0.77: 认证 system 👮♂️ + Hangouts bot 🤖
It's time for a great new 发布 and it includes a big change: the new authentication system has been activated! We've worked very hard on this for the last couple of months to make the transition as smooth as possible. Updating to this 发布 is a non-breaking change (unless you had no API 密码 configured). As can be seen in the video above, when you start Home Assistant after the 更新, you will be presented with our new onboarding flow. This will ask you to create a new account after which you will be able to 日志 in to Home Assistant.
Once logged in, you will have access to the following new features:
- Change your 密码
- 配置 multifactor 认证 (TOTP)
- Manage other 用户 (limited to account 创建 during onboarding)
Although it's possible to 配置 认证, we strongly recommend to stick with the default 认证 配置. If you had auth providers configured in a previous Home Assistant 发布, we recommend to remove the 配置 and start using the default.
It will take some time before all of the Home Assistant ecosystem has been migrated over to the new auth system. Home Assistant will print a 警告 whenever an application connects to Home Assistant with the legacy 认证. This will help 用户 通知 the application 开发者 to transition to use the new OAuth2 认证. For non-interactive 脚本 or other applications that are unable to 更新, we are planning to introduce a migration path for components to adopt url specific auth tokens and also introduce long lived access tokens to replace API passwords. A list of impacted components can be found here.
Our iOS app will soon be updated to work with the new auth. It's already in testing. The old app will continue to work with the legacy API 密码 support. It will however require a second login when using the webview.
If you are using a proxy server (NGINX etc) in front of Home Assistant to provide 认证, check this blogpost by @DubhAd how to make it work.
I want to say a biiiig thank you to all the people that have been involved in the development and testing of the new 认证 system. It's been a big project and it's been great to see how we, as a community, have rallied together to tackle it. Especially a big shout out to @awarecan who has done an amazing job on this.
Hangouts
And that's not it ! @hobbypunk90 has contributed a new 集成 for Google Hangouts. You can send messages but can also 配置 intents to handle incoming messages from specific people. Very cool!
Lovelace
You didn't think we would forget about Lovelace, did you? This 发布 include a new 通知 drawer thanks to @jeradM. It will collect all persistent 通知 and configurator 实体 and shows it in a new 侧边栏 toggleable from the toolbar.
New Platforms
- Netatmo public (@colinfrei - #15684) (传感器.netatmo_public docs) (new-platform)
- Add ecovacs component (@OverloadUT - #15520) (ecovacs docs) (吸尘器.ecovacs docs) (new-platform)
- Add support for NOAA tide information (new PR) (@jcconnell - #15947) (传感器.noaa_tides docs) (new-platform)
- Hangouts (@hobbypunk90 - #16049) (hangouts docs) (通知 docs) (new-platform)
发布 0.77.1 - August 29
- Fix trusted networks login 错误 (@awarecan)
- Fix data_key override by parent class (@syssi - #16278) (binary_sensor.xiaomi_aqara docs)
- Fix 错误 when 吸尘器 is idling (@cnrd - #16282) (吸尘器.xiaomi_miio docs)
发布 0.77.2 - August 31
- Correct wemo static 设备 discovery issue. (@lamiskin - #16292) (wemo docs)
- Fix LIFX effects (@amelchio - #16309) (灯光.lifx docs)
- avoid 错误 in 调试 日志 mode and rss entry without title (@exxamalte - #16316) (feedreader docs)
- Fix charts for 温控 设备 (@jeradM)
- Fix header in Lovelace Glance 卡片 (@balloob)
- Fix Profile page on Safari (@balloob)
- Fix redirect to login page on offline server (@balloob)
发布 0.77.3 - September 3
前端 changes only:
- Ask "save login" after hass connected PR @awarecan
- Show an 错误 when invalid client id or redirect uri PR @balloob
- Disable autocapitalization of username field PR @timmo001
- 升级 MDI icons PR @balloob
- 更新 translations
If you need help...
...don't hesitate to use our very active forums or join us for a little chat. The 发布 notes have comments enabled but it's preferred if you use the former communication channels. Thanks.
