iobroker.toyota 0.2.5 → 0.3.0

package/io-package.json

@@ -1,8 +1,16 @@
 {
   "common": {
     "name": "toyota",
-    "version": "0.2.5",
+    "version": "0.3.0",
     "news": {
+      "0.3.0": {
+        "en": "Fix Login and add Eletric Car data",
+        "de": "Login gefixt und elektrische Fahrzeugdaten hinzugefügt"
+      },
+      "0.2.6": {
+        "en": "Skip endpoints that are not available",
+        "de": "Überspringen von Endpunkten, die nicht verfügbar sind"
+      },
       "0.2.5": {
         "en": "Add option to disable trip fetching",
         "de": "Option zum Deaktivieren des Abrufs von Trips hinzugefügt"

package/lib/tools.js

@@ -64,7 +64,7 @@ async function translateYandex(text, targetLang, apiKey) {
     }
     throw new Error('Invalid response for translate request');
   } catch (e) {
-    throw new Error(`Could not translate to "${targetLang}": ${e}`);
+    throw new Error(`Could not translate to "${targetLang}": ${e}`, { cause: e });
   }
 }
 
@@ -87,9 +87,9 @@ async function translateGoogle(text, targetLang) {
     throw new Error('Invalid response for translate request');
   } catch (e) {
     if (e.response && e.response.status === 429) {
-      throw new Error(`Could not translate to "${targetLang}": Rate-limited by Google Translate`);
+      throw new Error(`Could not translate to "${targetLang}": Rate-limited by Google Translate`, { cause: e });
     } else {
-      throw new Error(`Could not translate to "${targetLang}": ${e}`);
+      throw new Error(`Could not translate to "${targetLang}": ${e}`, { cause: e });
     }
   }
 }

package/main.js

@@ -13,6 +13,9 @@ const qs = require('qs');
 const tough = require('tough-cookie');
 const { HttpsCookieAgent } = require('http-cookie-agent/http');
 const jwt = require('jsonwebtoken');
+const { v4: uuidv4 } = require('uuid');
+const crypto = require('crypto');
+
 class Toyota extends utils.Adapter {
   /**
    * @param {Partial<utils.AdapterOptions>} [options={}]
@@ -30,6 +33,7 @@ class Toyota extends utils.Adapter {
     this.token = null;
     this.uuid = null;
     this.session = {};
+    this.blockedEndpoints = {};
     this.cookieJar = new tough.CookieJar();
     this.requestClient = axios.create({
       withCredentials: true,
@@ -42,8 +46,10 @@ class Toyota extends utils.Adapter {
     this.updateInterval = null;
     this.reLoginTimeout = null;
     this.refreshTokenTimeout = null;
-    this.hostName = 'myt-agg.toyota-europe.com';
     this.brand = 'T';
+    // Aligned with MyToyota APK 2.23.0
+    this.CLIENT_VERSION = '2.23.0';
+    this.API_VERSION = 'resource=2.1, protocol=1.0';
   }
 
