Skip to content

0.2.7

Latest
Latest

Choose a tag to compare

View all tags
@mwatson2 mwatson2 released this 14 Jul 17:44
v0.2.7
baad851
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Addresses the two newest pygaposa-related review comments on the Home Assistant integration PR (home-assistant/core#161442).

Security

  • Do not log Firebase request URLs verbatim. FirebaseAuth.sign_in, FirebaseAuth.refresh_id_token and Firestore._get previously logged the raw ClientResponse at debug level; the sign-in and token-refresh URLs include ?key=<api key>, so enabling debug logging leaked the configured Firebase API key. These now log only the method, query-stripped URL and status.

Fixed

  • Make polling cancellation-safe. When a caller of Device.update() / PollManager.wait_for_condition() is cancelled (e.g. an outer timeout expires), the waiter is now removed and the detached background polling task is cancelled when it was the last waiter. Previously the poll continued in the background and could later notify listeners with stale data after the caller had given up.
Assets 2
Loading