Platform Update - Release Notes - 06/02/16

[tgauchat (ActionTiles.com co-founder Terry @ActionTiles; GitHub: @cosmicpuppy)]

@scottinpollock

This is Really sad. What is the replacement?

What do you mean “sad”? This “root” endpoint was a security risk. Explicit endpoints for individual specific Device commands or status queries are still fully functioning (ahem, that’s how SmartTiles v5.x still works…

I apologize in advance if I misunderstand the change or your question, but, I think this is not a big deal…

More details here:

Root endpoint access change 6/02/2016

If I understand correctly, this only affects the “generic” root endpoint which was technically a security scope leak (along the lines of stuff researchers raised concern about in the U of Michigan study). OAuth’d Web Services SmartApps should only be accessed by their explicit “mappings:” list, and only accept Commands and State requests for devices Authorized at the time of installation or user updating preferences. i.e., This won’t give any result and should give an authorization error. This is calling the “root” of a SmartApp’s endpoints… https://graph.api.smartthings.com/api/smartapps/installations/5750ee0d-cee5-66b5-af70-33c2cc34b6e4/<blank> Result: { error: "access_denied", error_description: "Access is denied" } But this, or many similar explicit endpoints as defined in Smar…