@homebridge-plugins/homebridge-tado 8.0.2 → 8.1.0-beta.0

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## v8.0.2 - 2025-07-22
+- Update dependencies
+- Update form-data due to vulnerability
+
 ## v8.0.1 - 2025-06-12
 - Tado-API: Verify that refresh token is not empty before saving to file
 

package/config.schema.json

@@ -553,6 +553,16 @@
             }
           }
         }
+      },
+      "tadoApiUrl": {
+        "title": "Tado API URL",
+        "type": "string",
+        "description": "Optional: Use a custom tado api url."
+      },
+      "skipAuth": {
+        "title": "Skip Authentication",
+        "type": "boolean",
+        "description": "Optional: Skip authentication for tado api."
       }
     }
   },

package/homebridge-ui/public/js/schema.js

@@ -545,6 +545,16 @@ const schema = {
           }
         }
       }
+    },
+    'tadoApiUrl': {
+      'title': 'Tado API URL',
+      'type': 'string',
+      'description': 'Optional: Use a custom tado api url.'
+    },
+    'skipAuth': {
+      'title': 'Skip Authentication',
+      'type': 'boolean',
+      'description': 'Optional: Skip authentication for tado api.'
     }
   },
   'layout': [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homebridge-plugins/homebridge-tado",
-  "version": "8.0.2",
+  "version": "8.1.0-beta.0",
   "description": "Homebridge plugin for controlling tado° devices.",
   "main": "index.js",
   "scripts": {
@@ -35,20 +35,20 @@
     "@homebridge/plugin-ui-utils": "^2.1.0",
     "fakegato-history": "^0.6.7",
     "form-data": "^4.0.4",
-    "fs-extra": "^11.3.0",
-    "got": "^14.4.7",
+    "fs-extra": "^11.3.2",
+    "got": "^14.6.0",
     "moment": "^2.30.1"
   },
   "devDependencies": {
-    "@babel/core": "7.28.0",
-    "@babel/eslint-parser": "7.28.0",
+    "@babel/core": "7.28.4",
+    "@babel/eslint-parser": "7.28.4",
     "@babel/eslint-plugin": "7.27.1",
-    "@eslint/js": "^9.31.0",
-    "eslint": "^9.31.0",
+    "@eslint/js": "^9.38.0",
+    "eslint": "^9.38.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-prettier": "^5.5.3",
-    "globals": "^16.3.0",
+    "eslint-plugin-prettier": "^5.5.4",
+    "globals": "^16.4.0",
     "prettier": "^3.6.2"
   }
-}
+}

package/src/platform.js

@@ -89,15 +89,15 @@ class TadoPlatform {
                   Logger.info('Refreshing home...', foundHome[0].name);
                   this.config = await TadoConfig.refresh(foundHome[0].name, this.config, {
                     username: foundHome[0].username
-                  }, storagePath);
+                  }, storagePath, this.config.tadoApiUrl, this.config.skipAuth);
                 }
               } else {
                 Logger.info('Generating new home...', user.username);
-                this.config = await TadoConfig.add(this.config, [user], storagePath);
+                this.config = await TadoConfig.add(this.config, [user], storagePath, this.config.tadoApiUrl, this.config.skipAuth);
               }
             } else {
               Logger.info('Generating new home...', user.username);
-              this.config = await TadoConfig.add(this.config, [user], storagePath);
+              this.config = await TadoConfig.add(this.config, [user], storagePath, this.config.tadoApiUrl, this.config.skipAuth);
             }
           }
         }
@@ -114,7 +114,7 @@ class TadoPlatform {
           })
           .filter((user) => user);
 
-        await TadoConfig.store(this.config, storagePath);
+        await TadoConfig.store(this.config, storagePath, this.config.tadoApiUrl, this.config.skipAuth);
 
