From 3cbd094edd0f0da9df9495c58e5b5027046cd93e Mon Sep 17 00:00:00 2001
From: TheThomaas <thethomaas@protonmail.ch>
Date: Fri, 18 Sep 2026 14:58:12 +0200
Subject: [PATCH] Update images path

---
 custom_components/cookcli/image_proxy.py   |  4 ++--
 custom_components/cookcli/websocket_api.py | 12 +++++++-----
 2 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/custom_components/cookcli/image_proxy.py b/custom_components/cookcli/image_proxy.py
index 8c8d1a8..b1045da 100644
--- a/custom_components/cookcli/image_proxy.py
+++ b/custom_components/cookcli/image_proxy.py
@@ -22,11 +22,11 @@ _LOGGER = logging.getLogger(__name__)
 
 
 class CookCliImageView(HomeAssistantView):
-    """GET /api/cookcli/image/{entry_id}/{image_ref} -> octets de l'image."""
+    """GET /api/cookcli/image/{entry_id}/{image_ref}?authSig=... -> octets de l'image."""
 
     url = "/api/cookcli/image/{entry_id}{image_ref:.*}"
     name = "api:cookcli:image"
-    requires_auth = True
+    requires_auth = False
 
     def __init__(self, hass: HomeAssistant) -> None:
         self.hass = hass
diff --git a/custom_components/cookcli/websocket_api.py b/custom_components/cookcli/websocket_api.py
index ca499af..468a7db 100644
--- a/custom_components/cookcli/websocket_api.py
+++ b/custom_components/cookcli/websocket_api.py
@@ -25,11 +25,13 @@ naviguent vers le même identifiant sans dupliquer la logique de slug.
 
 from __future__ import annotations
 
+from datetime import timedelta
 import re
 from urllib.parse import quote
 
 import voluptuous as vol
 from homeassistant.components import websocket_api
+from homeassistant.components.http.auth import async_sign_path
 from homeassistant.core import HomeAssistant
 
 from .api import CookCliApiError
@@ -48,11 +50,11 @@ def _resolve_entry(
     return None, None
 
 
-def _image_url(entry_id: str, image_ref: str | None) -> str | None:
+def _image_url(hass: HomeAssistant, entry_id: str, image_ref: str | None) -> str | None:
     if not image_ref:
         return None
-    return f"/api/cookcli/image/{entry_id}/{quote(image_ref, safe='/')}"
-
+    raw_path = f"/api/cookcli/image/{entry_id}/{quote(image_ref, safe='/')}"
+    return async_sign_path(hass, raw_path, timedelta(hours=1))
 
 def _view_path(recipe_path: str) -> str:
     """Slug utilisé comme path de vue HA pour cette recette.
@@ -110,7 +112,7 @@ async def ws_list_recipes(
                 "time": metadata.get("time"),
                 "servings": metadata.get("servings"),
                 "tags": metadata.get("tags", []),
-                "image_url": _image_url(entry_id, metadata.get("image")),
+                "image_url": _image_url(hass, entry_id, metadata.get("image")),
             }
         )
     connection.send_result(msg["id"], {"recipes": recipes})
@@ -139,7 +141,7 @@ async def ws_get_recipe(
         connection.send_error(msg["id"], "cannot_connect", str(err))
         return
 
-    recipe["image_url"] = _image_url(entry_id, recipe.get("image"))
+    recipe["image_url"] = _image_url(hass, entry_id, recipe.get("image"))
 
     todo_entity = entry_data.get("todo_entity")
     if todo_entity is not None: