Self onboarding of Thing requires password?

[razat]

Hi.

From your docs:

Onboard with thingID
The following is an example of a thing onboarding with its thingID.

curl -v -X POST \
  -H "Authorization: Bearer {ACCESS_TOKEN}" \
  -H "X-Kii-AppID: {APP_ID}" \
  -H "X-Kii-AppKey: {APP_KEY}" \
  -H "Content-Type: application/vnd.kii.OnboardingWithThingIDByThing+json" \
  "https://api.kii.com/thing-if/apps/{APP_ID}/onboardings" \
  -d '{
    "thingID": "{THING_ID}",
    "thingPassword": "{THING_PASSWORD}"
  }'

A Thing that is onboarding itself is passing it's own access token for authentication here. Then why is it needed to pass the password in the data? Isn't it redundant?

Thanks

[makoto_iguchi]

Hi razat

The thingPasword is passed because it is needed when you are onboarding a thing itself for the first time.

As you've pointed out, the password is actually redundant for the second and subsequent onboarding. The current API does not distinguish if the onboarding is new one or not, so it requires the password to be set even if it is not a new onboarding invocation.