node-red-contrib-knx-ultimate 4.2.13 → 4.2.14

package/CHANGELOG.md

@@ -6,6 +6,12 @@
 
 # CHANGELOG
 
+**Version 4.2.14** - April 2026<br/>
+
+- FIX: **KNX Logger** XML download now works also with Node-RED authentication enabled by appending the active editor `access_token` and respecting `httpAdminRoot` when opening the download URL.<br/>
+- FIX: **KNX Logger** admin download route now normalizes `access_token` from query into `Authorization: Bearer ...` before permission checks, then removes it from query parameters to avoid auth conflicts.<br/>
+- FIX: resolved authenticated XML export failures (`401 Unauthorized`) reported in issue #502.<br/>
+
 **Version 4.2.13** - April 2026<br/>
 
 - FIX: **KNX AI Web** hardened authenticated requests by always attaching Bearer auth on API/audio calls (query token or Node-RED stored editor token fallback), preventing silent audio failures in authenticated sessions.<br/>

package/nodes/commonFunctions.js

@@ -8,6 +8,7 @@ const dptlib = require('knxultimate').dptlib
 const customHTTP = require('./utils/http')
 const KNXClient = require('knxultimate').KNXClient
 const sysLogger = require('./utils/sysLogger')
+const { normalizeAuthFromAccessTokenQuery } = require('./utils/httpAdminAccessToken')
 
 // DATAPONT MANIPULATION HELPERS
 // ####################
@@ -328,7 +329,7 @@ module.exports = (RED) => {
     })
 
     // 2025-12 Download logger XML file configured in a knxUltimateLogger node
-    RED.httpAdmin.get('/knxUltimateLoggerDownload', RED.auth.needsPermission('knxUltimate-config.read'), (req, res) => {
+    RED.httpAdmin.get('/knxUltimateLoggerDownload', normalizeAuthFromAccessTokenQuery, RED.auth.needsPermission('knxUltimate-config.read'), (req, res) => {
       try {
         const nodeId = (req.query.nodeId || req.query.id || '').toString()
         if (!nodeId) {

package/nodes/knxUltimateLogger.html

@@ -39,6 +39,21 @@
             });
 
             const nodeId = this.id;
+            const resolveAdminRoot = () => {
+                const raw = (RED.settings && typeof RED.settings.httpAdminRoot === "string") ? RED.settings.httpAdminRoot : "/";
+                const trimmed = String(raw || "/").trim();
+                if (trimmed === "" || trimmed === "/") return "";
+                return "/" + trimmed.replace(/^\/+|\/+$/g, "");
+            };
+            const resolveAccessToken = () => {
+                try {
+                    const tokens = (RED.settings && typeof RED.settings.get === "function") ? RED.settings.get("auth-tokens") : null;
+                    const token = tokens && typeof tokens.access_token === "string" ? tokens.access_token.trim() : "";
+                    return token;
+                } catch (error) {
+                    return "";
+                }
+            };
 
             const toggleFilePath = () => {
                 const isEmitSave = $("#node-input-saveMode").val() === "emit_save";
@@ -67,8 +82,16 @@
                     }
                     return;
                 }
-                const url = "knxUltimateLoggerDownload?nodeId=" + encodeURIComponent(nodeId) + "&_=" + new Date().getTime();
-                window.open(url, "_blank");
+                const adminRoot = resolveAdminRoot();
+                const targetBase = adminRoot + "/knxUltimateLoggerDownload";
+                const params = new URLSearchParams();
+                if (nodeId) params.set("nodeId", nodeId);
+                params.set("_", String(Date.now()));
+                const accessToken = resolveAccessToken();
+                if (accessToken) params.set("access_token", accessToken);
+                const target = targetBase + "?" + params.toString();
+                const wnd = window.open(target, "_blank", "noopener,noreferrer");
+                try { if (wnd && typeof wnd.focus === "function") wnd.focus(); } catch (e) { }
             });
         },
         oneditsave: function () {
@@ -151,4 +174,4 @@
             </p>
         </div>
     </div>        
-</script>
+</script>

package/package.json

@@ -3,7 +3,7 @@
   "engines": {
     "node": ">=20.18.1"
   },
-  "version": "4.2.13",
+  "version": "4.2.14",
   "description": "Control your KNX and KNX Secure intallation via Node-Red! A bunch of KNX nodes, with integrated Philips HUE control, ETS group address importer, and KNX routing between interfaces. Easy to use and highly configurable.",
   "files": [
     "nodes/",