Peter Galbavy wrote: > Because I enable password security on all my LMS instances by default? > This is in fact what I use to protect my test proxy for your skills in > testing - I don't have proxy passwords, instead using the user and > password in LMS in the config and it works for everything except > streaming. > > I do also access my LMS from outside my home, and it is password > protected without a proxy dance - even if it's not HTTPS protected out > of the box - players don't understand HTTPS. > > Another use of a protected stream endpoint would be if my LMS instance > were not on the local LAN of the Echo device, e.g. hosted in the fluffy > cloud on a VM, for example.
If you use either ngrok or a reverse-proxy like apache or nginx, they all do the https-to-http translation for you it does not then matter that LMS cannot support https natively. That's the whole idea behind my approach to remote-access to LMS from the cloud. Remember, if you are not using https, your auth credentials are going as plain text and can be easily intercepted... The way account-linking the skill currently works, your auth parameters for the proxy are specified you cannot specify any native LMS credentials. The Echo 'thinks' it's playing a https stream but that https endpoint (in my back-end) actually just sends it a PLS file which contains the /stream.mp3 endpoint spec as the only item in the playlist (Paul Webster's wonderful invention). If local-LMS credentials were to be included in that PLS file, they'd have to be embedded using the h t t p://username:password@192.168.1.10:9000/stream.mp3?player=Alexa-XXXXX construct. I don't honestly know if that would even work. But, importantly, I'd have to extend the account-linking form with 2 extra fields to specify those basic-auth parameters and that's complicating it a lot for most people. ------------------------------------------------------------------------ philchillbill's Profile: http://forums.slimdevices.com/member.php?userid=68920 View this thread: http://forums.slimdevices.com/showthread.php?t=111016
_______________________________________________ plugins mailing list plugins@lists.slimdevices.com http://lists.slimdevices.com/mailman/listinfo/plugins