   /**
@@ -64,7 +70,6 @@ class Toyota extends utils.Adapter {
     if (this.config.type === 'lexus') {
       this.log.info('Login to Lexus');
       this.brand = 'L';
-      this.hostName = 'lexuslink-agg.toyota-europe.com';
     }
     if (!this.config.username || !this.config.password) {
       this.log.error('No username or password set');
@@ -91,6 +96,7 @@ class Toyota extends utils.Adapter {
       }, 3500 * 1000);
     }
   }
+
   async login() {
     this.log.info('Login to Toyota');
     const firstResponse = await this.requestClient({
@@ -100,7 +106,7 @@ class Toyota extends utils.Adapter {
       headers: {
         'x-osname': 'iOS',
         'x-brand': this.brand,
-        accept: '*/*',
+        accept: 'application/json',
         'x-channel': 'ONEAPP',
         brand: this.brand,
         'x-region': 'EU',
@@ -110,8 +116,8 @@ class Toyota extends utils.Adapter {
         'accept-language': 'de-DE,de;q=0.9',
         region: 'EU',
         'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
-        'x-appversion': '2.4.2',
+        'accept-api-version': this.API_VERSION,
+        'x-appversion': this.CLIENT_VERSION,
         Cookie: 'route=e8e8b55de08efd3c4b34265c0069d319',
       },
     })
@@ -126,6 +132,7 @@ class Toyota extends utils.Adapter {
           this.log.error(JSON.stringify(error.response.data));
         }
       });
+
     const secondResponse = await this.requestClient({
       method: 'post',
       maxBodyLength: Infinity,
@@ -142,10 +149,10 @@ class Toyota extends utils.Adapter {
         'x-brand': this.brand,
         'accept-language': 'de-DE,de;q=0.9',
         'x-correlationid': 'BDD02A22-CD76-4877-90A9-196EDA5DC695',
-        'x-appversion': '2.4.2',
-        accept: '*/*',
+        'x-appversion': this.CLIENT_VERSION,
+        accept: 'application/json',
         'content-type': 'application/json',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
+        'accept-api-version': this.API_VERSION,
       },
       data: firstResponse,
     })
@@ -160,10 +167,13 @@ class Toyota extends utils.Adapter {
           this.log.error(JSON.stringify(error.response.data));
         }
       });
+
     if (!secondResponse || !secondResponse.callbacks) {
       this.log.error('No Second Response');
+      return;
     }
     secondResponse.callbacks[0].input[0].value = this.config.username;
+
     const thirdResponse = await this.requestClient({
       method: 'post',
       maxBodyLength: Infinity,
@@ -180,10 +190,10 @@ class Toyota extends utils.Adapter {
         'x-brand': this.brand,
         'accept-language': 'de-DE,de;q=0.9',
         'x-correlationid': 'BDD02A22-CD76-4877-90A9-196EDA5DC695',
-        'x-appversion': '2.4.2',
-        accept: '*/*',
+        'x-appversion': this.CLIENT_VERSION,
+        accept: 'application/json',
         'content-type': 'application/json',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
+        'accept-api-version': this.API_VERSION,
       },
       data: secondResponse,
     })
@@ -198,12 +208,15 @@ class Toyota extends utils.Adapter {
           this.log.error(JSON.stringify(error.response.data));
         }
       });
+
     if (!thirdResponse || !thirdResponse.callbacks) {
       this.log.error('No Third Response');
+      return;
     }
 
     thirdResponse.callbacks[0].input[0].value = this.config.password;
-    const idToken = await this.requestClient({
+
+    await this.requestClient({
       method: 'post',
       maxBodyLength: Infinity,
       url: 'https://b2c-login.toyota-europe.com/json/realms/root/realms/tme/authenticate?authIndexType=service&authIndexValue=oneapp',
@@ -219,10 +232,10 @@ class Toyota extends utils.Adapter {
         'x-brand': this.brand,
         'accept-language': 'de-DE,de;q=0.9',
         'x-correlationid': 'BDD02A22-CD76-4877-90A9-196EDA5DC695',
-        'x-appversion': '2.4.2',
-        accept: '*/*',
+        'x-appversion': this.CLIENT_VERSION,
+        accept: 'application/json',
         'content-type': 'application/json',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
+        'accept-api-version': this.API_VERSION,
       },
       data: thirdResponse,
     })
@@ -238,10 +251,21 @@ class Toyota extends utils.Adapter {
         }
       });
 
