Skip to content

Require Automation API keys for Pro 3.2.0 - #3

Merged
scott-tp merged 1 commit into
masterfrom
require-api-keys-pro-320
Aug 27, 2026
Merged

Require Automation API keys for Pro 3.2.0#3
scott-tp merged 1 commit into
masterfrom
require-api-keys-pro-320

Conversation

@scott-tp

@scott-tp scott-tp commented Aug 27, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Require a persistent Automation API key (TinyPilot Pro 3.2.0+) when adding devices; store it encrypted and use Bearer auth for screenshots and allowlisted snapshot routes.
  • Remove Web UI CSRF / ephemeral /api/v1/auth token refresh and virtual-media client paths the API key cannot call.
  • Bump the dashboard to v0.2.0 and refresh the README for API-key onboarding.

Test plan

  • pytest passes locally (29 tests)
  • Add a Pro 3.2.0+ device with an API key from System → Automation
  • Confirm screenshot refresh and device snapshot work
  • Confirm add-device rejects missing API key
  • Hard-refresh UI; confirm version badge shows v0.2.0

Switch the dashboard to persistent Bearer API keys and drop Web UI
CSRF/virtual-media paths that the Automation key cannot call. Remove
internal planning docs from the public tree.
@scott-tp
scott-tp merged commit 254612c into master Aug 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant