8 Commits

Author	SHA1	Message	Date
ZeliardM	9478ed25ac	Split KLAP IoT updates into smaller requests and validate KLAP responses (#1829) ... Some IoT devices respond over KLAP with a plain `200 OK` html page instead of a proper response when the response would be too large to construct, causing a "not a multiple of the block length" decryption error (e.g., KS200M in #1828). This PR lowers the maximum response size to 2048 bytes for IoT devices using KLAP, so that the update is split into multiple smaller requests like it is already done for bulbs. In details: - `IotDevice.max_device_response_size` returns 2048 over KLAP. Bulbs keep 4096 and XOR devices keep 16 KiB. - `KlapTransport` checks the response length and signature before decrypting, and raises a `KasaException` telling what was wrong instead of the decryption error. Fixes #1828 Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-04 21:14:48 -05:00
Teemu R.	2a81f74e9c	Consolidate SSL ciphers and use them in SslTransport (#1798) ... - Add `kasa/transports/sslcontext.py` with one shared SSL context for the https transports to avoid copies across transports. - Use it in `SslTransport`, and convert KLAP and Linkie also to use it. - Extend Python's default ciphers with the legacy suites instead of replacing accepted ciphers for future compatibility.	2026-10-14 23:16:56 +02:00
nopoz	53823ea9a5	Do not authenticate with a credentials_hash from a different transport (#1749) ... A `credentials_hash` is specific to the transport that produced it, but nothing checked that the hash a transport was handed was its own. This matters because a device can change its encryption type without the credentials changing. For example, toggling **Third-Party Compatibility** in the Tapo app moves a plug or strip between TPAP and KLAP, and firmware updates are known to introduce new transports. This introduces a per-transport check that the hash has the shape that transport produces, and treats a foreign hash as absent rather than as a bad password. This makes the failure honest but still ends in a reauth. This also changes how credentials are read back out when the hash is one of the plaintext forms and lets the transport derive its own, so the change of encryption type needs no reauth in all cases.	2026-10-04 15:30:01 +02:00
Teemu R.	7b1b14d1e6	Allow https for klaptransport (#1415) ... Later firmware versions on robovacs use `KLAP` over https instead of ssltransport (reported as AES)	2025-01-22 10:54:32 +00:00
Teemu R.	e097b45984	Improve exception messages on credential mismatches (#1417)	2025-01-04 10:06:26 +00:00
Steven B.	a01247d48f	Remove support for python <3.11 (#1273) ... Python 3.11 ships with latest Debian Bookworm. pypy is not that widely used with this library based on statistics. It could be added back when pypy supports python 3.11.	2024-11-18 18:46:36 +00:00
Steven B.	e55731c110	Move protocol modules into protocols package (#1254)	2024-11-13 17:50:21 +00:00
Teemu R.	668ba748c5	Move transports into their own package (#1247) ... This moves all transport implementations into a new `transports` package for cleaner main package & easier to understand project structure.	2024-11-12 14:40:44 +01:00