Let's Control It

So, since i'm using mqtt with autentication i need to block any http commands, is it possible?
Because this is an huge security risk.

Many thanks.

What part is a security risk? the HTTP commands should be quite limited, the best you should be able to get from http is the status of a specific gpio.

... and actuate a gpio pin to say a relay, on http, without password, .... So I also think it would be better if we are able to disable for instance actuation of gpio pins, and limit a hacker reading the json back about what Tasks are setup on the device.

I have 2 arubas access Point, they have the possibility to create Access Rules, so what i've done is create a new SSID and permit only comunications from the pears to my Firewall to the NTP port and to my MQTT server and is port, every thing else is droped.
So, no one can access my pears from this SSID nor my internal network because it's beind an SOPHOS Firewall.