ESP8266 Community Forum

Posted: **Sat May 14, 2016 8:36 am**

Since the ESP8266HTTPUpdateServer is using the ESP8266WebServer, you could simply add some code in the /update callback to prevent the process to continue. This code is similar of the one from ESP8266WebServer/examples/HttpBasicAuth/HttpBasicAuth.ino :

Code: Select all

    if(!server.authenticate(www_username, www_password))
      return server.requestAuthentication();

Posted: **Sat May 14, 2016 12:49 pm**

I think then you could probably turn on the MD5 signed option, so that only signed codes are accepted to be uploaded. One would hope that you are only talking about people who do not know the system, and thus wouldn't know the signing code.

ESP8266 Community Forum

Passwording ESP8266HTTPUpdateServer?

Re: Passwording ESP8266HTTPUpdateServer?

Re: Passwording ESP8266HTTPUpdateServer?