homebridge-melcloud-control 4.3.11-beta.11 → 4.3.11-beta.13

package/package.json

@@ -1,7 +1,7 @@
 {
   "displayName": "MELCloud Control",
   "name": "homebridge-melcloud-control",
-  "version": "4.3.11-beta.11",
+  "version": "4.3.11-beta.13",
   "description": "Homebridge plugin to control Mitsubishi Air Conditioner, Heat Pump and Energy Recovery Ventilation.",
   "license": "MIT",
   "author": "grzegorz914",
@@ -40,7 +40,10 @@
     "axios": "^1.13.2",
     "express": "^5.2.1",
     "puppeteer": "^24.32.0",
-    "ws": "^8.18.3"
+    "ws": "^8.18.3",
+    "axios-cookiejar-support": "^6.0.5",
+    "tough-cookie": "^6.0.0",
+    "jsdom": "^27.2.0"
   },
   "keywords": [
     "homebridge",

package/src/melcloudata.js

@@ -339,7 +339,6 @@ class MelCloudAta extends EventEmitter {
                     return;
             }
         } catch (error) {
-            //if (error.response?.status === 500) return true; // Return 500 for schedule hovewer working correct
             throw new Error(`Send data error: ${error.message}`);
         }
     }

package/src/melcloudatw.js

@@ -311,7 +311,6 @@ class MelCloudAtw extends EventEmitter {
                     return;
             }
         } catch (error) {
-            if (error.response?.status === 500) return true; // Return 500 for schedule hovewer working correct
             throw new Error(`Send data error: ${error.message}`);
         }
     }

package/src/melclouderv.js

@@ -315,7 +315,6 @@ class MelCloudErv extends EventEmitter {
                     return;
             }
         } catch (error) {
-            if (error.response?.status === 500) return true; // Return 500 for schedule hovewer working correct
             throw new Error(`Send data error: ${error.message}`);
         }
     }

package/src/melcloudhome.js

@@ -5,6 +5,7 @@ import { exec } from 'child_process';
 import { promisify } from 'util';
 import EventEmitter from 'events';
 import puppeteer from 'puppeteer';
+import { MELCloudHomeAuth } from "./melcloudhomeauth.js";
 import ImpulseGenerator from './impulsegenerator.js';
 import Functions from './functions.js';
 import { ApiUrlsHome, LanguageLocaleMap } from './constants.js';
@@ -267,7 +268,7 @@ class MelCloudHome extends EventEmitter {
         }
     }
 
-    async connect() {
+    async connect1() {
         if (this.logDebug) this.emit('debug', 'Connecting to MELCloud Home');
         const GLOBAL_TIMEOUT = 90000;
 
@@ -453,6 +454,31 @@ class MelCloudHome extends EventEmitter {
             }
         }
     }
+
+    async connect() {
+        if (this.logDebug) this.emit('debug', 'Connecting to MELCloud Home');
+        try {
+            const auth = new MELCloudHomeAuth();
+
+            await auth.login(this.user, this.passwd);
+
+            console.log("Logged in!");
+
+            const client = auth.getClient();
+
+            const ctx = await client.get("https://melcloudhome.com/api/user/context", {
+                headers: {
+                    Accept: "application/json",
+                    "x-csrf": "1",
+                    referer: "https://melcloudhome.com/dashboard",
+                },
+            });
+
+            console.log(ctx.data);
+        } catch (error) {
+            throw new Error(`Connect error: ${error.message}`);
+        }
+    }
 }
 
 export default MelCloudHome;