Reporting Issues
Experiencing issues introduced by this 发布? Please report them in our issue tracker. Make sure to fill in all fields of the issue 模板.
Backward-incompatible changes
- Enable auth by default 🙈. It is no longer possible to access Home Assistant without 认证 (@balloob - #16107) (breaking change)
- It's no longer possible to use a trusted network to connect to the websocket API. You need to get a token and use that to connect. (@awarecan - #15812) (auth docs) (http docs) (websocket_api docs) (breaking change)
- 脚本 Syntax: The wait 模板 will now continue to run the remainder of the 脚本 on timeout, the original functionality can be gained by setting
continue_on_timeout: false. Allow wait 模板 to run the remainder of the 脚本 (@lhovo - #15836) (breaking change) - 更新 Xiaomi 吸尘器 to new StateVacuumDevice changed some 服务:
turn_on->start,turn_off->return_to_dock,togglehas been removed. 状态 'on' and 'off' will also no longer be used. (@cnrd - #15643) (breaking change) - 更新 neato to support new StateVacuumDevice changed some 服务:
turn_on->start,turn_off->return_to_dock,togglehas been removed. 状态 'on' and 'off' will also no longer be used. (@dshokouhi - #16035) (吸尘器.neato docs) (breaking change) - The previously deprecated package
homeassistant.remotehas been removed. (@balloob - #16099) (api docs) (http docs) (mqtt_eventstream docs) (mqtt_statestream docs) (通知 docs) (splunk docs) (websocket_api docs) (breaking change) - Merge
insteon_plmandinsteon_localcomponents to insteon component (@teharris1 - #16102) (breaking change) - Remove unit_of_measurement from 温控 实体 (@jeradM - #16012) (温控 docs) (温控.generic_thermostat docs) (温控.knx docs) (温控.maxcube docs) (温控.sensibo docs) (breaking change)
- Upnp component no longer enables port mapping by default (@dgomes - #16108) (upnp docs) (breaking change)
- The 实体 registry yaml file has been removed. It is now stored inside
.storageand should only be managed via the UI (@balloob - #16018)
Beta Fixes
- deCONZ - Support 设备 registry (@Kane610 - #16115) (deconz docs) (binary_sensor.deconz docs) (灯光.deconz docs) (传感器.deconz docs) (开关.deconz docs) (beta fix)
- Add multi-factor auth module 设置 flow (@awarecan - #16141) (auth docs) (beta fix)
- Decouple Konnected 实体 设置 from discovery (@heythisisnate - #16146) (konnected docs) (开关.konnected docs) (beta fix)
- 设备 registry store config entry (@Kane610 - #16152) (beta fix)
- fix 错误 message for cv.matches_regex (@heythisisnate - #16175) (beta fix)
- Fix hangouts (@balloob - #16180) (hangouts docs) (beta fix)
- Tweak 日志 level for bearer token 警告 (@awarecan - #16182) (http docs) (beta fix)
- Default load trusted_network auth provider if configured trusted networks (@awarecan - #16184) (beta fix)
- Replace pbkdf2 with bcrypt (@Eriner - #16071) (beta fix)
- Add Time-based Onetime 密码 Multi-factor 认证 Module (@awarecan - #16129) (beta fix)
- Handle exception from pillow (@PhracturedBlue - #16190) (摄像头.proxy docs) (beta fix)
- remove hangouts.用户 状态, simplifies hangouts.conversations (@hobbypunk90 - #16191) (hangouts docs) (beta fix)
- 更新 aiohttp to 版本 3.4.0. (@Swamp-Ig - #16198) (beta fix)
- Revert changes to platforms using self.设备 (@Kane610 - #16209) (beta fix)
- homematic: Make 设备 available again when UNREACH becomes False (@klada - #16202) (homematic docs) (beta fix)
