homebridge-melcloud-control 4.4.1-beta.26 → 4.4.1-beta.27

package/package.json

@@ -1,7 +1,7 @@
 {
   "displayName": "MELCloud Control",
   "name": "homebridge-melcloud-control",
-  "version": "4.4.1-beta.26",
+  "version": "4.4.1-beta.27",
   "description": "Homebridge plugin to control Mitsubishi Air Conditioner, Heat Pump and Energy Recovery Ventilation.",
   "license": "MIT",
   "author": "grzegorz914",

package/src/melcloudhome.js

@@ -33,8 +33,6 @@ class MelCloudHome extends EventEmitter {
         this.socketConnected = false;
         this.heartbeat = null;
 
-        this.cookies = [];
-
         this.functions = new Functions(this.logWarn, this.logError, this.logDebug)
             .on('warn', warn => this.emit('warn', warn))
             .on('error', error => this.emit('error', error))
@@ -449,53 +447,93 @@ class MelCloudHome extends EventEmitter {
     }
 
 
-    async axiosRequest(url, options, jar, maxRedirects = 10) {
+    async axiosRequest(url, options, jar, maxRedirects = 15) {
         let currentUrl = url;
+        let previousUrl = null;
+        let method = options.method || 'GET';
+        let body = options.body;
 
         for (let i = 0; i < maxRedirects; i++) {
+            const cookieHeader = jar.headerFor(currentUrl);
+
+            const headers = {
+                'User-Agent': options.headers?.['User-Agent'],
+                'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+                'Accept-Language': 'en-US,en;q=0.9',
+                'Accept-Encoding': 'identity',
+                ...(previousUrl ? { Referer: previousUrl } : {}),
+                ...(cookieHeader ? { Cookie: cookieHeader } : {}),
+                ...options.headers,
+            };
+
             const response = await axios({
                 url: currentUrl,
-                method: options.method || 'GET',
-                data: options.body,
-                headers: {
-                    ...options.headers,
-                    ...(jar.headerFor(currentUrl) && { Cookie: jar.headerFor(currentUrl) }),
-                },
-                validateStatus: () => true,
+                method,
+                data: body,
+                headers,
                 maxRedirects: 0,
+                validateStatus: () => true,
                 responseType: 'text',
             });
 
             jar.addFromHeader(response.headers['set-cookie'], currentUrl);
 
+            /* ========= HTTP REDIRECT ========= */
             if ([301, 302, 303, 307, 308].includes(response.status)) {
                 const location = response.headers.location;
                 if (!location) break;
 
+                // SUCCESS: app redirect
                 if (location.startsWith('melcloudhome://')) {
                     return { url: location, data: response.data };
                 }
 
+                previousUrl = currentUrl;
                 currentUrl = location.startsWith('http')
                     ? location
                     : new URL(location, currentUrl).toString();
 
-                options.method = 'GET';
-                options.body = undefined;
+                method = 'GET';
+                body = undefined;
                 continue;
             }
 
-            return { url: currentUrl, data: response.data };
+            /* ========= META REFRESH ========= */
+            const metaMatch = response.data?.match(
+                /<meta[^>]+http-equiv=["']?refresh["']?[^>]+content=["']?\d+;\s*url=([^"'>]+)["']?/i
+            );
+
+            if (metaMatch) {
+                const redirectPath = metaMatch[1]
+                    .replace(/&amp;/g, '&')
+                    .replace(/&#x2F;/g, '/');
+
+                previousUrl = currentUrl;
+                currentUrl = redirectPath.startsWith('http')
+                    ? redirectPath
+                    : new URL(redirectPath, currentUrl).toString();
+
+                method = 'GET';
+                body = undefined;
+                continue;
+            }
+
+            /* ========= FINAL RESPONSE ========= */
+            return {
+                url: currentUrl,
+                data: response.data,
+                headers: response.headers,
+            };
         }
 
-        throw new Error('Too many redirects');
+        throw new Error('OAuth flow aborted: too many redirects');
     }
 
+
     async loginWithCredentials(email, password) {
         const jar = new CookieJar();
 
-        const userAgent =
-            'Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Mobile Safari/604.1';
+        const userAgent = 'Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Mobile Safari/604.1';
 
         const codeVerifier = crypto.randomBytes(32).toString('base64url');
         const codeChallenge = crypto
@@ -503,8 +541,7 @@ class MelCloudHome extends EventEmitter {
             .update(codeVerifier)
             .digest('base64url');
 
-        const authUrl =
-            'https://auth.melcloudhome.com/connect/authorize?' +
+        const authUrl = 'https://auth.melcloudhome.com/connect/authorize?' +
             new URLSearchParams({
                 client_id: 'homemobile',
                 redirect_uri: 'melcloudhome://',
@@ -519,9 +556,7 @@ class MelCloudHome extends EventEmitter {
             headers: { 'User-Agent': userAgent },
         }, jar);
 
-        const csrfMatch =
-            loginPage.data.match(/name="(_csrf|__RequestVerificationToken)".*?value="([^"]+)"/);
-
+        const csrfMatch = loginPage.data.match(/name="(_csrf|__RequestVerificationToken)".*?value="([^"]+)"/);
         if (!csrfMatch) throw new Error('CSRF token not found');
         const csrfToken = csrfMatch[2];
 
@@ -550,8 +585,7 @@ class MelCloudHome extends EventEmitter {
         if (!code) throw new Error('Authorization code missing');
 
         // STEP 3 – exchange token
-        const tokenResponse = await axios.post(
-            'https://auth.melcloudhome.com/connect/token',
+        const tokenResponse = await axios.post('https://auth.melcloudhome.com/connect/token',
             new URLSearchParams({
                 grant_type: 'authorization_code',
                 client_id: 'homemobile',