homebridge-melcloud-control 4.0.0-beta.31 → 4.0.0-beta.310

package/src/melcloudhometoken.js

@@ -0,0 +1,179 @@
+import axios from 'axios';
+import crypto from 'crypto';
+import { wrapper } from 'axios-cookiejar-support';
+import { CookieJar } from 'tough-cookie';
+import EventEmitter from 'events';
+
+const MOBILE_USER_AGENT = 'MonitorAndControl.App.Mobile/35 CFNetwork/3860.100.1 Darwin/25.0.0';
+const CLIENT_ID = 'homemobile';
+const REDIRECT_URI = 'melcloudhome://';
+const SCOPE = 'openid profile email offline_access IdentityServerApi';
+const TOKEN_ENDPOINT = 'https://auth.melcloudhome.com/connect/token';
+const AUTHORIZE_ENDPOINT = 'https://auth.melcloudhome.com/connect/authorize';
+
+class MelCloudHomeToken extends EventEmitter {
+    constructor(config) {
+        super();
+        this.user = config.user;
+        this.passwd = config.passwd;
+        this.logWarn = config.logWarn;
+        this.logError = config.logError;
+        
+        const jar = new CookieJar();
+        this.client = wrapper(axios.create({ jar, withCredentials: true }));
+        this.client.defaults.headers['User-Agent'] = MOBILE_USER_AGENT;
+    }
+
+    generatePKCE() {
+        const verifier = crypto.randomBytes(32).toString('base64url');
+        const challenge = crypto.createHash('sha256').update(verifier).digest('base64url');
+        return { verifier, challenge };
+    }
+
+    generateState() {
+        return crypto.randomBytes(32).toString('hex');
+    }
+
+    async getLoginPage(authUrl) {
+        const res = await this.client.get(authUrl, { maxRedirects: 10 });
+        return { url: res.request.res.responseUrl };
+    }
+
+    async extractCodeFromHtml(html, cookies = '') {
+        try {
+            // Code w URL
+            const urlMatch = html.match(/[?&]code=([^&]+)/);
+            if (urlMatch) {
+                return urlMatch[1];
+            }
+
+            // Hidden form (form_post)
+            const formCodeMatch = html.match(/name="code"\s+value="([^"]+)"/);
+            const formStateMatch = html.match(/name="state"\s+value="([^"]+)"/);
+            const formActionMatch = html.match(/action="([^"]+)"/);
+
+            if (formCodeMatch && formStateMatch && formActionMatch) {
+                const code = await this.submitFormPost(
+                    formActionMatch[1],
+                    formCodeMatch[1],
+                    formStateMatch[1],
+                    cookies
+                );
+                return code;
+            }
+
+            // melcloudhome:// w body
+            const bodyCodeMatch = html.match(/melcloudhome:\/\/[^"'\s]*[?&]code=([^&"'\s]+)/);
+            if (bodyCodeMatch) {
+                return bodyCodeMatch[1];
+            }
+
+            // data-url (np. z błędnej strony 500)
+            const dataUrlMatch = html.match(/data-url="[^"]*code=([^&"']+)/);
+            if (dataUrlMatch) {
+                return dataUrlMatch[1];
+            }
+
+            console.warn('Authorization code not found in HTML response');
+            return null;
+        } catch (err) {
+            console.error('extractCodeFromHtml error:', err);
+            return null;
+        }
+    }
+
+    async getTokens(code, codeVerifier) {
+        try {
+            const data = new URLSearchParams({
+                grant_type: 'authorization_code',
+                code: code,
+                redirect_uri: REDIRECT_URI,
+                client_id: CLIENT_ID,
+                code_verifier: codeVerifier,
+            });
+
+            const res = await axios({
+                method: 'POST',
+                url: TOKEN_ENDPOINT,
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Content-Length': data.toString().length
+                },
+                data: data
+            });
+            console.log(res);
+            if (res.status !== 200) {
+                throw new Error(`Token exchange failed: ${res.status} ${res.statusText}`);
+            }
+
+            return res.data;
+        } catch (error) {
+            console.error('Failed to obtain OAuth tokens:', error);
+            throw error;
+        }
+    }
+
+    async buildAuthorizeUrl() {
+        try {
+            const pkce = this.generatePKCE();
+            const state = this.generateState();
+            const authUrl = new URL(AUTHORIZE_ENDPOINT);
+            authUrl.searchParams.set('client_id', CLIENT_ID);
+            authUrl.searchParams.set('redirect_uri', REDIRECT_URI);
+            authUrl.searchParams.set('response_type', 'code');
+            authUrl.searchParams.set('scope', SCOPE);
+            authUrl.searchParams.set('code_challenge', pkce.challenge);
+            authUrl.searchParams.set('code_challenge_method', 'S256');
+            authUrl.searchParams.set('state', state);
+
+            const loginPage = await this.getLoginPage(authUrl.toString());
+            const data = { codeVerifier: pkce.verifier, url: loginPage.url }
+            return data;
+        } catch (error) {
+            console.error('Failed to obtain OAuth link:', error);
+            throw error;
+        }
+    }
+
+    async loginToMelCloudHome(url) {
+        try {
+            const form = new URLSearchParams();
+            form.append('username[email]', this.user);
+            form.append('password[password]', this.passwd);
+
+            const response = await axios({
+                method: 'POST',
+                baseURL: url,
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded'
+                },
+                data: form,
+                timeout: 10000
+            });
+
+            this.emit('warn', `No cookie returned from login. Response headers: ${JSON.stringify(response)}`);
+
+            if (response.status !== 200) {
+                if (this.logError) this.emit('error', `Login failed with status code: ${response.status}`);
+                return null;
+            }
+
+            const cookie = response.headers['set-cookie'];
+            if (!cookie) {
+                if (this.logWarn) this.emit('warn', `No cookie returned from login. Response headers: ${JSON.stringify(response.headers)}`);
+                return null;
+            }
+
+            return cookie;
+        } catch (error) {
+            throw new Error(`Login to MELCloud Home error: ${error}`);
+        }
+    }
+}
+
+export default MelCloudHomeToken;
+
+
+
+
+