python-swidget 1.4.1__tar.gz → 1.4.3__tar.gz

{python_swidget-1.4.1 → python_swidget-1.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: python-swidget
-Version: 1.4.1
+Version: 1.4.3
 Summary: Python API for Swidget smart devices
 Home-page: https://github.com/swidget/python-swidget
 License: GPL-3.0-or-later

{python_swidget-1.4.1 → python_swidget-1.4.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "python-swidget"
-version = "1.4.1"
+version = "1.4.3"
 description = "Python API for Swidget smart devices"
 license = "GPL-3.0-or-later"
 authors = ["Swidget"]

{python_swidget-1.4.1 → python_swidget-1.4.3}/swidget/__init__.py

@@ -14,7 +14,12 @@ to be handled by the user of the library.
 
 from importlib_metadata import version
 
-from swidget.discovery import SwidgetDiscoveredDevice, discover_devices, discover_single
+from swidget.discovery import (
+    SwidgetDiscoveredDevice,
+    detect_secure,
+    discover_devices,
+    discover_single,
+)
 from swidget.exceptions import SwidgetException
 from swidget.provision import provision_wifi
 from swidget.swidgetdevice import (
@@ -33,6 +38,7 @@ __version__ = version("python-swidget")
 
 
 __all__ = [
+    "detect_secure",
     "discover_devices",
     "discover_single",
     "provision_wifi",

{python_swidget-1.4.1 → python_swidget-1.4.3}/swidget/discovery.py

@@ -6,6 +6,7 @@ from typing import Any, Type
 from urllib.parse import urlparse
 
 import ssdp
+from aiohttp import ClientError, ClientSession, ClientTimeout, TCPConnector
 
 from swidget.swidgetdevice import DeviceType, SwidgetDevice
 
@@ -17,10 +18,51 @@ from .swidgettimerswitch import SwidgetTimerSwitch
 
 RESPONSE_SEC = 5
 SWIDGET_ST = "urn:swidget:pico:1"
+# Generous timeout: TLS handshakes on the device's MCU can take several
+# seconds on first connection.
+DETECT_TIMEOUT_SEC = 10
 _LOGGER = logging.getLogger(__name__)
 devices = dict()
 
 
+async def detect_secure(host: str, timeout: float = DETECT_TIMEOUT_SEC) -> bool:
+    """Determine whether a Swidget device requires HTTPS+auth.
+
+    Probes ``/api/v1/summary`` over HTTPS first (no credentials). A 403
+    response means the firmware enforces auth — the device is in secure
+    mode. If HTTPS is unreachable, falls back to HTTP; a 200 there means
+    the device is in plaintext mode.
+
+    :param host: Hostname or IP of the device.
+    :param timeout: Per-request timeout in seconds. Defaults are generous
+        because the device performs TLS termination on a low-power MCU
+        and the first handshake can be several seconds.
+    :return: True if the device requires HTTPS+auth, False if plaintext.
+    :raises SwidgetException: If neither protocol returns a usable response.
+    """
+    timeout_obj = ClientTimeout(total=timeout)
+    connector = TCPConnector(ssl=False, force_close=True)
+    async with ClientSession(connector=connector, timeout=timeout_obj) as session:
+        # Try plaintext first: it's the cheap path (no TLS handshake on the
+        # MCU) and a 200 response unambiguously means plaintext mode.
+        try:
+            async with session.get(f"http://{host}/api/v1/summary") as resp:
+                if resp.status == 200:
+                    return False
+        except (ClientError, asyncio.TimeoutError):
+            pass
+
+        # Fall back to HTTPS. A 403 means the firmware is enforcing auth.
+        try:
+            async with session.get(f"https://{host}/api/v1/summary") as resp:
+                if resp.status == 403:
+                    return True
+        except (ClientError, asyncio.TimeoutError):
+            pass
+
+    raise SwidgetException(f"Could not reach Swidget device at {host}")
+
+
 class SwidgetDiscoveredDevice:
     """Stub class to capture details about discovered devices."""