python-swidget 1.4.2__tar.gz → 1.4.3__tar.gz

{python_swidget-1.4.2 → python_swidget-1.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: python-swidget
-Version: 1.4.2
+Version: 1.4.3
 Summary: Python API for Swidget smart devices
 Home-page: https://github.com/swidget/python-swidget
 License: GPL-3.0-or-later

{python_swidget-1.4.2 → python_swidget-1.4.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "python-swidget"
-version = "1.4.2"
+version = "1.4.3"
 description = "Python API for Swidget smart devices"
 license = "GPL-3.0-or-later"
 authors = ["Swidget"]

{python_swidget-1.4.2 → python_swidget-1.4.3}/swidget/__init__.py

@@ -38,6 +38,7 @@ __version__ = version("python-swidget")
 
 
 __all__ = [
+    "detect_secure",
     "discover_devices",
     "discover_single",
     "provision_wifi",

{python_swidget-1.4.2 → python_swidget-1.4.3}/swidget/discovery.py

@@ -43,19 +43,20 @@ async def detect_secure(host: str, timeout: float = DETECT_TIMEOUT_SEC) -> bool:
     timeout_obj = ClientTimeout(total=timeout)
     connector = TCPConnector(ssl=False, force_close=True)
     async with ClientSession(connector=connector, timeout=timeout_obj) as session:
+        # Try plaintext first: it's the cheap path (no TLS handshake on the
+        # MCU) and a 200 response unambiguously means plaintext mode.
         try:
-            async with session.get(f"https://{host}/api/v1/summary") as resp:
-                # 403 = "auth required" → secure firmware.
-                # 200 without creds is unusual but still indicates HTTPS works.
-                if resp.status in (200, 403):
-                    return True
+            async with session.get(f"http://{host}/api/v1/summary") as resp:
+                if resp.status == 200:
+                    return False
         except (ClientError, asyncio.TimeoutError):
             pass
 
+        # Fall back to HTTPS. A 403 means the firmware is enforcing auth.
         try:
-            async with session.get(f"http://{host}/api/v1/summary") as resp:
-                if resp.status == 200:
-                    return False
+            async with session.get(f"https://{host}/api/v1/summary") as resp:
+                if resp.status == 403:
+                    return True
         except (ClientError, asyncio.TimeoutError):
             pass