mirror of
https://github.com/esphome/esphome.git
synced 2026-02-28 09:54:19 -07:00
473b7af9f0
Add a 15-second timeout for completing the API handshake (Noise transport + HelloRequest). Previously, a client could connect and stall mid-handshake, holding a connection slot for up to 150 seconds (the keepalive disconnect timeout). With max_connections defaulting to 8 on ESP32, this allowed all slots to be blocked with minimal effort. Normal clients complete the full handshake in milliseconds, so 15 seconds is generous. The check short-circuits for authenticated connections (single bitfield compare) so there is no overhead for established sessions.
