mirror of
https://github.com/home-assistant/frontend.git
synced 2026-07-08 06:53:54 +01:00
Bram Kragten
24821d6f1b
* Sign brand images in state-badge via connection context state-badge only signed entity_picture URLs when a `hass` object was passed, calling `hass.hassUrl()` to append the brands access token. Components migrated to Lit contexts (e.g. ha-config-updates on the Settings → Updates page) no longer pass `hass`, so brand icon URLs like /api/brands/integration/<domain>/icon.png were fetched without a token, returning 403 and triggering unauthenticated-request log entries in core. Consume connectionContext to obtain `hassUrl` so the token is added even when `hass` isn't provided, and skip brand URLs entirely when they can't be signed yet so no unauthenticated request fires. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * Remove now-unused hass property from state-badge With brand image signing handled via connectionContext, `hass` was only used by state-badge to reach `hassUrl`. Drop the property entirely and remove the `.hass` binding from all call sites; the connection context provides `hassUrl` everywhere the component renders. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>