I’ve read your post and don’t see that it prevents the use of login credentials. You are shifting the login to the pre-facing nginx instance and ask for basic authentication there, forwarding it to HA later (actually, I have no clue what Home Assistant is doing with it).
Still - event with long-living tokens there seems to be no way to disable “authentication” requests (includes picking a user from a list) for Home Assistant users.
I had a look at the zwave platform to do just that, but I must admit it was beyond me. It’s quite a few years since I did any work in C, so I’ll leave it to the experts. But just so you know I’m not slacking I’ll hopefully be pushing out a new platform in the next few months that handles some panel heaters. Just waiting for them to release the API.
Very excited to hear about bluetooth and bluetooth_le fixes! It’s been broken for quite a while, thanks to the devs who took it on. Now to see if it works in my docker environment…
The list of refresh tokens is good, but it isn’t easy to distinguish between different devices as it just says “Last used at <date and time> from <ip address>” and I have multiple devices showing the same ip address, since for devices on my home WiFi the ip address is picked up as my external ip address. It would be nice if this could include details of the device which is connecting (even just device OS, like Android, iOS, Windows, etc. would be great).