v1.3.4

Security patches

• Bump node-fetch from 2.6.0 to 2.6.1 (#60)

v1.3.3

Security patches

• Bump bl from 4.0.2 to 4.0.3 (#59)

v1.3.2

PATCHES

• Log API errors in a single line (c264e22)

v1.3.1

Features:

• #57 • @nihalgonsalves • Add support for homebridge-config-ui-x
• Support Node 10

---

⚠️ Please upgrade to at least v1.2.0 due to security improvements.

If you haven't upgraded since pre-1.0.0, please look at the migration guide here v1.0.0

v1.3.0

See: v1.3.1

v1.2.0

‼️ This update is highly recommended due to the webhook security related updates in this and v1.1.0. ‼️

---

Features:

• #56 @nihalgonsalves Add HMAC handling for all webhooks: All webhooks are now created using a constantly changing pre-shared key and the incoming data is verified. Combined . Thanks to @ermalguni for the hint! (Please look at #43 for context).
• Add a shorter configurable webhookUpdateInterval (please look at the docs)

Fixes:

• Webhook URLs are now correctly updated when the webhook backend connection drops momentarily and reconnects.
• Failures on first startup are re-tried within minutes rather than waiting for the next location update interval.

Patches:

• Redundant log statements removed

---

⚠️ Please look at breaking changes from v1.0.0

v1.1.0

Features:

• #55 @nihalgonsalves Add HMAC Webhook Authentication - webhooks from Nello are now verified if using a local webhook server with publicWebhookUrl (see #43 for context)

---

⚠️ Please look at breaking changes from v1.0.0

v1.0.1

No changes - full workflow test of the automated release.

⚠️ Please look at breaking changes from v1.0.0

v1.0.0

Migration Guide

• "authType": "password" is no longer supported. Please copy your clientSecret as shown in the installation steps below.

• The settings have been further grouped under auth and common and it now looks like this:

  {
    "platform" : "NelloPlatform",
    "name" : "nello.io",
    "auth": {
      // auth settings move here, and username/password is not supported anymore
      "clientSecret": "<paste-client-secret-here>",
      "clientId": "<paste-client-id-here>"
    },
    "common": {
      // all other settings go here,
      // and enableAlwaysOpenSwitch is renamed to dangerouslyEnableAlwaysOpenSwitch
    },
    "video": {
      // video settings stay here
    }
  }

• enableAlwaysOpenSwitch has been renamed to dangerouslyEnableAlwaysOpenSwitch (see #43)

Release Notes

BREAKING CHANGES:

• #54 @nihalgonsalves
  • Drops support for ‘password’ authentication type
  • Config overhaul (see README for migration guide)
  • alwaysOpenSwitch renamed to dangerouslyEnableAlwaysOpenSwitch

Minor changes:

• Automatically setup default snapshot image for the video doorbell
• Better API rate-limit handling and logging
• Local webhook URLs now have a unique ID
• Webhook URLs are rotated periodically (same interval as the location updates)

Non-feature changes:

• Convert to TypeScript
• Add test server config generation for easy local testing
• Add automatic doc generation for configuration and defaults
• Refactor callbacks to async/await
• Refactor prototype setup to ES6+ class
• Move all API requests into single client
• Deduplicate other code
• Fix stray Buffer() call => Buffer.alloc()

v0.5.0

BREAKING CHANGES:

• Supported Node version bumped to Node 12 LTS. Older versions of Node are EOL.
• Bumped homebridge version support to the latest version.

Patches:

• Update dependencies