nwp500-python 3.1.3__tar.gz → 3.1.4__tar.gz

{nwp500_python-3.1.3 → nwp500_python-3.1.4}/CHANGELOG.rst

@@ -2,6 +2,23 @@
 Changelog
 =========
 
+Version 3.1.4 (2025-10-26)
+==========================
+
+Fixed
+-----
+
+- **MQTT Reconnection**: Fixed MQTT reconnection failures due to expired AWS credentials
+  
+  - Added AWS credential expiration tracking (``_aws_expires_at`` field in ``AuthTokens``)
+  - Added ``are_aws_credentials_expired`` property to check AWS credential validity
+  - Modified ``ensure_valid_token()`` to prioritize AWS credential expiration check
+  - Triggers full re-authentication (not just token refresh) when AWS credentials expire
+  - Preserves AWS credential expiration timestamps during token refresh
+  - Prevents reconnection failures when connection interrupts after AWS credentials expire but before JWT tokens expire
+  - Resolves AWS_ERROR_HTTP_WEBSOCKET_UPGRADE_FAILURE errors during reconnection attempts
+  - Improved test coverage for auth module from 31% to 60% with comprehensive test suite
+
 Version 3.1.3 (2025-10-24)
 ==========================
 

{nwp500_python-3.1.3/src/nwp500_python.egg-info → nwp500_python-3.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nwp500-python
-Version: 3.1.3
+Version: 3.1.4
 Summary: A library for controlling Navien NWP500 Water Heaters via NaviLink
 Home-page: https://github.com/eman/nwp500-python
 Author: Emmanuel Levijarvi

{nwp500_python-3.1.3 → nwp500_python-3.1.4}/src/nwp500/auth.py

@@ -73,6 +73,9 @@ class AuthTokens:
     _expires_at: datetime = field(
         default=datetime.now(), init=False, repr=False
     )
+    _aws_expires_at: Optional[datetime] = field(
+        default=None, init=False, repr=False
+    )
 
     def __post_init__(self) -> None:
         """Cache the expiration timestamp after initialization."""
@@ -80,6 +83,11 @@ class AuthTokens:
         self._expires_at = self.issued_at + timedelta(
             seconds=self.authentication_expires_in
         )
+        # Calculate AWS credentials expiration if available
+        if self.authorization_expires_in:
+            self._aws_expires_at = self.issued_at + timedelta(
+                seconds=self.authorization_expires_in
+            )
 
     @classmethod
     def from_dict(cls, data: dict[str, Any]) -> "AuthTokens":
@@ -106,6 +114,25 @@ class AuthTokens:
         # Consider expired if within 5 minutes of expiration
         return datetime.now() >= (self._expires_at - timedelta(minutes=5))
 
+    @property
+    def are_aws_credentials_expired(self) -> bool:
+        """Check if AWS credentials have expired.
+
+        AWS credentials have a separate expiration time from JWT tokens.
+        If AWS credentials are expired, a full re-authentication is needed
+        since the token refresh endpoint doesn't provide new AWS credentials.
+
+        Returns:
+            True if AWS credentials are expired, False if expiration time is
+            unknown or credentials are still valid
+        """
+        if not self._aws_expires_at:
+            # If we don't know when AWS credentials expire, consider them valid
+            # This handles cases where authorization_expires_in wasn't provided
+            return False
+        # Consider expired if within 5 minutes of expiration
+        return datetime.now() >= (self._aws_expires_at - timedelta(minutes=5))
+
     @property
     def time_until_expiry(self) -> timedelta:
         """Get time remaining until token expiration.
@@ -423,6 +450,8 @@ class NavienAuthClient:
                         new_tokens.authorization_expires_in = (
                             old_tokens.authorization_expires_in
                         )
+                        # Also preserve the AWS expiration timestamp
+                        new_tokens._aws_expires_at = old_tokens._aws_expires_at
 
                 # Update stored auth response if we have one
                 if self._auth_response:
@@ -446,23 +475,36 @@ class NavienAuthClient:
         """
         Ensure we have a valid access token, refreshing if necessary.
 
+        This method checks both JWT token and AWS credentials expiration.
+        If AWS credentials are expired, it triggers a full re-authentication
+        since the token refresh endpoint doesn't provide new AWS credentials.
+
         Returns:
             Valid AuthTokens or None if not authenticated
 
         Raises:
             TokenRefreshError: If token refresh fails
+            AuthenticationError: If re-authentication fails
         """
         if not self._auth_response:
             _logger.warning("No authentication response available")
             return None
 
-        if self._auth_response.tokens.is_expired:
+        tokens = self._auth_response.tokens
+
+        # Check if AWS credentials have expired
+        if tokens.are_aws_credentials_expired:
+            _logger.info("AWS credentials expired, re-authenticating...")
+            # Re-authenticate to get fresh AWS credentials
+            await self.sign_in(self._user_id, self._password)
+            return self._auth_response.tokens if self._auth_response else None
+
+        # Check if JWT token has expired
+        if tokens.is_expired:
             _logger.info("Token expired, refreshing...")
-            return await self.refresh_token(
-                self._auth_response.tokens.refresh_token
-            )
+            return await self.refresh_token(tokens.refresh_token)
 
-        return self._auth_response.tokens
+        return tokens
 
     @property
     def is_authenticated(self) -> bool:

{nwp500_python-3.1.3 → nwp500_python-3.1.4/src/nwp500_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nwp500-python
-Version: 3.1.3
+Version: 3.1.4
 Summary: A library for controlling Navien NWP500 Water Heaters via NaviLink
 Home-page: https://github.com/eman/nwp500-python
 Author: Emmanuel Levijarvi

{nwp500_python-3.1.3 → nwp500_python-3.1.4}/src/nwp500_python.egg-info/SOURCES.txt

@@ -120,6 +120,7 @@ src/nwp500_python.egg-info/requires.txt
 src/nwp500_python.egg-info/top_level.txt
 tests/conftest.py
 tests/test_api_helpers.py
+tests/test_auth.py
 tests/test_command_queue.py
 tests/test_events.py
 tests/test_utils.py