Frigate 14 beta 1 authentication #11542

Welsyntoffie · 2024-05-26T20:25:14Z

Welsyntoffie
May 26, 2024

I added a web page card to my Home Assistant. Pointing it to port 8080, it does require username and password. Good.
I have a cloudflare tunnel to frigate ui. Pointing the HA web page card to the cloudflare address does open the password screen, but thats where it ends. I enter the password correct and username, it enters the UI then goes back to the login screen.
I am running it like this because I need the HTTPS support to get to my cameras from my work computer.
I have Home Assistant on a tailscale funnel. So using HTTPS from work can not open http site.
Question is, why is the UI exiting after username and password is entered correct? (VIA cloudflare tunnel)?

NickM-27 · 2024-05-26T20:27:41Z

NickM-27
May 26, 2024
Collaborator Sponsor

I use cloudflare tunnel and it works correctly. Most likely your issue is related to cookies not being stored when it is served as an iframe in HA card

4 replies

Welsyntoffie May 26, 2024
Author

I tried, Brave, Chrome and EDGE. All doing the same.
Is HA suppose to save the cookie?

NickM-27 May 26, 2024
Collaborator Sponsor

Like I said, when running in an iframe I don't believe it does.

But running in cloudflare directly in the browser things work as expected for me, so I don't believe this has anything to do with frigate

Welsyntoffie May 26, 2024
Author

When I run my cloudflare address directly in the browser the login is working perfect.
HA iframe is just not letting me pass. So this might be a HA issue instead.

Welsyntoffie May 26, 2024
Author

Thanks for the help. I will keep searching.

Welsyntoffie · 2024-05-28T22:31:22Z

Welsyntoffie
May 28, 2024
Author

Companion app can also not keep the login open. Redirects back to login screen everytime. This time using tailscale funnel.

0 replies

downtownsj1973 · 2024-05-30T23:05:25Z

downtownsj1973
May 30, 2024

Build: 0.14.0-8c32580

I've changed the password for the admin account and created new users. neither seem to persist reboots.

1 reply

NickM-27 May 31, 2024
Collaborator Sponsor

When you say neither persists what do you mean exactly?

downtownsj1973 · 2024-05-31T12:30:04Z

downtownsj1973
May 31, 2024

I modify the admin and add a few users. Test that all changes work. Restart Frigate and the changes are gone. New admin password is generated and test users are gone.

…

On Thu, May 30, 2024 at 9:35 PM Nicolas Mowen ***@***.***> wrote: When you say neither persists what do you mean exactly? — Reply to this email directly, view it on GitHub <#11542 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKNIN357JWHUDU4KYVTWLULZE7HUJAVCNFSM6AAAAABIKCLOECVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TMMJRGY4TG> . You are receiving this because you commented.Message ID: ***@***.*** com>

1 reply

NickM-27 May 31, 2024
Collaborator Sponsor

Sounds like docker isn't setup correctly so the database is being recreated.

downtownsj1973 · 2024-05-31T12:39:20Z

downtownsj1973
May 31, 2024

As this was a config that has been working for a few months pre-beta, are there other settings that are stored in the DB that I can validate this theory with? Thanks, Scott

…

On Fri, May 31, 2024 at 8:35 AM Nicolas Mowen ***@***.***> wrote: Sounds like docker isn't setup correctly so the database is being recreated. — Reply to this email directly, view it on GitHub <#11542 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKNIN345N6ERB7J5IM4XH53ZFBVAXAVCNFSM6AAAAABIKCLOECVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TMMJYGEZDK> . You are receiving this because you commented.Message ID: ***@***.*** com>

3 replies

NickM-27 May 31, 2024
Collaborator Sponsor

Would probably be easier to just see configs. If there was a problem just retaining authenticated users on a restart then we'd have more reports of this

downtownsj1973 May 31, 2024

Good point! Since others are reporting it, then it’s likely on my end:-)
here is the docker compose file I have been using and my frigate config is after. One thing to note in advance is I do not use the DB location option in my config and I can certainly start using it if necessary:

