3 ms·
So any random webpage can talk to your Hue bridge? I'm surprised they even allow such cross-domain requests, but this anyway doesn't seem safe.
by akvadrako 9y ago
So any random webpage can talk to your Hue bridge?
I'm surprised they even allow such cross-domain requests, but this anyway doesn't seem safe.
- cryo 9y agoCross-domain is needed, otherwise an app/webapp couldn't talk to the bridge since the bridge only serves the REST API. However in order to send control commands and query light states the app/webapp needs to authenticate and create a account, which is only possible for a few seconds after pressing a physical bridge button.