Display of Token and Endpoint on Mobile app

Pyie_Sone · December 15, 2015, 9:48am

Hi Guys,

Is there any codes/ways to display the API Token and API Endpoint(just like in the web panel) on the mobile Application?

tgauchat · December 15, 2015, 10:00am

There are some risks created; but take a look at the code for “Smart Alarm” in the SmartThings Community GitHub for an example of generating an Access Token from within your SmartApp in order to offer REST-API endpoint accesses.

github.com

SmartThingsCommunity/SmartThingsPublic/blob/5f85cd287342e5a5ad11b2da69049bfc8a1afcb4/smartapps/statusbits/smart-alarm.src/smart-alarm.groovy#L962-L1024


// Show "REST API Options" page
def pageRestApiOptions() {
LOG("pageRestApiOptions()")


def textHelp =
    "Smart Alarm can be controlled remotely by any Web client using " +
    "REST API. Please refer to Smart Alarm documentation for more " +
    "information."


def textPincode =
    "You can specify optional PIN code to protect arming and disarming " +
    "Smart Alarm via REST API from unauthorized access. If set, the " +
    "PIN code is always required for disarming Smart Alarm, however " +
    "you can optionally turn it off for arming Smart Alarm."


def inputRestApi = [
    name:           "restApiEnabled",
    type:           "bool",
    title:          "Enable REST API",
    defaultValue:   false

This file has been truncated. show original

Note that an Access Token is not required to offer REST-API access! You can just use the installed Application ID ($app.id)in the URL, and the user will be prompted for their Login and Password to create a temporary session. This is the safer way to offer access.

Pyie_Sone · December 15, 2015, 10:04am

Thanks,I will try this.

Display of Token and Endpoint on Mobile app

Customers

Developers

Download the SmartThings App