NOT USED
'

Optional: Database configuration

database:

The path to store the SQLite DB (default: shown below)

path: /config/frigate.db
'

version: "3.9"
services:
  frigate:
    container_name: frigate
    privileged: true # this may not be necessary for all setups
    restart: always
    image: ghcr.io/blakeblackshear/frigate:dev-8c32580
    shm_size: "1152mb" # update for your cameras based on calculation above
    devices:
      - /dev/bus/usb:/dev/bus/usb  # Passes the USB Coral, needs to be modified for other versions
      - /dev/apex_0:/dev/apex_0    # Passes a PCIe Coral, follow driver instructions here https://coral.ai/docs/m2/get-started/#2a-on-linux
      - /dev/video11:/dev/video11  # For Raspberry Pi 4B
      - /dev/dri/renderD128:/dev/dri/renderD128 # For intel hwaccel, needs to be updated for your hardware
    networks:
        put_net:
            ipv4_address: 10.250.10.100
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /home/frigate/config.yml:/config/config.yml
      - /mnt/surveillance/frigate:/media/frigate
      - type: tmpfs # Optional: 1GB of memory, reduces SSD/SD Card wear
        target: /tmp/cache
        tmpfs:
          size: 1000000000
    ports:
      - "5000:5000"
      - "8554:8554" # RTSP feeds
      - "8555:8555/tcp" # WebRTC over tcp
      - "8555:8555/udp" # WebRTC over udp

    environment:
      FRIGATE_RTSP_PASSWORD: "***"

      PLUS_API_KEY: ***


networks:
    put_net:
        driver: macvlan
        driver_opts:
            parent: eno1
        ipam:
            config:
                - 
                  subnet: 10.250.0.0/16
                  gateway:  10.250.10.1

Frigate config:

telemetry:
  stats:
    network_bandwidth: true

mqtt:
  host: 10.250.11.88
  port: 1883
  topic_prefix: frigate
    #stats (default: shown below)
    #stats_interval: 60
detectors:
  coral:
    type: edgetpu
    device: usb

#detect:
#  fps: 5

model:
  ##v1
  ##path: plus:https://***
  ##v2
  path: plus:https://***

birdseye:
  enabled: true
  mode: motion

cameras:
  Attic-West-Dome:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.0/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
        - path: rtsp:https://***@10.250.11.0/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect

    zones:
      zone_1:
        coordinates: 2560,1440,2560,0,0,0,0,1440

    onvif:
      host: 10.250.11.0
      port: 80
      user: ***
      password: ***
      autotracking:
        enabled: true
        calibrate_on_startup: false
        zooming: absolute
        zoom_factor: 0.3
        required_zones:
          - zone_1
        return_preset: Home
        movement_weights: 0.0, 1.0, 2.348846673965454, 4.406586987485167, 0.9267648312353325

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all

###---

  Hallway2-Dome:
    enabled: true
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.139/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
        - path: rtsp:https://***@10.250.11.139/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect

    zones:
      zone_1:
        coordinates: 2560,1440,2560,0,0,0,0,1440

    onvif:
      host: 10.250.11.139
      port: 80
      user: ***
      password: ***
      autotracking:
        enabled: true
        calibrate_on_startup: false
        zooming: absolute
        zoom_factor: 0.3
        required_zones:
          - zone_1
        return_preset: Home

        movement_weights: 0.25, 1.0, 5.686736583709717, 5.641918780726772, 0.5237098432356317
    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440
    record:
      enabled: true
      retain:
        days: 3
        mode: all
###---