- Change auth 警告 (@balloob - #16216) (http docs) (beta fix)
- rewrite hangouts to use intents instead of commands (@hobbypunk90 - #16220) (conversation docs) (hangouts docs) (beta fix)
- Fix 设备 telldus (@balloob - #16224) (tellduslive docs) (beta fix)
- 更新 trusted networks flow (@balloob - #16227) (beta fix)
- Fix hangouts (@balloob - #16232) (hangouts docs) (beta fix)
- 警告 missed a space (@balloob - #16233) (http docs) (beta fix)
- Package loadable: compare case insensitive (@balloob - #16234) (beta fix)
- Avoid insecure pycryptodome (@balloob - #16238) (beta fix)
- Change 日志 level to 错误 when auth provider failed loading (@awarecan - #16235) (beta fix)
- Blow up startup if init auth providers or modules failed (@awarecan - #16240) (beta fix)
- Tweak MFA login flow (@awarecan - #16254) (beta fix)
- def 设备 should not call it self but self._device (@Kane610 - #16255) (媒体播放器.plex docs) (beta fix)
All changes
- Eph ember support operation modes (@ttroy50 - #15820) (温控.ephember docs)
- Fixed race 条件 in Generic Thermostat (@aronsky - #15784) (温控.generic_thermostat docs)
- Fix magic cube support of the Aqara LAN Protocol V2 (@syssi - #15940) (binary_sensor.xiaomi_aqara docs)
- 升级 beautifulsoup4 to 4.6.3 (@fabaff - #15946) (device_tracker docs) (传感器.geizhals docs) (传感器.scrape docs)
- Allow wait 模板 to run the remainder of the 脚本 (@lhovo - #15836) (breaking change)
- Add trusted networks auth provider (@awarecan - #15812) (auth docs) (http docs) (websocket_api docs) (breaking change)
- Add monitored 条件 for Unifi device_tracker (@cgarwood - #15888) (device_tracker docs)
- Netatmo public (@colinfrei - #15684) (传感器.netatmo_public docs) (new-platform)
- 更新 Xiaomi 吸尘器 to new StateVacuumDevice (@cnrd - #15643) (breaking change)
- HomeMatic: Enable 实体 registry (@danielperna84 - #15950) (homematic docs)
- Fix google 日历 文档 link. (@cgtobi - #15968) (日历.google docs)
- Remove unnecessary 日志 (@colinfrei - #15966) (传感器.netatmo_public docs)
- Make 设置 fail if location is not available (@fabaff - #15967) (传感器.worldtidesinfo docs)
- Remove 警告 (@balloob - #15969)
- 更新 waterfurnace library to 0.7, add reconnect logic (@sdague - #15657) (waterfurnace docs)
- adds support for momentary and beep/blink 开关 (@heythisisnate - #15973) (konnected docs) (开关.konnected docs)
- Add -j$(nproc) make option to speed up build time (@vrih - #15928)
- 更新 Glances 传感器 (@fabaff - #15981) (传感器.glances docs)
- 升级 psutil to 5.4.7 (@fabaff - #15982) (传感器.systemmonitor docs)
- 升级 aladdin_connect to 0.3 and provide Unique ID (@shoejosh - #15986) (遮盖.aladdin_connect docs)
- 实体 服务 (@balloob - #15991)
- More 实体 服务 (@balloob - #15998) (摄像头 docs) (温控 docs)
- Wemo custom ports and network 错误 handling (@mcspr - #14516) (wemo docs) (binary_sensor.wemo docs) (灯光.wemo docs) (开关.wemo docs)
- Clean up input-datetime (@balloob - #16000) (input_datetime docs)
- BMW Connected drive: option to disable the 服务 (@Alexxander0 - #15993) (bmw_connected_drive docs) (门锁.bmw_connected_drive docs)
- Add type hints to homeassistant.auth (@scop - #15853)
- Fix check config packages key 错误 (@MartinHjelmare - #15840)
- 更新 SoCo to 0.16 (@amelchio - #16007) (sonos docs) (媒体播放器.sonos docs)
- 升级 sendgrid to 5.5.0 (@fabaff - #16021) (通知 docs)
- Split out storage delay save (@balloob - #16017) (hassio docs)
- Disable assuming Optional type for values with None default (@scop - #16029)
- 更新 RitAssist to support maximum speed and current address (@depl0y - #16037) (device_tracker docs)
- Handle missing mpd capabilities (@logic - #15945) (媒体播放器.mpd docs)
- Storage 实体 registry (@balloob - #16018)
- Attempt to fix flaky TTS test (@balloob - #16025)
- 更新 neato to support new StateVacuumDevice (@dshokouhi - #16035) (吸尘器.neato docs) (breaking change)
- 吸尘器/xiaomi_miio: Expose "sensor_dirty_left" 属性 (@klada - #16003) (吸尘器.xiaomi_miio docs)
- Grammar and spelling fixes (@scop - #16065)
- Use aiohttp web.AppRunner (@balloob - #16020) (http docs)
- 更新 pushsafer.py (@appzer - #16060) (通知 docs)
- Alexa: context + 日志 events (@balloob - #16023) (alexa docs)
- openuv: Add Current UV Level to list of 条件 (@leppa - #16042) (openuv docs) (传感器.openuv docs)
- TpLink 设备 Tracker 错误 (@TimBailey-pnk - #15918) (device_tracker docs)
- Deprecated stuff (@balloob - #16019) (device_tracker docs) (websocket_api docs) (摄像头.push docs)
- Add recent context (@balloob - #15989)
- Add ecovacs component (@OverloadUT - #15520) (ecovacs docs) (吸尘器.ecovacs docs) (new-platform)
- Bumped NDMS2 client library to 0.0.4 to get compatible with python 3.5 (@foxel - #16077) (device_tracker docs)
- fritzdect change to current_power_w (@Danielhiversen - #16079)
- 更新 pyhomematic to 0.1.47 (@danielperna84 - #16083) (homematic docs)
- Get 用户 after login flow finished (@awarecan - #16047) (auth docs)
- 升级 pytest to 3.7.2 (@scop - #16091)
- Add verify ssl to generic 摄像头 (@fliphess - #15949) (摄像头.generic docs)
- 升级 afsapi to 0.0.4, prevents aiohttp session close message, Fixes #13099 (@zhelev - #16098) (媒体播放器.frontier_silicon docs)
- Remove homeassistant.遥控器 (@balloob - #16099) (api docs) (http docs) (mqtt_eventstream docs) (mqtt_statestream docs) (通知 docs) (splunk docs) (websocket_api docs) (breaking change)
- Use new session when fetching 遥控器 urls (@balloob - #16093) (auth docs)
- Allow finish_flow callback to change data entry result type (@awarecan - #16100)
- Add support for revoking refresh tokens (@balloob - #16095) (auth docs)
- Refactoring login flow (@awarecan - #16104)
- Minor updates (@fabaff - #16106)
- Bump python-miio 版本 (@syssi - #16110) (device_tracker docs) (风扇.xiaomi_miio docs) (灯光.xiaomi_miio docs) (遥控器.xiaomi_miio docs) (传感器.xiaomi_miio docs) (开关.xiaomi_miio docs) (吸尘器.xiaomi_miio docs)
- homematic: Add homematic.put_paramset 服务 (@klada - #16024) (homematic docs)
- 升级 shodan to 1.9.1 (@fabaff - #16113) (传感器.shodan docs)
- 升级 sendgrid to 5.6.0 (@fabaff - #16111) (通知 docs)
- Merge insteon_plm and insteon_local to insteon component (@teharris1 - #16102) (breaking change)
- Remove unit_of_measurement from 温控 实体 (@jeradM - #16012) (温控 docs) (温控.generic_thermostat docs) (温控.knx docs) (温控.maxcube docs) (温控.sensibo docs) (breaking change)
- Add multi-factor 认证 modules (@awarecan - #15489) (config docs)
- 设备 Registry (@Kane610 - #15980)
- Check correctly if package is loadable (@balloob - #16121)
- 升级 numpy to 1.15.1 (@fabaff - #16126) (binary_sensor.trend docs) (image_processing.opencv docs)
- 升级 youtube_dl to 2018.08.22 (@fabaff - #16125) (media_extractor docs)
