Repository navigation
docs: cloud-free provisioning (stable local token via country_domain) - #2095
Open
SahajJain01 wants to merge 1 commit into
Open
SahajJain01 wants to merge 1 commit into
SahajJain01 wants to merge 1 commit into
Conversation
…y_domain) Documents how passing a bogus country_domain to miIO.config_router pins the device's cloud server name to an NXDOMAIN address, so it never reaches Xiaomi and the pairing token is never re-keyed -- enabling account-free local control with no router rules. Wired into the docs toctree. Refs rytilahti#2094. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #2095 +/- ##
=======================================
Coverage 84.31% 84.31%
=======================================
Files 201 201
Lines 20656 20656
Branches 1121 1121
=======================================
Hits 17417 17417
Misses 3047 3047
Partials 192 192 ☔ View full report in Codecov by Harness. |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a documentation page describing cloud-free provisioning for miIO Wi-Fi devices.
During pairing, passing a bogus
country_domaintomiIO.config_routermakes thefirmware build a cloud server name
<country_domain>.ot.io.mi.comthat isNXDOMAIN (there is no wildcard record). The device then can never reach Xiaomi's
cloud on any network, so the token disclosed at pairing is never re-keyed and
stays usable for local control — with no cloud account and no router-level firewall
rules. The page is wired into the docs toctree.
Why
On current firmware the pairing token is re-keyed the first time the device reaches
Xiaomi's cloud, which is the usual reason a captured token stops working shortly
after setup. This documents a reliable, account-free alternative.
Testing / evidence
Verified on
chuangmi.plug.m1(Marvell MW300, firmware1.4.5_2):*.ot.io.mi.com:8053and itscaptured token was rejected within ~2 minutes.
country_domain=zzon the same uplink, a packet capture showedonly failing DNS lookups and no connection to port
8053, and the token keptauthenticating.
Reference implementation (pairing + control): https://github.com/SahajJain01/miio-cloudfree
Docs-only change; happy to adjust wording or placement. Refs #2094.
🤖 Generated with Claude Code