python-homely 0.1.7__py3-none-any.whl → 0.1.9__py3-none-any.whl

homely/client.py

@@ -189,6 +189,7 @@ class HomelyClient:
             payload=payload,
             invalid_reason="invalid_refresh_token",
             action="Token refresh",
+            extra_headers={"X-Forwarded-For": "0.0.0.0"},
         )
 
     async def fetch_refresh_token(self, refresh_token: str) -> dict[str, Any] | None:
@@ -217,12 +218,15 @@ class HomelyClient:
         payload: dict[str, Any],
         invalid_reason: TokenFailureReason,
         action: str,
+        extra_headers: dict[str, str] | None = None,
     ) -> TokenEndpointResult:
         """Post to a token endpoint and return a detailed typed result."""
         url = f"{self._base_url}{endpoint}"
 
         try:
-            async with self._session.post(url, json=payload, timeout=self._timeout) as response:
+            async with self._session.post(
+                url, json=payload, headers=extra_headers, timeout=self._timeout
+            ) as response:
                 body_preview = await self._response_text_preview(response)
                 if response.status in (200, 201):
                     try:
@@ -442,10 +446,18 @@ class HomelyClient:
                         )
                         return None, response.status
                     return parsed, response.status
+                retry_after = response.headers.get("Retry-After")
+                try:
+                    body = await response.text()
+                except Exception:
+                    body = "<unreadable>"
                 _LOGGER.debug(
-                    "Location data fetch failed with status=%s location_id=%s",
+                    "Location data fetch failed with status=%s location_id=%s "
+                    "retry_after=%s body=%s",
                     response.status,
                     _log_identifier(location_id),
+                    retry_after,
+                    body[:500] if body else None,
                 )
                 return None, response.status
         except (aiohttp.ClientError, TimeoutError) as err:

homely/websocket.py

@@ -89,12 +89,14 @@ class HomelyWebSocket:
         status_update_callback: Callable[[str, str | None], None] | None = None,
         context_id: str | None = None,
         entry_id: str | None = None,
+        partner_code: int | str | None = None,
     ) -> None:
         """Initialize WebSocket client."""
         self.context_id = context_id or entry_id
         self.entry_id = self.context_id
         self.location_id = location_id
         self.token = token
+        self.partner_code = partner_code
         self.on_data_update = on_data_update
         self.socket: Any | None = None
         self._is_closing = False
@@ -368,10 +370,13 @@ class HomelyWebSocket:
 
         self._set_status("Connecting")
         try:
+            # SECURITY: never enable the engineio logger. It logs the full
+            # connection URL, which carries the bearer token in the query
+            # string (?token=Bearer <access_token>), leaking it to HA logs.
             self.socket = socketio.AsyncClient(
                 reconnection=False,
                 logger=False,
-                engineio_logger=logging.getLogger("engineio.client"),
+                engineio_logger=False,
             )
 
             async def connect() -> None:
@@ -405,12 +410,16 @@ class HomelyWebSocket:
             self.socket.on("connect_error", connect_error)
 
             bearer_token = self._bearer_value(self.token)
-            query = urlencode(
-                {
-                    "locationId": str(self.location_id),
-                    "token": bearer_token,
-                }
-            )
+            query_params: dict[str, str] = {
+                "locationId": str(self.location_id),
+                "token": bearer_token,
+            }
+            # NOTE: do NOT send a "partner" query parameter. Homely's websocket
+            # server rejects it ("Partner <code> is not supported") and closes
+            # the connection immediately, causing a connect/disconnect loop.
+            # partner_code is accepted for API compatibility but intentionally
+            # unused here.
+            query = urlencode(query_params)
             url = f"{self.websocket_url}?{query}"
             _LOGGER.debug("WebSocket connecting %s to %s", self._ctx(), self.websocket_url)
             await asyncio.wait_for(

{python_homely-0.1.7.dist-info → python_homely-0.1.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-homely
-Version: 0.1.7
+Version: 0.1.9
 Summary: Async Python client for the Homely cloud API, built for Home Assistant but usable anywhere.
 Author: Ludvik Blichfeldt Rød
 License-Expression: MIT

python_homely-0.1.9.dist-info/RECORD

@@ -0,0 +1,11 @@
+homely/__init__.py,sha256=TK4sclUiHqDewtsOenxS9KNLkprZxqbiYkh__JeNmMA,1023
+homely/client.py,sha256=4kDsZkj3P7z6iNlWZJX9De5GiRATD3GdY_beEXC_ZAg,18781
+homely/exceptions.py,sha256=w6y5MC8yjPe5QtI-YEKUsbAPF1D0ARWx6ZkRsLTjrgQ,1040
+homely/models.py,sha256=8chNpjo1SF4TGww7XPWFUK3kXILH3bSmUnjNteyfsys,1842
+homely/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
+homely/websocket.py,sha256=Zf-NcRO_pEqb9A2LEPVyeqYbMaAeUVFL_qBrLuJI9OI,20262
+python_homely-0.1.9.dist-info/licenses/LICENSE,sha256=nNVHKvQjryAonWsz5TbhzLd6M2kZaoNUvhxz92MgeAA,1079
+python_homely-0.1.9.dist-info/METADATA,sha256=nAPt3MWkZThc8lpYyqJXWzNBSMNkr5ZzNJiKfuT0mX8,5239
+python_homely-0.1.9.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+python_homely-0.1.9.dist-info/top_level.txt,sha256=auE-j6ghVMdT_jAw04jiXthgbuLpi-jYBU0fCkKvREQ,7
+python_homely-0.1.9.dist-info/RECORD,,

python_homely-0.1.7.dist-info/RECORD

@@ -1,11 +0,0 @@
-homely/__init__.py,sha256=TK4sclUiHqDewtsOenxS9KNLkprZxqbiYkh__JeNmMA,1023
-homely/client.py,sha256=iqM1ChFEVez5PJcvWk8BlkkVx4bekaQacBa-rAvSxpo,18276
-homely/exceptions.py,sha256=w6y5MC8yjPe5QtI-YEKUsbAPF1D0ARWx6ZkRsLTjrgQ,1040
-homely/models.py,sha256=8chNpjo1SF4TGww7XPWFUK3kXILH3bSmUnjNteyfsys,1842
-homely/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
-homely/websocket.py,sha256=X84KhYVsmqwSmab18D-MgMKi2W0J8aMgRcPx417CPCY,19624
-python_homely-0.1.7.dist-info/licenses/LICENSE,sha256=nNVHKvQjryAonWsz5TbhzLd6M2kZaoNUvhxz92MgeAA,1079
-python_homely-0.1.7.dist-info/METADATA,sha256=Rp3rNA6o9CjOP1oD2LmQjTBS6OPyVUt1YqZLySN_OwU,5239
-python_homely-0.1.7.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-python_homely-0.1.7.dist-info/top_level.txt,sha256=auE-j6ghVMdT_jAw04jiXthgbuLpi-jYBU0fCkKvREQ,7
-python_homely-0.1.7.dist-info/RECORD,,