Skip to content

v1.5.2

Choose a tag to compare

@jeremiaa jeremiaa released this 16 Aug 20:08
· 29 commits to main since this release

A corrective release. If you run the Home Assistant add-on, update — v1.5.1 shipped it broken.

The add-on

v1.5.1 pointed the add-on at an image built with a placeholder as its base path, and the step that replaces that placeholder with the real ingress path was never written. The result was an add-on that was broken both inside the Home Assistant frame and on its own port: the browser bundles asked for a path the server did not serve.

v1.5.2 points the add-on back at the ordinary image — the same one everyone running Docker Compose uses. The sidebar entry is a launcher again: one button, opens the editor in a new tab, Home Assistant stays where it is.

Running Magic Frame inside the Home Assistant frame is not finished, and the option text now says so. sidebar_mode: embedded still exists but falls back to the launcher and notes it in the log, so choosing it cannot leave you on a broken screen. Your displays were never affected — they use the fixed port and no login.

One-click sign-in went to localhost — fixed for everyone, not just the add-on

Clicking the sidebar button could send the browser to http://localhost:3000/editor. The /handoff route built its redirect from the request URL, whose origin comes from the internal server hostname (localhost) rather than from the Host header — and Next.js only rewrites that origin for middleware responses, not for route handlers. It now sends a path-only redirect, which the browser resolves against the address it actually called.

This affects more than the add-on. Any installation behind a reverse proxy or on a custom domain had the same bug the moment anyone used that path. Same class of problem as #31.

Known limitation, now documented

If you reach Home Assistant over HTTPS, the sidebar button cannot open http://<host>:8098 — browsers block it as mixed content. Open the address in a new tab instead. This was always true; it just was not written down.

Upgrade: add-on users press Reload in the add-on store, then Update. Everyone else: curl -fsSL https://raw.githubusercontent.com/jeremiaa/magic-frame/main/deploy/install.sh | bash, or pull ghcr.io/jeremiaa/magic-frame-app:1.5.2.