  Attic-East-Dome:
    ffmpeg:
      inputs:
        - path: rtsp:https://***[email protected]/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
        #- path: rtsp:https://***@10.250.11.22/cam/realmonitor?channel=1&subtype=1
          #roles:
            #- detect

    zones:
      zone_1:
        coordinates: 2560,1440,2560,0,0,0,0,1440

    onvif:
      host: 10.250.11.22
      port: 80
      user: ***
      password: ***
      autotracking:
        enabled: true
        calibrate_on_startup: false
        zooming: absolute
        zoom_factor: 0.3
        required_zones:
          - zone_1
        return_preset: Home

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all

###---

  Kitchen-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.10.111/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect
        - path: rtsp:https://***@10.250.10.111/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
            - audio

      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---

###---

  LivingRoom-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.239/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect
        - path: rtsp:https://***@10.250.11.239/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
            - audio

      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark


    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---

###---

  DiningRoom-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.242/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect
        - path: rtsp:https://***@10.250.11.242/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
            - audio

      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---

###---

  Garage-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.10.115/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
            - detect
            - audio
      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package
        - dog
        - license_plate
        - car
        - amazon
        - fedex
        - ups

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---

###---

  Backyard-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.10.134/cam/realmonitor?channel=1&subtype=1
          roles:
            - detect
        - path: rtsp:https://***@10.250.10.134/cam/realmonitor?channel=1&subtype=0
          roles:
            - record
            - audio
      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark


    objects:
      track:
        - person
        - cat
        - face
        - package
        - dog

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---

###---

  Front-Turret:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.10.167/cam/realmonitor?channel=1&subtype=0
          roles:
            - detect
            - record
            - audio
      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package
        - dog
        - license_plate
        - car
        - amazon
        - fedex
        - ups

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all

#---
##Convert to Reolink recommended config

  Garage-Doorbell:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.75:554/h264Preview_01_sub
          roles:
            - detect
        - path: rtsp:https://***@10.250.11.75:554/h264Preview_01_main
          roles:
            - record
            - audio
      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all
#---
##Convert to Reolink recommended config

  Front-Doorbell:
    ffmpeg:
      inputs:
        - path: rtsp:https://***@10.250.11.5:8555/h264Preview_01_sub
          roles:
            - detect
        - path: rtsp:https://***@10.250.11.5:8555/h264Preview_01_main
          roles:
            - record
            - audio
      output_args:
        record: preset-record-generic-audio-aac

    audio:
      enabled: true
      listen:
        - fire_alarm
        - scream
        - speech
        - yell
        - bark

    objects:
      track:
        - person
        - cat
        - face
        - package

    detect:
      width: 2560
      height: 1440

    record:
      enabled: true
      retain:
        days: 3
        mode: all


# Optional: Configuration for the jpg snapshots written to the clips directory for each event
# NOTE: Can be overridden at the camera level
snapshots:
  # Optional: Enable writing jpg snapshot to /media/frigate/clips (default: shown below)
  enabled: true
  # Optional: save a clean PNG copy of the snapshot image (default: shown below)
  clean_copy: true
  # Optional: print a timestamp on the snapshots (default: shown below)
  timestamp: true
  # Optional: draw bounding box on the snapshots (default: shown below)
  bounding_box: true
  # Optional: crop the snapshot (default: shown below)
  crop: false
  # Optional: height to resize the snapshot to (default: original size)
  height: 175
  # Optional: Restrict snapshots to objects that entered any of the listed zones (default: no required zones)
  required_zones: []
  # Optional: Camera override for retention settings (default: global values)
  retain:
    # Required: Default retention days (default: shown below)
    default: 7
    # Optional: Per object retention days
    objects:
      person: 7
  # Optional: quality of the encoded jpeg, 0-100 (default: shown below)
  quality: 100




camera_groups:
  Doorbells:
    order: 1
    icon: LuDoorClosed
    cameras:
      - Front-Doorbell
      - Garage-Doorbell
  Front_Door:
    order: 2
    icon: LuMailbox
    cameras:
      - Front-Doorbell
      - Front-Turret
  Back_Door:
    order: 3
    icon: LuDoorClosed
    cameras:
      - Garage-Doorbell
      - Garage-Turret
  Attic:
    order: 4
    icon: LuHome
    cameras:
      - Attic-East-Dome
      - Attic-West-Dome
      - Hallway2-Dome
version: 0.14

