Frigate NVR Updates: Locking Down the API
Frigate's dev team merged two related security and access-control fixes to the API on August 22, tightening permission checks for reviews and reports, while a separate container-hardening effort got underway. Developers relying on custom viewer roles or camera-scoped access should expect stricter enforcement going forward.
Duration: PT2M16S
Episode overview
This episode is a short developer briefing from Frigate NVR Updates.
It explains recent repository work in plain language.
- Show: Frigate NVR Updates
- Published: 2026-08-23T13:12:07Z
- Audio duration: PT2M16S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day, and welcome to Frigate NVR Updates for August 23rd, 2026.
The clear throughline in today's activity is access control. Frigate's API is getting more consistent and more locked down, and that shows up across two merged pull requests from Nicolas Mowen.
First, PR 24057 cleans up several inconsistencies in how the API handles permissions. It aligns review read-status behavior with the rest of the API, adds validation for web push endpoint URLs, and enforces role checks for custom viewer accounts. It also adds rate limiting to password changes, a straightforward but…
Second, PR 24056 closes a gap in review summary reports. Previously, report generation didn't properly check whether a user had full camera access. Now, only admins or users with access to every camera can run these reports. This matters because summary reports aggregate data across cameras — without this fix, a…
Together, these two changes tell a simple story: as Frigate's permission model has grown more granular, edge cases in enforcement have crept in, and the team is now going through and closing them systematically.
On a related but separate track, hawkeye217 opened PR 24061, container security hardening,…
Nearby episodes from Frigate NVR Updates
- Quietly Fixing Silent Failures
- Weekly Recap - Multi-Model Support & Container Security Hardening
- Container Hardening and Recording Reliability
- Frame Handling Fix and Config Consolidation
- Database Query Indexes
- A Deadlock Fix and a New Detector
- Multi-Model Support and Storage Reliability
- MQTT Refactor and Beta Polish