- Fix the protocol v2 data_key of several aqara 设备 (@syssi - #16112) (binary_sensor.xiaomi_aqara docs)
- 升级 brunt package (@eavanvalkenburg - #16130) (遮盖.brunt docs)
- Add support for NOAA tide information (new PR) (@jcconnell - #15947) (传感器.noaa_tides docs) (new-platform)
- Adds support for routers implementing IGDv2 (@dgomes - #16108) (upnp docs) (breaking change)
- Add support for JS modules in custom 面板 (@villanyibalint - #16096) (panel_custom docs)
- Prevent legacy api 密码 with empty 密码 (@balloob - #16127)
- Enable auth by default 🙈 (@balloob - #16107) (breaking change)
- Remove commented out API 密码 from default config (@balloob - #16147)
- Spelling fixes (@scop - #16150) (insteon_local docs) (insteon_plm docs)
- 更新 pydocstyle to 2.1.1 and flake8-docstrings to 1.3.0 (@scop - #14557)
- Hangouts (@hobbypunk90 - #16049) (hangouts docs) (通知 docs) (new-platform)
- Hangouts localization typo fix (@armills - #16174) (hangouts docs)
- deCONZ - Allow sub second 灯光 transitions (@Kane610 - #16170) (灯光.deconz docs)
- add_devices -> add_entities (@balloob - #16171)
- deCONZ - Support 设备 registry (@Kane610 - #16115) (deconz docs) (binary_sensor.deconz docs) (灯光.deconz docs) (传感器.deconz docs) (开关.deconz docs) (beta fix)
- Add multi-factor auth module 设置 flow (@awarecan - #16141) (auth docs) (beta fix)
- Decouple Konnected 实体 设置 from discovery (@heythisisnate - #16146) (konnected docs) (开关.konnected docs) (beta fix)
- 设备 registry store config entry (@Kane610 - #16152) (beta fix)
- fix 错误 message for cv.matches_regex (@heythisisnate - #16175) (beta fix)
- Fix hangouts (@balloob - #16180) (hangouts docs) (beta fix)
- Tweak 日志 level for bearer token 警告 (@awarecan - #16182) (http docs) (beta fix)
- Default load trusted_network auth provider if configured trusted networks (@awarecan - #16184) (beta fix)
- Replace pbkdf2 with bcrypt (@Eriner - #16071) (beta fix)
- Add Time-based Onetime 密码 Multi-factor 认证 Module (@awarecan - #16129) (beta fix)
- Handle exception from pillow (@PhracturedBlue - #16190) (摄像头.proxy docs) (beta fix)
- remove hangouts.用户 状态, simplifies hangouts.conversations (@hobbypunk90 - #16191) (hangouts docs) (beta fix)
- 更新 aiohttp to 版本 3.4.0. (@Swamp-Ig - #16198) (beta fix)
- Revert changes to platforms using self.设备 (@Kane610 - #16209) (beta fix)
- homematic: Make 设备 available again when UNREACH becomes False (@klada - #16202) (homematic docs) (beta fix)
- Change auth 警告 (@balloob - #16216) (http docs) (beta fix)
- rewrite hangouts to use intents instead of commands (@hobbypunk90 - #16220) (conversation docs) (hangouts docs) (beta fix)
- Fix 设备 telldus (@balloob - #16224) (tellduslive docs) (beta fix)
- 更新 trusted networks flow (@balloob - #16227) (beta fix)
- Fix hangouts (@balloob - #16232) (hangouts docs) (beta fix)
- 警告 missed a space (@balloob - #16233) (http docs) (beta fix)
- Package loadable: compare case insensitive (@balloob - #16234) (beta fix)
- Avoid insecure pycryptodome (@balloob - #16238) (beta fix)
- Change 日志 level to 错误 when auth provider failed loading (@awarecan - #16235) (beta fix)
- Blow up startup if init auth providers or modules failed (@awarecan - #16240) (beta fix)
- Tweak MFA login flow (@awarecan - #16254) (beta fix)
- def 设备 should not call it self but self._device (@Kane610 - #16255) (媒体播放器.plex docs) (beta fix)

