Widget PIN Security

Some widgets can be secured by a PIN, which is supplied by a server configuration. This is not intended to provide security against access to a server, rather a reasonable way to prevent easy access to a widget.

PIN code is configured in a sitemap using sha-256 base64 hash of the PIN code. Hash can be generated in many ways such as this online hash generator. The client will hash PIN code provided by a user and compare it against master PIN code from the server without transmitting raw PIN code. This ensures that PIN code is never sent in clear text.

Examples

PIN secured switch widget

Frame label="Lights {widget:light-switch}" {
  Switch item=Lights
  Text label="{item:pin} [A6xnQhbz4Vx2HuGl4lXwZ5U2I8iziLRFnhP5eNfIRvQ]"
}