NickM-27 May 31, 2024
Collaborator Sponsor

your docker compose file only maps the config file, while it should be mapping the entire config directory - /home/frigate/config.yml:/config/config.yml

this was explained in the 0.13 release notes

downtownsj1973 · 2024-05-31T14:39:30Z

downtownsj1973
May 31, 2024

Good eye:-). Thank you for pointing that out. I will make a change and follow up. Thanks again:-)

…

On Fri, May 31, 2024 at 10:38 AM Nicolas Mowen ***@***.***> wrote: your docker compose file only maps the config file, while it should be mapping the entire config directory - /home/frigate/config.yml:/config/config.yml this was explained in the 0.13 release notes — Reply to this email directly, view it on GitHub <#11542 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKNIN32UZOUEIQIQIMAQD3DZFCDN3AVCNFSM6AAAAABIKCLOECVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TMMJZG44DS> . You are receiving this because you commented.Message ID: ***@***.*** com>

1 reply

downtownsj1973 May 31, 2024

Added path for root of config and defined DB location, and DB and it's contents now persists post restart/re-pull of the container/image.

Welsyntoffie · 2024-05-31T15:31:13Z

Welsyntoffie
May 31, 2024
Author

I added grafana to my funnel and noticed that it also redirects back to login using the HA webpage card.
I found https://community.grafana.com/t/login-page-redirect-to-login-page-after-successfull-login/34993/29 mentioning
GF_SECURITY_COOKIE_SAMESITE: none
GF_SECURITY_COOKIE_SECURE: "true".
I tried that and I was able to login via HA webpage card.
Is this similar to what I am experiencing with frigate via webpage card. Even the companion app redirects back to login.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Frigate 14 beta 1 authentication #11542

{{title}}

Replies: 7 comments 10 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

Frigate 14 beta 1 authentication #11542

Welsyntoffie May 26, 2024

Replies: 7 comments · 10 replies

NickM-27 May 26, 2024 Collaborator Sponsor

Welsyntoffie May 26, 2024 Author

NickM-27 May 26, 2024 Collaborator Sponsor

Welsyntoffie May 26, 2024 Author

Welsyntoffie May 26, 2024 Author

Welsyntoffie May 28, 2024 Author

downtownsj1973 May 30, 2024

NickM-27 May 31, 2024 Collaborator Sponsor

downtownsj1973 May 31, 2024

NickM-27 May 31, 2024 Collaborator Sponsor

downtownsj1973 May 31, 2024

NickM-27 May 31, 2024 Collaborator Sponsor

downtownsj1973 May 31, 2024

Optional: Database configuration

The path to store the SQLite DB (default: shown below)

NickM-27 May 31, 2024 Collaborator Sponsor

downtownsj1973 May 31, 2024

downtownsj1973 May 31, 2024

Welsyntoffie May 31, 2024 Author

Welsyntoffie
May 26, 2024

Replies: 7 comments 10 replies

NickM-27
May 26, 2024
Collaborator Sponsor

Welsyntoffie May 26, 2024
Author

NickM-27 May 26, 2024
Collaborator Sponsor

Welsyntoffie May 26, 2024
Author

Welsyntoffie May 26, 2024
Author

Welsyntoffie
May 28, 2024
Author

downtownsj1973
May 30, 2024

NickM-27 May 31, 2024
Collaborator Sponsor

downtownsj1973
May 31, 2024

NickM-27 May 31, 2024
Collaborator Sponsor

downtownsj1973
May 31, 2024

NickM-27 May 31, 2024
Collaborator Sponsor

NickM-27 May 31, 2024
Collaborator Sponsor

downtownsj1973
May 31, 2024

Welsyntoffie
May 31, 2024
Author