Fix Home Assistant integration auth compatibility.

Accept Authorization Bearer tokens, expose ha_info for discovery without API token, and report api_token_required in haGetInfo. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-03 19:49:03 +00:00
parent d33b0ca2fe
commit 0d006625fd
2 changed files with 26 additions and 1 deletions
@@ -28,6 +28,13 @@ function evershelfGetProvidedApiToken(): string {
    if (isset($_GET['api_token'])) {
        return (string)$_GET['api_token'];
    }
+    // Home Assistant ha-evershelf sends Authorization: Bearer (legacy)
+    $authHeader = $_SERVER['HTTP_AUTHORIZATION']
+        ?? $_SERVER['REDIRECT_HTTP_AUTHORIZATION']
+        ?? '';
+    if (preg_match('/^Bearer\s+(\S+)/i', $authHeader, $m)) {
+        return $m[1];
+    }
    return evershelfGetProvidedApiTokenFromHeaders();
 }