Apple’s internal beta documentation hints at HAP 6.0, which may deprecate the static 8-digit code entirely. The HAP 6.0 authorization code is rumored to be:
Until then, HAP 5.1 authorization code remains the definitive security mechanism for Apple HomeKit. hap 5.1 authorization code
To "authorize" your app to see or interact with other applications, you must implement the <queries> element in your AndroidManifest.xml. This acts as an authorization request to the operating system. Apple’s internal beta documentation hints at HAP 6
/pair-verify endpoint on your accessory’s HTTP server. The dynamic token expires after 60 seconds.