Can't use Scanner (no HTTPS)

[TjardF]

Hi,
I installed the container but it doesn't support https, is there something I have to change?
Maybe I have to create certificates on my own?
I'd like contribute some documentation on usage, integration and install later....

[Donkie]

Hi, yes exactly. You would need to setup a proxy server that can handle a certificate, nginx for example. There are many guides online on how to do this.

Here is just one tutorial I found that seems to fit the bill. https://seanthegeek.net/1035/how-to-configure-a-nginx-reverse-proxy-with-lets-encrypt-certificates/
The upstream site they are talking about is Spoolman then in this case.

[deadly667]

Hi,
first of all thanks for great app. Only one comment regarding this from my side. Is it maybe better to put flag as optional override for that if user wants (that scanner is also available on http).

I personally don't want to expose my instance to public internet. On local home network, it's really overhead to have https and reverse proxy just for scanning QR code. I can always do that with custom QR code which will directly lead to my local instance of Spoolman but it's not point in that. I think that forcing https is maybe too much.

[Disane87]

I think that forcing https is maybe too much

Thats not a spoolman constraint, it's a browser constraint:
https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getUserMedia

And thats a pretty good contraint security wise.

[fleXXo22]

I found a way to disable the requirement for HTTPS camera access for specific websites.
Here's a guide: https://medium.com/@Carmichaelize/enabling-the-microphone-camera-in-chrome-for-local-unsecure-origins-9c90c3149339

It works for me.

[Disane87]

I would not recommend this because this is potentially unsafe.

If a website without SSL is requesting your camera and you have permission (there are ways to enable the permission without any consent but hacky hacky) your stream will be sent over the internet unencrypted and visible for everyone

[drlauridsen]

I would not recommend this because this is potentially unsafe.

If a website without SSL is requesting your camera and you have permission (there are ways to enable the permission without any consent but hacky hacky) your stream will be sent over the internet unencrypted and visible for everyone

But in chrome, with chrome://flags/#unsafely-treat-insecure-origin-as-secure, you simply add only the local spoolman ip:port to the exception - this should not pose a risk for other ip/websites?

But since the feature of using the camera to scan QR codes is a feature of spoolman, would it be possible to add https with a local certificate to the webserver? Or does camera access not accept local certificates?