homebridge-melcloud-control 4.0.0-beta.311 → 4.0.0-beta.313

package/package.json

@@ -1,7 +1,7 @@
 {
   "displayName": "MELCloud Control",
   "name": "homebridge-melcloud-control",
-  "version": "4.0.0-beta.311",
+  "version": "4.0.0-beta.313",
   "description": "Homebridge plugin to control Mitsubishi Air Conditioner, Heat Pump and Energy Recovery Ventilation.",
   "license": "MIT",
   "author": "grzegorz914",
@@ -42,7 +42,7 @@
     "puppeteer": "^24.26.1",
     "axios-cookiejar-support": "^6.0.4",
     "tough-cookie": "^6.0.0",
-    "cheerio": "^1.1.2"
+    "jsdom": "^27.0.1"
   },
   "keywords": [
     "homebridge",

package/src/melcloudhometoken.js

@@ -2,6 +2,7 @@ import axios from 'axios';
 import crypto from 'crypto';
 import { wrapper } from 'axios-cookiejar-support';
 import { CookieJar } from 'tough-cookie';
+import { JSDOM } from 'jsdom';
 import EventEmitter from 'events';
 
 const MOBILE_USER_AGENT = 'MonitorAndControl.App.Mobile/35 CFNetwork/3860.100.1 Darwin/25.0.0';
@@ -137,24 +138,47 @@ class MelCloudHomeToken extends EventEmitter {
 
     async loginToMelCloudHome(url) {
         try {
+            // Step 1: Pobierz stronę logowania, żeby uzyskać sesję + token _csrf
+            const getResp = await axios.get(url, {
+                headers: {
+                    'User-Agent': 'Mozilla/5.0',
+                    'Accept': 'text/html',
+                },
+                withCredentials: true,
+            });
+
+            const cookies = getResp.headers['set-cookie'] || [];
+            const dom = new JSDOM(getResp.data);
+            const csrf = dom.window.document.querySelector('input[name="_csrf"]')?.value;
+
+            if (!csrf) {
+                throw new Error('CSRF token not found');
+            }
+
+            // Step 2: Przygotuj dane logowania
             const form = new URLSearchParams();
             form.append('username', this.user);
             form.append('password', this.passwd);
+            form.append('cognitoAsfData', '');
+            form.append('_csrf', csrf);
 
-            const response = await axios({
-                method: 'POST',
-                baseURL: url,
+            // Step 3: Wyślij POST z danymi logowania
+            const postResp = await axios.post(url, form.toString(), {
                 headers: {
-                    'Content-Type': 'application/x-www-form-urlencoded'
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Cookie': cookies.join('; '),
+                    'Origin': 'https://auth.melcloudhome.com',
+                    'Referer': url,
+                    'User-Agent': 'Mozilla/5.0',
                 },
-                data: form.toString(),
-                timeout: 10000
+                maxRedirects: 0, // ważne, bo Cognito robi redirect po sukcesie
+                validateStatus: status => [200, 302, 400].includes(status),
             });
 
-            this.emit('warn', `No cookie returned from login. Response headers: ${JSON.stringify(response)}`);
+            this.emit('warn', `No cookie returned from login. Response headers: ${JSON.stringify(postResp)}`);
 
             if (response.status !== 200) {
-                if (this.logError) this.emit('error', `Login failed with status code: ${response.status}`);
+                if (this.logError) this.emit('error', `Login failed with status code: ${postResp.status}`);
                 return null;
             }