legop3/MultiRoombaRover
1
0
Fork 0
mirror of https://github.com/legop3/MultiRoombaRover.git synced 2026-09-16 17:40:46 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

try to block admins from home assistant

Browse Source
This commit is contained in:
legop3
2025-11-21 03:14:25 -05:00
parent 23e8c84fa3
commit fb748e78e8
2 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/src/services/homeAssistantService.js
+10
View File
@@ -4,6 +4,8 @@ const { createConnection, subscribeEntities, callService, Auth } = require('home
const io = require('../globals/io');
const logger = require('../globals/logger').child('homeAssistantService');
const { loadConfig } = require('../helpers/configLoader');
const { getMode } = require('./modeManager');
const { isAdmin } = require('./roleService');
// home-assistant-js-websocket expects a global WebSocket in Node.
if (!global.WebSocket) {
@@ -229,6 +231,10 @@ connect();
io.on('connection', (socket) => {
socket.on('homeAssistant:toggle', async ({ entityId } = {}, cb = () => {}) => {
if ((getMode() === 'admin' || getMode() === 'lockdown') && isAdmin(socket) !== true) {
return cb({ error: 'Insufficient permissions to control Home Assistant' });
}
try {
if (!entityId) throw new Error('entityId required');
await toggleEntity(entityId);
@@ -239,6 +245,10 @@ io.on('connection', (socket) => {
});
socket.on('homeAssistant:setState', async ({ entityId, state } = {}, cb = () => {}) => {
if ((getMode() === 'admin' || getMode() === 'lockdown') && isAdmin(socket) !== true) {
return cb({ error: 'Insufficient permissions to control Home Assistant' });
}
try {
if (!entityId) throw new Error('entityId required');
await setEntityState(entityId, state);