TP-Link Tapo C225 auth fails after camera update to 1.0.27

[RobinBeismann]

Hi,

in reference to #733, it looks like the new firmware 1.0.27 for the Tapo C225 introduces the same authentication issues as on the C210. All three of my C225 now show log "streams: 401 unauthorized".
Previously, I've been passing the credentials in cleartext via:

    kueche:
      - tapo://{FRIGATE_PASSWORD_TAPO}@{FRIGATE_CAM_KUECHE_EG}

However I've now tested it with an SHA265 hashed password but that didn't solve it either.

Happy to provide all logs needed.

Thanks alot for go2rtc, really appreciate it!

[RobinBeismann]

So I've tested all combinations I could think off this evening.
I can stream it using rtsp just fine, however this way I don't have two way audio.

For reference, the variables I'm using are:
FRIGATE_USERNAME_TAPO -> The username set as local user in the Tapo App
FRIGATE_PASSWORD_TAPO_CLEAR -> Clear Text Password (for testing I've set it to be the same as the cloud account
FRIGATE_PASSWORD_TAPO_SHA256 -> Password hashed as SHA in uppercase
FRIGATE_PASSWORD_TAPO_MD5 -> Password hashed as MD5 in uppercase

This works via rtsp:

    # Camera Küche EG
    kueche:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}:554/stream1
      - ffmpeg:kueche_sub#audio=opus
    kueche_sub:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}:554/stream2
      - ffmpeg:kueche_sub#audio=opus
    
    # Camera Wohnzimmer EG
    wohnzimmer:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_WOHNZIMMER_EG}:554/stream1
      - ffmpeg:wohnzimmer_sub#audio=opus
    wohnzimmer_sub:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_WOHNZIMMER_EG}:554/stream2
      - ffmpeg:wohnzimmer_sub#audio=opus

    # Camera Flur EG
    flur:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_FLUR_EG}:554/stream1
      - ffmpeg:flur_sub#audio=opus
    flur_sub:
      - rtsp://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_FLUR_EG}:554/stream2
      - ffmpeg:flur_sub#audio=opus

However I can't find a working way via the tapo:// protocol.
Before the update to 1.0.27 I was using this just fine:
- tapo://{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}

The variations I've tested to no avail are:

- tapo://admin:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}
- tapo://admin:{FRIGATE_PASSWORD_TAPO_SHA256}@{FRIGATE_CAM_KUECHE_EG}
- tapo://admin:{FRIGATE_PASSWORD_TAPO_MD5}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_SHA256}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_USERNAME_TAPO}:{FRIGATE_PASSWORD_TAPO_MD5}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_PASSWORD_TAPO_CLEAR}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_PASSWORD_TAPO_SHA256}@{FRIGATE_CAM_KUECHE_EG}
- tapo://{FRIGATE_PASSWORD_TAPO_MD5}@{FRIGATE_CAM_KUECHE_EG}

Anyone has an idea?

[jmtatsch]

On my C210 with latest fw it works like this
tapo://[email protected] (I use the same pw for cloud/local)
at least in frigate I am not able to use templates for this or go2rtc dies.

[ddyugaev]

Confirmed, TP-Link C210 v2.0 FW 1.3.11 work's with tapo://cloud_password_in_clear_text@Camera_IP

[AlexxIT]

I need remote access to this stream to check the problem (8800 camera port)
https://github.com/AlexxIT/go2rtc/wiki/Tunnel-RTSP-camera-to-Intenet

[agav85]

@RobinBeismann I also have C225 (firmware 1.0.27) and my configuration in go2rtc.yaml is as follows:

tapo_camera: - tapo://admin:[sha256-cloud-password]@[camera IP-address]

Cloud and local passwords are different.

I have the stream and it goes with audio. But I can't get camera microphone to work (two-way audio).

[RobinBeismann]

I've had a session with @AlexxIT, when I've reset my Tapo Cloud account password for him to access the cameras, he still couldn't sign in. After that we tried removing the camera from the Tapo App and re-adding it and it suddently started working with the newly set password via tapo://[cleartext password]@[camera IP-address].
So if you're facing the same issues with the C225 after the update to 1.0.27 (on go2rtc version 1.8.3 or newer), try removing your camera and re-adding it. Unfortunately this resets the camera and you'll lose all settings on them.