Disable Direct Download

Direct Download lets a portal user give the device a URL to download an image from. It is enabled by default, so anyone who can open the portal can make the device download from any address.

Behind authentication, this is a convenience. Without authentication, on a network you do not fully control, it allows others to install firmware you did not write. If your product does not need Direct Download, disable it.

Disable Direct DownloadCopy Anchor Link

ElegantOTA.setDirectDownloadMode(false);

Enable Direct DownloadCopy Anchor Link

ElegantOTA.setDirectDownloadMode(true);

Direct Download is enabled by default after a cold boot.

Check the settingCopy Anchor Link

if (ElegantOTA.checkDirectDownloadMode() == true) {
  Serial.println("Direct Download is enabled");
} else {
  Serial.println("Direct Download is disabled");
}

BehaviorCopy Anchor Link

While Direct Download is disabled:

• The Direct tab disappears from the portal.
• The /ota/download endpoint refuses requests, regardless of the client that sends them.

The setting only controls URLs submitted through the portal endpoint. The following continue to work:

• Calls to ElegantOTA.pullFrom() from your own code.
• Uploading a .bin file in File mode.
• Auto Update, which only downloads from the update channel compiled into the firmware.

Remove remote updates from the buildCopy Anchor Link

If you need neither Direct Download nor Auto Update, compile the HTTP client out of the library to save flash:

build_flags = -D ELEGANTOTA_ENABLE_REMOTE=0

The portal then offers only File mode, and the related functions, including pullFrom(), setDirectDownloadMode(), setAutoMode(), setUpdateURL(), setCACert(), state(), source() and onUpdateAvailable(), are not compiled. Remove any calls to them from your sketch.