8b6c1cd53d
Crypto: - Replace broken ChaCha20 (static nonce) with ChaCha20-Poly1305 AEAD - HKDF-SHA256 key derivation from per-device factory NVS master keys - Random 12-byte nonce per message (ESP32 hardware RNG) - crypto_init/encrypt/decrypt API with mbedtls legacy (ESP-IDF v5.3.2) - Custom partition table with factory NVS (fctry at 0x10000) Firmware: - crypto.c full rewrite, messages.c device_id prefix + AEAD encrypt - crypto_init() at boot with esp_restart() on failure - Fix command_t initializations across all modules (sub/help fields) - Clean CMakeLists dependencies for ESP-IDF v5.3.2 C3PO (C2): - Rename tools/c2 + tools/c3po -> tools/C3PO - Per-device CryptoContext with HKDF key derivation - KeyStore (keys.json) for master key management - Transport parses device_id:base64(...) wire format Tools: - New tools/provisioning/provision.py for factory NVS key generation - Updated flasher with mbedtls config for v5.3.2 Docs: - Update all READMEs for new crypto, C3PO paths, provisioning - Update roadmap, architecture diagrams, security sections - Update CONTRIBUTING.md project structure
49 lines
1.4 KiB
Python
49 lines
1.4 KiB
Python
"""Device API routes."""
|
|
|
|
import time
|
|
from flask import Blueprint, jsonify
|
|
|
|
|
|
def create_devices_blueprint(server_config):
|
|
"""
|
|
Create the devices API blueprint.
|
|
|
|
Args:
|
|
server_config: Dict with keys:
|
|
- get_device_registry: Callable returning device registry
|
|
- require_api_auth: Auth decorator
|
|
"""
|
|
bp = Blueprint("api_devices", __name__, url_prefix="/api")
|
|
|
|
get_registry = server_config["get_device_registry"]
|
|
require_api_auth = server_config["require_api_auth"]
|
|
|
|
@bp.route("/devices")
|
|
@require_api_auth
|
|
def list_devices():
|
|
registry = get_registry()
|
|
if registry is None:
|
|
return jsonify({"error": "Device registry not available", "devices": []})
|
|
|
|
now = time.time()
|
|
devices = []
|
|
|
|
for d in registry.all():
|
|
devices.append({
|
|
"id": d.id,
|
|
"ip": d.address[0] if d.address else "unknown",
|
|
"port": d.address[1] if d.address else 0,
|
|
"status": d.status,
|
|
"connected_at": d.connected_at,
|
|
"last_seen": d.last_seen,
|
|
"connected_for_seconds": round(now - d.connected_at, 1),
|
|
"last_seen_ago_seconds": round(now - d.last_seen, 1)
|
|
})
|
|
|
|
return jsonify({
|
|
"devices": devices,
|
|
"count": len(devices)
|
|
})
|
|
|
|
return bp
|