wyzeapy 0.5.30__py3-none-any.whl → 0.5.31__py3-none-any.whl

wyzeapy/utils.py

@@ -81,8 +81,13 @@ def wyze_decrypt_cbc(key: str, enc_hex_str: str) -> str:
 
     Returns:
         The decrypted plaintext string.
+
+    Note:
+        MD5 is used here because it is required by Wyze's proprietary API protocol.
+        This is not a security vulnerability - it's mandatory for API compatibility.
     """
-    key_hash = hashlib.md5(key.encode("utf-8")).digest()
+    # MD5 is required by Wyze's API protocol - not a security choice but API compatibility
+    key_hash = hashlib.md5(key.encode("utf-8")).digest()  # nosec B324
 
     iv = b"0123456789ABCDEF"
     cipher = AES.new(key_hash, AES.MODE_CBC, iv)
@@ -104,10 +109,15 @@ def create_password(password: str) -> str:
 
     Returns:
         The hashed password as a hex string.
+
+    Note:
+        Triple MD5 is mandated by Wyze's authentication API. This cannot be changed
+        without breaking compatibility with Wyze's servers.
     """
-    hex1 = hashlib.md5(password.encode()).hexdigest()
-    hex2 = hashlib.md5(hex1.encode()).hexdigest()
-    return hashlib.md5(hex2.encode()).hexdigest()
+    # MD5 is required by Wyze's authentication protocol - not a security choice
+    hex1 = hashlib.md5(password.encode()).hexdigest()  # nosec B324
+    hex2 = hashlib.md5(hex1.encode()).hexdigest()  # nosec B324
+    return hashlib.md5(hex2.encode()).hexdigest()  # nosec B324
 
 
 def check_for_errors_standard(service, response_json: Dict[str, Any]) -> None:

{wyzeapy-0.5.30.dist-info → wyzeapy-0.5.31.dist-info}/METADATA

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: wyzeapy
-Version: 0.5.30
+Version: 0.5.31
 Summary: A library for interacting with Wyze devices
 Author-email: Katie Mulliken <katie@mulliken.net>
 License: GPL-3.0-only
 Requires-Python: >=3.11.0
-Requires-Dist: aiodns<4.0.0,>=3.2.0
+Requires-Dist: aiodns<5.0.0,>=3.2.0
 Requires-Dist: aiohttp<4.0.0,>=3.11.12
 Requires-Dist: pycryptodome<4.0.0,>=3.21.0
 Provides-Extra: dev
-Requires-Dist: pdoc<16.0.0,>=15.0.3; extra == 'dev'
-Requires-Dist: pytest<9.0.0,>=7.0.0; extra == 'dev'
+Requires-Dist: pdoc<17.0.0,>=15.0.3; extra == 'dev'
+Requires-Dist: pytest<10.0.0,>=7.0.0; extra == 'dev'

