1) is the hash SHA-1 or MD5? And I assume it is just a string of hex digits in the xml – correct (not preceded by “0x”)?
Ans. Its SHA-1.
2) is this hashed password the password used on the “Connections” page on harmonygateway.com (ie the client-connection password, not the “root” password of the device)?
Ans. Yes. The password entered by the user gets hashed by the App.
3) if I am just accessing on the local network I just use the local ip address (ie 192.168.1.4:50333). I don’t need to add anything to the path (like “192.168.1.4/api” etc)?
Ans. No path needed. Just the Ip and the Port.
Just curious, are you developing your own client?