Address code review findings

- Fix infinite recursion on re-auth by adding attempt counter
- Add endpoint validation to unifi_api_call (block path traversal, require /api/ prefix)
- Clean up redundant SSL context creation
- Add safe port parsing with fallback and warning log

unifi_client.py

@@ -95,10 +95,8 @@ class UnifiClient:
             return
 
         # Create SSL context
-        if self.verify_ssl:
-            ssl_context = ssl.create_default_context()
-        else:
-            ssl_context = ssl.create_default_context()
+        ssl_context = ssl.create_default_context()
+        if not self.verify_ssl:
             ssl_context.check_hostname = False
             ssl_context.verify_mode = ssl.CERT_NONE
 
@@ -216,6 +214,7 @@ class UnifiClient:
         method: str,
         endpoint: str,
         payload: Optional[dict] = None,
+        _reauth_attempt: bool = False,
     ) -> Any:
         """
         Make an authenticated request to the UniFi API.
@@ -264,9 +263,15 @@ class UnifiClient:
                 text = await resp.text()
 
                 if resp.status == 401:
-                    # Session expired, try to re-authenticate
+                    # Session expired, try to re-authenticate (once only)
+                    if _reauth_attempt:
+                        raise UnifiAuthError(
+                            "Re-authentication failed. Check credentials or account status."
+                        )
                     await self._authenticate()
-                    return await self.request(method, endpoint, payload)
+                    return await self.request(
+                        method, endpoint, payload, _reauth_attempt=True
+                    )
 
                 if resp.status >= 400:
                     raise UnifiClientError(f"API error {resp.status}: {text}")