xml, but checking it just now, it looks like it only applies to very specific scenarios, so not usable for that.

If you'd been running natively, without docker, you could likely have already had it work automatically by specifying whatever made up sid, because there is rules about requests about auto allowing from 127.0.0.1

[sub]

Can your just run nscripthelper to give you the info?

This will basically do the request for you, and make sure it has a valid sid etc, and return xml.

[krasty633]

Can your just run nscripthelper to give you the info?

This will basically do the request for you, and make sure it has a valid sid etc, and return xml.

Thank you very much for your suggestions.

I am currently following the Home Assistant approach, which would cover my needs perfectly.
Unfortunately, no matter what I try, logging in with PIN does not work.
I've been using NextPVR for a while now and everything else works fine.

I have "Allow remote Access" and "Allow unauthenticated access for streaming Live TV / Recordings" enabled.
And i have also changed the admin password several times and that works fine.

I also try to reset the PIN to 0000 in the config.xml file, I believe the default value is <PinMD5>4A7D1ED414474E4033AC29CCB8653D9B</PinMD5>

I also purchased the “NextPVR” app from the Apple Store, but logging in with a PIN does not work there either.

Do you have any other idea what I can try or reset?

[mvallevand]

If you run not using private IP you need to use a PIN other than "0000" If it is coming from Docker it is probably 172.17

If you send the zipped NextPVR logs would help. I will check his python too.

Martin

[krasty633]

If you run not using private IP you need to use a PIN other than "0000"  If it is coming from Docker it is probably 172.17

If you send the zipped NextPVR logs would help.  I will check his python too.

Martin

I only use NextPVR on my local network, no external access or VPN.
I use unraid, and I have assigned a fixed IP address to the docker container (custom network).

[mvallevand]

I don't have ha but I tested this with his login class and it worked

Code:

from nextpvr_api import NextPVRApi
import aiohttp
import asyncio

async def main():
    session = aiohttp.ClientSession()
    obj = NextPVRApi(session,'172.16.3.62', "0000")
    await obj.login()
    devices = await obj.get_devices()
    for device in devices:
        print (device['oid'], device['status'])
    inuse = await obj.devices_in_use()
    print (len(inuse))
    session.connector.close()
    await session.close()

asyncio.run(main())

Martin