Authentication deprecated issues

[helgemor (Helge)]

In my home-assistant-log file i find these:

2019-05-06 22:24:32 WARNING (MainThread) [homeassistant.components.http.auth] api_password is going to deprecate. You need to use a bearer token to access /api/ios/identify from x.x.x.x
2019-05-07 08:13:13 WARNING (MainThread) [homeassistant.components.http.auth] api_password is going to deprecate. You need to use a bearer token to access /api/config from x.x.x.x
2019-05-07 08:13:14 WARNING (MainThread) [homeassistant.components.http.auth] api_password is going to deprecate. You need to use a bearer token to access /manifest.json from x.x.x.x
2019-05-07 08:13:14 WARNING (MainThread) [homeassistant.components.http.auth] api_password is going to deprecate. You need to use a bearer token to access /api/states from x.x.x.x
2019-05-07 16:28:09 WARNING (MainThread) [homeassistant.components.http.auth] api_password is going to deprecate. You need to use a bearer token to access /api/services/device_tracker/see from x.x.x.x

How can I find out which components they come from, and how can I fix them?
I thought I could fix the iOS ones by removing and re-adding the iOS integration, but that didn’t work.
And the others seem quite anonymous to me.
Is it possible to log some more info on the sources of the errors? Or better, fix them?
hassio 0.92.2 on Intel NUC Debian 9.

[tom_l]

0.90 Update: api_password is going to deprecate

Heya, So I updated a few minutes ago and everything went straight through, good work guys! The only thing I don’t understand is I still get an error/log saying: api_password is going to deprecate. You need to use a bearer token to access /api/states from 172.30.32.2 So first thing, I do not have the http: part in my configuration file. Second, that IP address, I don’t use it my scope at home, so where the heck is that address coming from? What am I missing to get rid of that error?

[Dansker]

I have this error as well. Feeling like I’m a sitting duck for a big problem when support for api_password is removed. (I do not have api_password defined in configuration.yaml).

Any suggestions for how to track this down?

[Yoinkz]

Having the exact same error… I wonder what happens!

[Tinkerer (aka DubhAd on GitHub)]

@helgemor

How can I find out which components they come from, and how can I fix them?

The IP address should give you a hint, as will the path.

In your case, I’d guess the first is probably an outdated iOS app.

The simplest approach here is to perform the scream test. Pick a suitable time, disable the api_password, and see what breaks.

[ConcordGE (PeteA)]

Anyone using HADashboard and camera streams. That’s one area that will cause issues. Don’t think camera streams will accept long term tokens as of yet.