Use SHA hash to make token harder to guess (#5258)

* Use SHA hash to make token harder to guess

Use hashlib SHA256 to encode object id instead of using it directly.

* Cache access token

Instead of generating a token on the fly cache it in the constructor.

* Fix lint

homeassistant/components/camera/__init__.py

@@ -8,6 +8,7 @@
 import asyncio
 from datetime import timedelta
 import logging
+import hashlib
 
 from aiohttp import web
 
@@ -47,11 +48,13 @@ class Camera(Entity):
     def __init__(self):
         """Initialize a camera."""
         self.is_streaming = False
+        self._access_token = hashlib.sha256(
+            str.encode(str(id(self)))).hexdigest()
 
     @property
     def access_token(self):
         """Access token for this camera."""
-        return str(id(self))
+        return self._access_token
 
     @property
     def should_poll(self):