[FR] Add Generic Tag Allowlist

[rbouteiller]

Is your feature request related to a problem? Please describe.
Currently, the system only supports HomeKey authentication for NFC-based lock control. Users who want to use generic NFC tags (non-HomeKey tags) to trigger lock/unlock actions have no way to do so. This limits the flexibility of the system and prevents users from using simple NFC tags, cards, or fobs that they may already have. (If the lock is directly controlled by a GPIO)

Describe the solution you'd like
I propose adding an NFC Tag Allowlist feature that allows users to:

1. Configure allowed NFC tags through a web UI where they can:

   • Add tags by manually entering a name and UID (hex format)
   • Use a "Tap" button to automatically capture the UID when scanning a tag via WebSocket
   • View and manage the list of allowed tags
   • Remove tags from the allowlist

2. Automatic lock control when a generic NFC tag is scanned:

   • When a generic (non-HomeKey) NFC tag is detected, the system checks if its UID is in the allowlist
   • If the UID matches an entry in the allowlist, the system triggers the same lock/unlock action as a successful HomeKey authentication
   • If the UID is not in the allowlist, the tag is logged but no action is taken

3. Persistent storage of the allowlist configuration in NVS (Non-Volatile Storage) so it survives reboots

** Security Considerations **

• The allowlist provides basic access control but does not offer the same cryptographic security as HomeKey
• Users should be aware that any tag with a matching UID will trigger lock actions
• The feature is suitable for low-to-medium security applications where convenience is prioritized

** Others **
Already implemented in my fork, issue to know if there is interest, needed a change in partition map for the webui (So no OTA from previous map).

[rednblkx]

Hi there!

I've been thinking for a long time about this one, thing is the project initially wasn't even supposed to handle things on its own more other than the homekey stuff, webui wasn't even a thing at the beginning but i added everything else because there was the need for it and it felt right to add them.
On the other hand, the tag allow list doesn't feel right to implement given that the flash is not even encrypted(i wasn't thinking that over 800 people would discover this project), and modifying the partition table means having to deal with migration which would be a nightmare given that it i'm trying to support 4 different chip models and it could also fail for any reason.

I'm absolutely down to create a new project that encompasses HomeKey and advanced NFC-based authorization using other kind of tags, and to be perfectly honest it actually is something that i plan to do at some point, i also want to do some low power battery stuff with this, though unfortunately from my measurements no esp32 is really suitable for that.

There's still a possibility i might implement this in the future if enough people raise this.

Still trying to understand how much interest there is on the access control scene for this kind of projects, so we'll see how things go.

[rbouteiller]

Hi,
Thanks for the fast reply, let me know if you need help with something.
Yes, maybe a new repo for a complete ESP32 smart lock system.
With support for remote reader (one esp for nfc, one for lock action), future Aliro standard, generic tag rolling code, etc