         Logger.info('Done!');
 

package/src/tado/tado-api.js

@@ -8,7 +8,9 @@ const tado_auth_url = "https://login.tado.com/oauth2";
 const tado_client_id = "1bb50063-6b0c-4d11-bd99-387f4a91cc46";
 
 export default class Tado {
-  constructor(name, config, storagePath) {
+  constructor(name, config, storagePath, tadoApiUrl, skipAuth) {
+    this.tadoApiUrl = tadoApiUrl || tado_url;
+    this.skipAuth = skipAuth?.toString() === "true";
     this.name = name;
     const usesExternalTokenFile = config.username?.toLowerCase().endsWith(".json");
     this._tadoExternalTokenFilePath = usesExternalTokenFile ? config.username : undefined;
@@ -167,9 +169,9 @@ export default class Tado {
 
   async apiCall(path, method = 'GET', data = {}, params = {}, tado_url_dif) {
     Logger.debug('Get access token...', this.name);
-    const access_token = await this.getToken();
+    const access_token = this.skipAuth ? undefined : await this.getToken();
 
-    let tadoLink = tado_url_dif || tado_url;
+    let tadoLink = tado_url_dif || this.tadoApiUrl;
 
     Logger.debug('Using ' + tadoLink, this.name);
 
@@ -186,9 +188,9 @@ export default class Tado {
     let config = {
       method: method,
       responseType: 'json',
-      headers: {
+      headers: access_token ? {
         Authorization: 'Bearer ' + access_token,
-      },
+      } : undefined,
       timeout: {
         request: 30000
       },

package/src/tado/tado-config.js

@@ -18,7 +18,7 @@ const deviceHandler = new Map();
 let telegram;
 
 export default {
-  add: async function (config, credentials, storagePath) {
+  add: async function (config, credentials, storagePath, tadoApiUrl, skipAuth) {
     config.homes = config.homes || [];
 
     for (const user of credentials) {
@@ -26,7 +26,7 @@ export default {
 
       const tado = new TadoApi('Configuration', {
         username: username,
-      }, storagePath);
+      }, storagePath, tadoApiUrl, skipAuth);
 
       const me = await tado.getMe();
 
@@ -152,14 +152,14 @@ export default {
     return config;
   },
 
-  resync: async function (config, credentials, storagePath) {
+  resync: async function (config, credentials, storagePath, tadoApiUrl, skipAuth) {
     const availableHomesInApis = [];
 
     for (const user of credentials) {
       //Init API with credentials
       const tado = new TadoApi('Configuration', {
         username: user.username
-      }, storagePath);
+      }, storagePath, tadoApiUrl, skipAuth);
 
       const me = await tado.getMe();
 
@@ -192,21 +192,21 @@ export default {
       if (home.name && home.username) {
         config = await this.refresh(home.name, config, {
           username: home.username
-        }, storagePath);
+        }, storagePath, tadoApiUrl, skipAuth);
       }
     }
 
-    config = await this.add(config, availableHomesInApis, storagePath);
+    config = await this.add(config, availableHomesInApis, storagePath, tadoApiUrl, skipAuth);
 
     return config;
   },
 
-  refresh: async function (currentHome, config, credentials, storagePath) {
+  refresh: async function (currentHome, config, credentials, storagePath, tadoApiUrl, skipAuth) {
     let username = credentials.username;
 
     const tado = new TadoApi('Configuration', {
       username: username
-    }, storagePath);
+    }, storagePath, tadoApiUrl, skipAuth);
 
     //Home Informations
     let home = config.homes.find((home) => home && home.name === currentHome);
@@ -499,7 +499,7 @@ export default {
           //Base Config
           const tado = new TadoApi(home.name, {
             username: home.username
-          }, storagePath);
+          }, storagePath, config.tadoApiUrl, config.skipAuth);
 
           const accessoryConfig = {
             homeId: home.id,
@@ -566,9 +566,9 @@ export default {
                           : 'zone-thermostat'
                         : zone.type === 'AIR_CONDITIONING'
                           ? 'zone-heatercooler-ac'
-                        : valid_boilerTypes.includes(zone.accTypeBoiler) && zone.accTypeBoiler === 'FAUCET'
-                          ? 'zone-faucet'
-                          : 'zone-switch';
+                          : valid_boilerTypes.includes(zone.accTypeBoiler) && zone.accTypeBoiler === 'FAUCET'
+                            ? 'zone-faucet'
+                            : 'zone-switch';
 
                     config.subtype = zone.boilerTempSupport ? 'zone-heatercooler-boiler' : config.subtype;