package/src/melcloudhomeauth.js

@@ -0,0 +1,180 @@
+import axios from "axios";
+import { wrapper } from "axios-cookiejar-support";
+import { CookieJar } from "tough-cookie";
+import { JSDOM } from "jsdom";
+
+const USER_AGENT =
+    "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36";
+
+const BASE_URL = "https://melcloudhome.com";
+const COGNITO_BASE =
+    "https://live-melcloudhome.auth.eu-west-1.amazoncognito.com";
+
+export class MELCloudHomeAuth {
+    constructor() {
+        this.jar = new CookieJar();
+        this.client = wrapper(
+            axios.create({
+                jar: this.jar,
+                timeout: 30000,
+                maxRedirects: 10,
+                headers: {
+                    "User-Agent": USER_AGENT,
+                    Accept:
+                        "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
+                    "Accept-Language": "en-US,en;q=0.9",
+                    "sec-ch-ua":
+                        '"Chromium";v="124", "Google Chrome";v="124", "Not A(Brand";v="99"',
+                    "sec-ch-ua-mobile": "?0",
+                    "sec-ch-ua-platform": '"macOS"',
+                },
+            })
+        );
+
+        this.authenticated = false;
+    }
+
+    //
+    // 1. Start OAuth login → redirected to AWS Cognito login page
+    //
+    async startLoginFlow() {
+        const resp = await this.client.get(`${BASE_URL}/bff/login`, {
+            params: { returnUrl: "/dashboard" },
+        });
+
+        const finalUrl = resp.request.res.responseUrl;
+
+        if (!finalUrl.includes("amazoncognito.com/login")) {
+            throw new Error(`Unexpected redirect: ${finalUrl}`);
+        }
+
+        const html = resp.data;
+        const csrf = this.extractCsrf(html);
+
+        if (!csrf) {
+            throw new Error("Failed to extract CSRF token.");
+        }
+
+        return { loginUrl: finalUrl, csrf };
+    }
+
+    //
+    // 2. Submit credentials to Cognito
+    //
+    async submitCredentials(loginUrl, csrf, username, password) {
+        const payload = new URLSearchParams({
+            _csrf: csrf,
+            username,
+            password,
+            cognitoAsfData: "",
+        });
+
+        const resp = await this.client.post(loginUrl, payload, {
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Origin: COGNITO_BASE,
+                Referer: loginUrl,
+            },
+            maxRedirects: 10,
+            validateStatus: () => true,
+        });
+
+        const finalUrl = resp.request.res.responseUrl;
+
+        if (finalUrl.includes("/error")) {
+            throw new Error("Authentication failed: error returned from Cognito");
+        }
+
+        if (finalUrl.includes("amazoncognito.com")) {
+            throw new Error("Authentication failed: invalid username or password");
+        }
+
+        // Success: redirected back to melcloudhome.com
+        if (finalUrl.includes("melcloudhome.com")) {
+            this.authenticated = true;
+            return true;
+        }
+
+        throw new Error(`Unexpected final redirect: ${finalUrl}`);
+    }
+
+    //
+    // 3. Validate session – equivalent to Python check_session()
+    //
+    async checkSession() {
+        if (!this.authenticated) return false;
+
+        try {
+            const resp = await this.client.get(`${BASE_URL}/api/user/context`, {
+                headers: {
+                    Accept: "application/json",
+                    "x-csrf": "1",
+                    referer: `${BASE_URL}/dashboard`,
+                },
+                validateStatus: () => true,
+            });
+
+            if (resp.status === 200) return true;
+            if (resp.status === 401) return false;
+
+            return false;
+        } catch {
+            return false;
+        }
+    }
+
+    //
+    // 4. Main login() method
+    //
+    async login(username, password) {
+        const step1 = await this.startLoginFlow();
+
+        await this.submitCredentials(
+            step1.loginUrl,
+            step1.csrf,
+            username,
+            password
+        );
+
+        // Wait for Blazor session init – same as Python sleep(3)
+        await new Promise((r) => setTimeout(r, 3000));
+
+        const ok = await this.checkSession();
+        if (!ok) throw new Error("Session not valid after login");
+
+        return true;
+    }
+
+    //
+    // Extract CSRF from Cognito HTML
+    //
+    extractCsrf(html) {
+        const dom = new JSDOM(html);
+        const input = dom.window.document.querySelector('input[name="_csrf"]');
+        return input?.value || null;
+    }
+
+    //
+    // Return axios instance for authenticated calls
+    //
+    getClient() {
+        if (!this.authenticated) {
+            throw new Error("Not authenticated. Call login() first.");
+        }
+        return this.client;
+    }
+
+    //
+    // Logout
+    //
+    async logout() {
+        try {
+            await this.client.get(`${BASE_URL}/bff/logout`);
+        } catch (_) { }
+
+        this.authenticated = false;
+    }
+}
+
+export default MELCloudHomeAuth;
+