{wyzeapy-0.5.30.dist-info → wyzeapy-0.5.31.dist-info}/RECORD

@@ -1,24 +1,24 @@
-wyzeapy/__init__.py,sha256=QckgsDmJxrQFPdVT4rheUqi3cCBSN-jkEWD-6hHmrqk,17248
+wyzeapy/__init__.py,sha256=4peDFw5zdEc9T6iR2NxZ1mwhcG3ShW91gceBJqcWZy8,17244
 wyzeapy/const.py,sha256=3PV2Uq7wDD1X0ZmJBg8GWXYGHrpJvszyr9FuvwjHyus,1249
 wyzeapy/crypto.py,sha256=ApzPL0hrrd0D4k2jB5psNatJvUSzx1Kxui6_l4NJGO8,2057
 wyzeapy/exceptions.py,sha256=uKVWooofK22DZ3o9kwxnlJXnhk0VMJXnp-26pNavAis,1136
-wyzeapy/payload_factory.py,sha256=D37H0rTFakqnhmYrYjBAhFvRSquujINA7b8UyhRUjl0,20547
+wyzeapy/payload_factory.py,sha256=1QUEgqSSDwEjKv1ew-jQYoXcFk0uf5B4gODw83ep2zg,20638
 wyzeapy/types.py,sha256=LPLc86FkEy8rUoPMwG8xB73NCTVRkJ1O5w7uSfDydLQ,6785
-wyzeapy/utils.py,sha256=EXnsZFBxgI3LsIh9Ttg4gq3Aq1VMLOxBUPCspWJX9IQ,7407
+wyzeapy/utils.py,sha256=_aoP9H7RXuND3nCMP3gJRLBxX6Dsxag81RLm83G5Pu4,7969
 wyzeapy/wyze_auth_lib.py,sha256=CiWdl_UAzYxKLS8yCfjXxEI87gStJede2eS4g7KlnjE,18273
 wyzeapy/services/__init__.py,sha256=hbdyglbWQjM4XlNqPIACOEbspdsEEm4k5VXZ1hI0gc8,77
-wyzeapy/services/base_service.py,sha256=HUIU2uugHhY0KiGvc5ALYQn4NnsFMNZzECLJgqPHR9Q,34573
-wyzeapy/services/bulb_service.py,sha256=DNuT9PBmFhXpaD9rcjoYZMt-TLWWEAC3o0Yyvw_itHA,7825
+wyzeapy/services/base_service.py,sha256=3FsbZHm6ndc6pSGCwrwh6SRgGb7HDK_L5lzuSjaLgO0,35547
+wyzeapy/services/bulb_service.py,sha256=4Z_rX40OGqzRuKz_fgyWGb4di7jtyJSB_ZvFFCDlcCo,8821
 wyzeapy/services/camera_service.py,sha256=vaJIChKDMg3zWcoC_JqITDBjw4sgFdyUEkl3_w2ML8I,11170
 wyzeapy/services/hms_service.py,sha256=lQojRASz9AlwqkRfj7W7gOKXpLHrHHVwBGMw5WJ23Nc,2450
-wyzeapy/services/irrigation_service.py,sha256=lzQoUT2COlIMF1oTTDsvb-7H7zkra96i_Cxr4zkfYzs,7110
+wyzeapy/services/irrigation_service.py,sha256=6HzwFRTjZcM4-Y9exSn5EmS2DZbl1gF_uaiMpK2Kd6c,8670
 wyzeapy/services/lock_service.py,sha256=NBjlr7pL5zJqdJaH33v1i6BbLHb7TXCkoCql4hCr8J8,2234
 wyzeapy/services/sensor_service.py,sha256=WSNz0OOLoZKru4d1ZwZ80-pdJ321HssUnwEgVfwX2zM,3578
 wyzeapy/services/switch_service.py,sha256=2O3J8-hP3vOgGVi0cKiKG_3j71zI6rHiqQd3u7CEKcE,2244
 wyzeapy/services/thermostat_service.py,sha256=_d-UbD65JArhwsslawvwpTmfVC4tMksY-L1Uu7HW0m4,5360
 wyzeapy/services/update_manager.py,sha256=5pZJmnyN4rlYJwMtEY13NlPBssnRLhtlLLmXr9t990Q,6770
 wyzeapy/services/wall_switch_service.py,sha256=cBKmnB2InHKIuoPwQ47t1rDtDplyOyGQYvnfX4fXFcc,4339
-wyzeapy/tests/test_irrigation_service.py,sha256=6rknfL0FzkptHs4CcYBamBTMD4pHcG0RyYNe3OgYBI8,21270
-wyzeapy-0.5.30.dist-info/METADATA,sha256=7OVSrLycTNIfh3zcmTI-38EZ0xt4NZExNKamzuTT61I,445
-wyzeapy-0.5.30.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-wyzeapy-0.5.30.dist-info/RECORD,,
+wyzeapy/tests/test_irrigation_service.py,sha256=ui3ZlqLUkoLb-uebK8Q1A83d9lAV9WIuHGbIrqPLyqg,28926
+wyzeapy-0.5.31.dist-info/METADATA,sha256=ps5g5kCz_rY2XLNeVS31nSuX4ZXp1xVQmNJTrCLsTOw,446
+wyzeapy-0.5.31.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+wyzeapy-0.5.31.dist-info/RECORD,,

{wyzeapy-0.5.30.dist-info → wyzeapy-0.5.31.dist-info}/WHEEL

@@ -1,4 +1,4 @@
 Wheel-Version: 1.0
-Generator: hatchling 1.27.0
+Generator: hatchling 1.28.0
 Root-Is-Purelib: true
 Tag: py3-none-any