homeLYnk FW V1.3: User Acces

[Koen_Rowies]

Hello,

When playing with the new firmware I've noticed that once logged in with the administrator password, even if you close the browser page and open it again you still are logged in as administrator and have full acces.

This is a security issue for "public acces PC's" in a building where multiple people use the same PC for acces to HL.

Is there a way to log out? So on next consultation you will be asked for the password?

I have cleared the cache but this has no effect...

Kind regards

Koen

[sesa299442]

Hey Koen,

you are right. I will try to find out what we can do about this.

For now I have only suggestion, which came on my mind.

You can use browser in incognito mode. In Gogle Chrome press ctrl+shift+N. If you use incognito window, log into homeLYnk and then close the window, you will not stay logged in.

Regards

Tomas

[Koen_Rowies]

Hello Thomas,

Is there already a solution for this issue, logout button?

Kind regards

Koen

[Erwin-vd-Zwart]

Hi Koen,

Here is the script to create automatic logout by a timer that counts down when there is no user input detected and a optional KNX command,

run script once and there will be a transparant HTML created on your startpage that will add the function.

(make sure you have a default startpage selected or the script will exit)

There also is a back to start function by a timer that counts down when there is no user input detected and a optional KNX command,

if you don't want to use that you can simply set the timer time to a higer value then the logout timer.

If you want to remove the function, you can simply remove the HTML (logout.html) from your startpage.

Run the script once!, do not run it as a cyclic script because it will cause a re-creation of the HTML all the time. You can delete the script after running the code once, or just disable it.

This script will not be supported in upcomming FW1.4 due the changed URL format in Nginx, there will be a update when 1.4 is released.

BR,

Erwin

[Koen_Rowies]

Thanks Erwin!

Could it be that the script is not in your post?

BR,

Koen

[Erwin-vd-Zwart · Accepted solution]

Hi Koen,

Yes its there as attachment... (under my post, below my name with a paperclip)

BR,

Erwin