import socket, hashlib, time class RouterOSApi: def __init__(self, host, port=8728): self.host = host; self.port = port; self.sock = None def connect(self, username, password): self.sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) self.sock.settimeout(10) self.sock.connect((self.host, self.port)) self._write_sentence('/login', f'=name={username}', f'=password={password}') resp = self._read_response() if any(isinstance(r, tuple) and r[0] == '!trap' for r in resp): chal = None for item in resp: if isinstance(item, dict) and 'ret' in item: chal = item['ret'] if chal and len(chal) == 32: response = '00' + hashlib.md5(b'\x00' + password.encode() + bytes.fromhex(chal)).hexdigest() self._write_sentence('/login', f'=name={username}', f'=response={response}') resp = self._read_response() return self def _encode_length(self, length): if length < 0x80: return bytes([length]) elif length < 0x4000: length |= 0x8000; return bytes([(length>>8)&0xFF, length&0xFF]) elif length < 0x200000: length |= 0xC00000; return bytes([(length>>16)&0xFF, (length>>8)&0xFF, length&0xFF]) elif length < 0x10000000: length |= 0xE0000000; return bytes([(length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF]) else: return bytes([0xF0, (length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF]) def _write_word(self, word): self.sock.sendall(self._encode_length(len(word)) + word.encode('utf-8')) def _write_sentence(self, cmd, *words): self._write_word(cmd) for w in words: self._write_word(w) self.sock.sendall(b'\x00') def _read_byte(self): return self.sock.recv(1) def _read_word(self): first = self._read_byte() if first == b'\x00': return None lb = first[0] if lb & 0x80: if (lb & 0xC0) == 0x80: length = ((lb & 0x3F)<<8) + self._read_byte()[0] elif (lb & 0xE0) == 0xC0: length = ((lb & 0x1F)<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0] elif (lb & 0xF0) == 0xE0: length = ((lb & 0x0F)<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0] else: length = (self._read_byte()[0]<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0] else: length = lb data = b'' while len(data) < length: chunk = self.sock.recv(length - len(data)) if not chunk: break data += chunk return data.decode('utf-8', errors='replace') def _read_sentence(self): words = [] while True: w = self._read_word() if w is None: break words.append(w) return words def _read_response(self): responses = [] while True: sentence = self._read_sentence() if not sentence: break reply = sentence[0]; rest = sentence[1:] if reply == '!done': break elif reply == '!re': d = {} for w in rest: if '=' in w: parts = w.split('=', 2) d[parts[1]] = parts[2] if len(parts) >= 3 else '' else: d[w] = '' responses.append(d) elif reply == '!trap': responses.append(('!trap', rest)) elif reply == '!fatal': raise Exception(f"Fatal: {rest}") else: responses.append((reply, rest)) return responses def cmd(self, command, **attrs): words = [command] for k, v in attrs.items(): if k.startswith('?'): words.append(f'{k}={v}') else: words.append(f'={k}={v}') self._write_sentence(*words) return self._read_response() def close(self): if self.sock: self.sock.close(); self.sock = None api = RouterOSApi('192.168.100.2') api.connect('mi4', 'm14') # 1. Create test user with past expiry test_name = "test_expiry_verify" print(f"Creating test user '{test_name}' with past expiry...") api.cmd('/ip/hotspot/user/add', **{ 'name': test_name, 'profile': 'Bulanan2', 'password': 'test123', 'comment': 'jul/06/2026 00:00:00', # yesterday 'limit-uptime': '1h', }) # Verify users = list(api.cmd('/ip/hotspot/user/print', **{'?name': test_name})) if users: print(f" Created: {users[0].get('name')} comment={users[0].get('comment')}") # 2. Get scheduler run count before sched_before = {} for item in api.cmd('/system/scheduler/print'): sched_before[item['name']] = item.get('run-count', '0') print(f"\n DevB2 run count before: {sched_before.get('DevB2', '?')}") # 3. Wait for scheduler to run (it runs every ~2.5 min) print("\n Waiting 10 seconds for scheduler to execute...") time.sleep(10) # 4. Check if user still exists users_after = list(api.cmd('/ip/hotspot/user/print', **{'?name': test_name})) sched_after = {} for item in api.cmd('/system/scheduler/print'): sched_after[item['name']] = item.get('run-count', '0') print(f" DevB2 run count after: {sched_after.get('DevB2', '?')}") if users_after: user = users_after[0] print(f"\n User STILL EXISTS: {user.get('name')}") print(f" Comment: {user.get('comment')}") print(f" limit-uptime: {user.get('limit-uptime')}") # Check if limit-uptime was changed to 1s if user.get('limit-uptime') == '1s': print(" EXPIRED: limit-uptime=1s - expiry system is WORKING!") else: print(f" NOT YET EXPIRED: limit-uptime={user.get('limit-uptime')}") print(" (may need to wait for next scheduler cycle)") else: print(f"\n User was REMOVED! Expiry system is WORKING!") # Cleanup if users_after: api.cmd('/ip/hotspot/user/remove', **{'.id': users_after[0]['.id']}) print(f"\n Cleaned up test user") api.close()