Pandore/homarr
Public Access
1
0 Fork 0
Code Actions Activity

fix(integrations): authenticate Frigate stats and HTTP requests (#7019)

Browse Source 
* fix(integrations): authenticate Frigate stats and HTTP requests [skip ci]

* fix(integrations): reject HTTP Frigate URLs before authentication
This commit is contained in:
Thomas authored and GitHub committed 2026-10-03 23:33:23 +02:00
1 parent 5a2f6cfa1b
commit f50d4ed134
6 files changed
+288 -8
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

apps/docs/docs/integrations/frigate/index.mdx
+3 -1
View File
@@ -22,4 +22,6 @@ The Frigate statistics use `/api/stats` and report camera count, service uptime,
<AddingIntegration />
Use Frigate's internal HTTP API (port **5000**), reachable from Homarr. This endpoint does not require credentials; the authenticated web interface on port 8971 is not supported by this integration. Keep the internal API on a trusted network.
Use Frigate's authenticated interface (port **8971**) with an admin account's username and password. Homarr exchanges these for a session token and verifies the account before requesting statistics. Frigate's default `frigate_token` cookie name is required. The integration URL must use `https://`; Homarr rejects `http://` URLs so credentials are never sent unencrypted, and certificates must be trusted by Homarr.
Existing integrations using the unauthenticated port **5000** must update their URL and add credentials. Homarr does not fall back to the unauthenticated API; keep that listener private.