mhzawadi/foxess-mqtt

Password changed to md5?

Closed this issue · 9 comments

comfreak89 commented
Password changed to md5?
mhzawadi commented

could I get some more words please?

comfreak89 commented

They require that the transmitted password is in md5 encoded now. Plaintext does not work anymore.

Also username and password is mixed up in "foxess-login.sh"

-d "{ \"user\": \"${FOXESS_PASSWORD}\", \"password\": \"${FOXESS_USERNAME}\"

mhzawadi commented

Thanks for pointing out the vars are wrong, I have also checked the login flow and I can still see my password in plain text.

If you have seen yours MD5ed, could you point me at the URL please?

mhzawadi commented

also new image should have built and be on the docker hub for you to test

comfreak89 commented

I do not have the issue - my colleage has it and I just wanted to point out, that he has to authenticate with an hashed md5 password.

The script did not work with the plain text password. After we decrypted the https traffic together from the website via wireshark (decoded TLS with Chrome) there saw that a JavaScript hashes the password with md5 locally before transmitting via https to their servers. After we hashed the password with md5, the script worked.

mhzawadi commented

So I have been working on a PHP version of this and I still have it working fine with MD5 hashing the password, could you try the dev build on the docker hub?

mhzawadi commented

yep, thats a thing I have just spotted 🤦🏼

I have a new PHP thing that should now work, your colleague will need to make some changes to get the new program to work

guba91 commented

this can be closed

mhzawadi commented

closing, new PHP re-write has fixed