Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

why password and not API key? #30

Open
ianfriend opened this issue Feb 25, 2023 · 19 comments
Open

why password and not API key? #30

ianfriend opened this issue Feb 25, 2023 · 19 comments
Assignees
Labels
question Further information is requested

Comments

@ianfriend
Copy link

Why does this integration need the username and password and not use the API key? Presumably because the optimiser data is not available via the API and you're actually doing something along the lines of scraping the website using the logon details?

@ProudElm ProudElm added the question Further information is requested label Feb 26, 2023
@ProudElm
Copy link
Owner

Yes that's the reason. The normal API wont allow for data from the optimizers. I use the username and password to login and retrieve the data.

@ianfriend
Copy link
Author

ianfriend commented Feb 26, 2023

Ok thanks for the reply. While I'm sure there's many that appreciate your efforts with this integration, I would ask you to consider what this means from a security point of view. At the very least making it much more clear in the instructions what users supplying their username and password really means, as in theory they are giving away access details to potentially change many settings on their installation (depending on their level of access).

Thanks for your consideration

@ProudElm
Copy link
Owner

I'm unsure if that is even possible, but like al things on the internet, you need to be always on your gard and only supply this information if you trust the software.
Luckily this is opensource, so one can always take look ;-)

The main reason i build this integration is to get the information from the optimizers. I hope that one day the information is also available via the modbus. But until than, this is the only way i know (and thus build).

@ProudElm ProudElm self-assigned this Feb 26, 2023
@Menz01
Copy link

Menz01 commented Feb 26, 2023

Why does this integration need the username and password and not use the API key? Presumably because the optimiser data is not available via the API and you're actually doing something along the lines of scraping the website using the logon details?

i cant even find an API on mine. i just got it installed la few weeks ago and turned on last week. i do not see anywhere in the web page to generate an API?

@ianfriend
Copy link
Author

You

Why does this integration need the username and password and not use the API key? Presumably because the optimiser data is not available via the API and you're actually doing something along the lines of scraping the website using the logon details?

i cant even find an API on mine. i just got it installed la few weeks ago and turned on last week. i do not see anywhere in the web page to generate an API?

You need admin access on the solaredge monitoring website to be able to generate API keys. Ask your installer to make you a site admin 👍

@Menz01
Copy link

Menz01 commented Feb 27, 2023

You need admin access on the solaredge monitoring website to be able to generate API keys. Ask your installer to make you a site admin 👍

the company that installed for me said they could not make me a site admin but did generate an API key for me though

@ianfriend
Copy link
Author

You need admin access on the solaredge monitoring website to be able to generate API keys. Ask your installer to make you a site admin 👍

the company that installed for me said they could not make me a site admin but did generate an API key for me though

Hmm they definitely "can" but they may not want to. Not sure why as it doesn't give you access to anything dangerous. My installer made me a site admin so I can now generate my own API keys.

As long as you have an API key you're all good. Doesn't help with this integration mind 😉

@ProudElm
Copy link
Owner

I think it is clear why we need a username/password instead of the API key. Hopefully one day the let us get the optimizer data via the local modbus and we even don't need to use the cloud to get our own data..

@bubbaedc
Copy link

is the user name different than the login email address? auth always fails when trying to login in HA, site ID, login, pw, all are correct, I can login on the solaredge web site, but not in HA? any ideas?

TIA!

@ProudElm
Copy link
Owner

i missed this one. Do you have admin acces? Not sure if needed. But the login should be the same.

@billkater
Copy link

is the user name different than the login email address? auth always fails when trying to login in HA, site ID, login, pw, all are correct, I can login on the solaredge web site, but not in HA? any ideas?

TIA!

I have the same problem. My username/password does not work when trying to add this to HA. I am using the same username/password as I use on the mobile app and to website. The site ID is pulled straight from the website.

@ProudElm
Copy link
Owner

Strange. I will try to add some logging perhaps there is an other issue what is causing the error. Because the login should be the same and the username/password is just passed straight trough to the connection made to the portal.

@chadburrows12
Copy link

I am having the same "Invalid Authorisation" error on my instance with the correct details. Did you find anything with the extra logging?

@tubbers
Copy link

tubbers commented Dec 13, 2023

i am having the same invalid auth issue. is there any update?

image

@ProudElm
Copy link
Owner

@tubbers any change?

@TheoX76
Copy link

TheoX76 commented May 2, 2024

@tubbers any change?

I also have this issue. I don't know if i'm an admin user in the portal. Is there a possibility to check if i'm?

@tubbers
Copy link

tubbers commented May 7, 2024

@tubbers any change?

Still a problem

@renaudallard
Copy link

This seems to be about the same issues as in #57

@renaudallard
Copy link

In the web interface https://monitoring.solaredge.com, I don't see any place to check for optimizers data. Where do you get the data from? Could this error be there because I cannot see the optimizers data on the web interface?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

9 participants