認證

{
  "type": "register",
  "payload": {
    "pilot": {
      "id": "my-pilot-001",
      "name": "My WiFi Controller",
      "version": "1.0.0",
      "vendor": "My Company"
    },
    "auth": {},  // 首次連接時為空
    "capabilities": [...]
  }
}

┌─────────────────────────────────────────┐
│  新執行節點連接請求                          │
├─────────────────────────────────────────┤
│                                         │
│  名稱: My WiFi Controller                │
│  ID: my-pilot-001                       │
│  供應商: My Company                      │
│                                         │
│  功能:                                  │
│  • wifi.scan - 掃描 WiFi 網絡           │
│  • wifi.connect - 連接 WiFi             │
│  • wifi.status - 取得 WiFi 狀態         │
│                                         │
│  ⚠️  只批准來自信任來源的執行節點           │
│                                         │
│  120 秒後自動拒絕                       │
│                                         │
│  ┌─────────┐  ┌──────────────────────┐ │
│  │ 拒絕    │  │ 批准                  │ │
│  └─────────┘  └──────────────────────┘ │
└─────────────────────────────────────────┘

{
  "type": "register_response",
  "payload": {
    "success": true,
    "pilotId": "my-pilot-001",
    "assignedKey": "abc123-generated-key-xyz789",
    "message": "Pilot approved and registered",
    "heartbeat": {
      "interval": 30000,
      "timeout": 90000
    }
  }
}

{
  "type": "register_response",
  "payload": {
    "success": false,
    "error": {
      "code": "USER_REJECTED",
      "message": "User rejected this pilot"
    }
  }
}

# 將金鑰保存到設定檔
config = {
    "pilot_id": "my-pilot-001",
    "auth_key": "abc123-generated-key-xyz789"
}
with open("pilot_config.json", "w") as f:
    json.dump(config, f)

{
  "type": "register",
  "payload": {
    "pilot": {
      "id": "my-pilot-001",
      "name": "My WiFi Controller",
      "version": "1.0.0"
    },
    "auth": {
      "key": "abc123-generated-key-xyz789"  // ← 使用已保存的金鑰
    },
    "capabilities": [...]
  }
}

{
  "type": "register_response",
  "payload": {
    "success": true,
    "pilotId": "my-pilot-001",
    "message": "Pilot registered successfully",
    "heartbeat": {
      "interval": 30000,
      "timeout": 90000
    }
  }
}

{
  "authorizedPilots": {
    "production-pilot-001": {
      "name": "Production WiFi Controller",
      "key": "pre-shared-secret-key-12345",
      "authorizedAt": "2026-01-21T10:00:00.000Z"
    }
  }
}

{
  "pilot_id": "production-pilot-001",
  "auth_key": "pre-shared-secret-key-12345"
}

格式: <vendor>-<type>-<instance>
例如:
  - acme-wifi-controller-001
  - mycompany-sensor-hub-lab-01
  - test-pilot-dev-instance

{
  "pilot": {
    "id": "my-pilot-001",
    "version": "1.2.3",  // 語義版本化
    "name": "My WiFi Controller v1.2"
  }
}

async def handle_register_response(response):
    payload = response.get("payload", {})

    if not payload.get("success"):
        error = payload.get("error", {})

        if error.get("code") == "AUTH_FAILED":
            print("⚠️  金鑰驗證失敗")
            print("💡 正在不使用金鑰重新連接...")

            # 刪除儲存的金鑰
            os.remove("pilot_config.json")

            # 不使用金鑰重新連接(首次流程)
            await reconnect_without_key()

# 執行不使用金鑰的執行節點
python wifi_pilot.py

# 執行已保存金鑰的執行節點
python wifi_pilot.py --config pilot_config.json

# 將設定中的金鑰修改為無效值
python wifi_pilot.py --config pilot_config.json

import json
import os

class AuthManager:
    def __init__(self, config_file="pilot_config.json"):
        self.config_file = config_file
        self.pilot_id = "my-pilot-001"
        self.key = None
        self.load_key()

    def load_key(self):
        """從設定檔載入金鑰"""
        if os.path.exists(self.config_file):
            with open(self.config_file, "r") as f:
                config = json.load(f)
                self.key = config.get("auth_key")
                print(f"✅ 從 {self.config_file} 載入金鑰")
        else:
            print("ℹ️  未找到金鑰，將請求新金鑰")

    def save_key(self, key):
        """將金鑰保存到設定檔"""
        config = {
            "pilot_id": self.pilot_id,
            "auth_key": key
        }
        with open(self.config_file, "w") as f:
            json.dump(config, f, indent=2)

        # 設定安全的檔案權限 (Unix)
        os.chmod(self.config_file, 0o600)
        print(f"💾 已將金鑰保存到 {self.config_file}")

    def delete_key(self):
        """刪除已保存的金鑰"""
        if os.path.exists(self.config_file):
            os.remove(self.config_file)
            self.key = None
            print(f"🗑️  已刪除 {self.config_file}")

    def get_auth_payload(self):
        """取得登錄的認證酬載"""
        if self.key:
            return {"key": self.key}
        else:
            return {}

    def handle_register_response(self, payload):
        """處理登錄回應"""
        if payload.get("success"):
            assigned_key = payload.get("assignedKey")
            if assigned_key:
                self.save_key(assigned_key)
                self.key = assigned_key
            return True
        else:
            error = payload.get("error", {})
            if error.get("code") == "AUTH_FAILED":
                print("❌ 認證失敗，刪除金鑰")
                self.delete_key()
            return False

# 使用
auth = AuthManager()

# 建立登錄酬載
payload = {
    "pilot": {
        "id": auth.pilot_id,
        "name": "My WiFi Controller",
        "version": "1.0.0"
    },
    "auth": auth.get_auth_payload(),  # 空或帶有金鑰
    "capabilities": [...]
}