+    // PKCE S256: random 64-byte verifier, base64url(SHA-256(verifier)) as challenge (APK 2.23.0)
+    // Keep verifier local so concurrent login() calls do not overwrite each other.
+    const codeVerifier = crypto.randomBytes(64).toString('base64url');
+    const codeChallenge = crypto.createHash('sha256').update(codeVerifier).digest('base64url');
+    const authorizeUrl =
+      'https://b2c-login.toyota-europe.com/oauth2/realms/root/realms/tme/authorize' +
+      '?response_type=code&realm=tme&redirect_uri=com.toyota.oneapp:/oauth2Callback' +
+      '&client_id=oneapp&scope=' +
+      encodeURIComponent('openid profile write') +
+      '&code_challenge_method=S256&code_challenge=' +
+      codeChallenge;
     const tokenResponse = await this.requestClient({
       method: 'get',
       maxBodyLength: Infinity,
-      url: 'https://b2c-login.toyota-europe.com/oauth2/realms/root/realms/tme/authorize?response_type=code&realm=tme&redirect_uri=com.toyota.oneapp:/oauth2Callback&client_id=oneapp&scope=openid%20profile%20write&code_challenge_method=S256&code_challenge=Bx88SxgIEnvxrsobwijnUlzg3rrb-zNV4wzDlndWFVc',
+      url: authorizeUrl,
       headers: {
         'x-osname': 'iOS',
         'x-brand': this.brand,
@@ -255,8 +279,8 @@ class Toyota extends utils.Adapter {
         'accept-language': 'de-DE,de;q=0.9',
         region: 'EU',
         'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
-        'x-appversion': '2.4.2',
+        'accept-api-version': this.API_VERSION,
+        'x-appversion': this.CLIENT_VERSION,
       },
     })
       .then((res) => {
@@ -271,10 +295,12 @@ class Toyota extends utils.Adapter {
         this.log.error(error);
         error.response && this.log.error(JSON.stringify(error.response.data));
       });
+
     if (!tokenResponse || !tokenResponse.code) {
       this.log.error('No Token Response');
       return;
     }
+
     this.log.info('Start token exchange');
     await this.requestClient({
       method: 'post',
@@ -293,16 +319,16 @@ class Toyota extends utils.Adapter {
         authorization: 'Basic b25lYXBwOm9uZWFwcA==',
         'accept-language': 'de-DE,de;q=0.9',
         'x-correlationid': 'E422A08C-1A04-415E-BB08-2386EE06CF90',
-        'x-appversion': '2.4.2',
+        'x-appversion': this.CLIENT_VERSION,
         accept: '*/*',
         'content-type': 'application/x-www-form-urlencoded',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
+        'accept-api-version': this.API_VERSION,
       },
       data: {
         grant_type: 'authorization_code',
         redirect_uri: 'com.toyota.oneapp:/oauth2Callback',
         code: tokenResponse.code,
-        code_verifier: 'tsY5-j-ZLYxNVnmz6wmJ9PTm2Ly7QpfXcQnhyU09Pog',
+        code_verifier: codeVerifier,
         client_id: 'oneapp',
       },
     })
@@ -325,6 +351,7 @@ class Toyota extends utils.Adapter {
         }
       });
   }
+
   async refreshToken() {
     await this.requestClient({
       method: 'post',
@@ -343,16 +370,15 @@ class Toyota extends utils.Adapter {
         authorization: 'Basic b25lYXBwOm9uZWFwcA==',
         'accept-language': 'de-DE,de;q=0.9',
         'x-correlationid': 'E422A08C-1A04-415E-BB08-2386EE06CF90',
-        'x-appversion': '2.4.2',
+        'x-appversion': this.CLIENT_VERSION,
         accept: '*/*',
         'content-type': 'application/x-www-form-urlencoded',
-        'accept-api-version': 'resource=2.0, protocol=1.0',
+        'accept-api-version': this.API_VERSION,
       },
       data: {
         grant_type: 'refresh_token',
         redirect_uri: 'com.toyota.oneapp:/oauth2Callback',
         client_id: 'oneapp',
-        code_verifier: 'plain',
         refresh_token: this.session.refresh_token,
       },
     })
@@ -368,6 +394,94 @@ class Toyota extends utils.Adapter {
         }
       });
   }
+
+  generate_hmac_sha256(key, message) {
+    return crypto.createHmac('sha256', key).update(message).digest('hex');
+  }
+
+  /**
+   * Build the standard set of headers used for all ctpa-oneapi calls.
+   * @param {string} [vin] optional vin header for vehicle-scoped endpoints
+   */
+  buildApiHeaders(vin) {
+    const headers = {
+      'x-appbrand': this.brand,
+      'x-device-timezone': 'CEST',
+      'x-osname': 'iOS',
+      guid: this.uuid,
+      'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
+      'x-guid': this.uuid,
+      region: 'EU',
+      brand: this.brand,
+      'x-channel': 'ONEAPP',
+      'x-osversion': '16.7.2',
+      'x-locale': 'de-DE',
+      'x-brand': this.brand,
+      authorization: 'Bearer ' + this.session.access_token,
+      'accept-language': 'de-DE,de;q=0.9',
+      accept: '*/*',
+      'x-user-region': 'DE',
+      'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      API_KEY: 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      // x-client-ref: HMAC-SHA256 with the app version as key over the user GUID (APK 2.23.0)
+      'x-client-ref': this.generate_hmac_sha256(this.CLIENT_VERSION, this.uuid),
+      'x-correlationid': uuidv4(),
+      'x-appversion': this.CLIENT_VERSION,
+      'x-region': 'EU',
+    };
+    if (vin) {
+      headers.vin = vin;
+    }
+    return headers;
+  }
+
+  /**
+   * Wake the car and trigger a fresh vehicle/climate/EV status pull.
+   * After ~20s the regular updateDevices() loop reads the now-current data.
+   * @param {string} vin
+   */
+  async forceRefresh(vin) {
+    const refreshEndpoints = [
+      { name: 'status', url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/remote/status' },
+      {
+        name: 'climate',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/remote/refresh-climate-status',
+      },
+      {
+        name: 'electric',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/electric/realtime-status',
+      },
+    ];
+    for (const ep of refreshEndpoints) {
+      await this.requestClient({
+        method: 'post',
+        url: ep.url,
+        headers: this.buildApiHeaders(vin),
+      })
+        .then((res) => {
+          this.log.debug(`force-refresh ${ep.name}: ${JSON.stringify(res.data)}`);
+        })
+        .catch((error) => {
+          // Non-EV cars typically answer the electric realtime-status request with 404 or 422 - log quietly.
+          // 401/403 must NOT be swallowed: they signal an auth problem and have to surface like for any other endpoint.
+          if (
+            ep.name === 'electric' &&
+            error.response &&
+            (error.response.status === 404 || error.response.status === 422)
+          ) {
+            this.log.debug(`force-refresh electric not supported (${error.response.status})`);
+            return;
+          }
+          this.log.warn(`force-refresh ${ep.name} failed: ${error.message}`);
+          error.response && this.log.debug(JSON.stringify(error.response.data));
+        });
+    }
+    this.refreshTimeout && clearTimeout(this.refreshTimeout);
+    this.refreshTimeout = setTimeout(async () => {
+      await this.updateDevices();
+    }, 20 * 1000);
+  }
+
   async getDeviceList() {
     await this.requestClient({
       method: 'get',
@@ -380,7 +494,6 @@ class Toyota extends utils.Adapter {
         guid: this.uuid,
         'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
         'x-guid': this.uuid,
-        'x-region': 'EU',
         region: 'EU',
         brand: this.brand,
         'x-channel': 'ONEAPP',
@@ -389,11 +502,15 @@ class Toyota extends utils.Adapter {
         'x-brand': this.brand,
         authorization: 'Bearer ' + this.session.access_token,
         'accept-language': 'de-DE,de;q=0.9',
-        'x-correlationid': '7683DC30-D4DA-4FEC-850E-F3557A7DCEF4',
-        'x-appversion': '2.4.2',
         accept: '*/*',
         'x-user-region': 'DE',
         'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+        API_KEY: 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+        // x-client-ref: HMAC-SHA256 with the app version as key over the user GUID (APK 2.23.0)
+        'x-client-ref': this.generate_hmac_sha256(this.CLIENT_VERSION, this.uuid),
+        'x-correlationid': uuidv4(),
+        'x-appversion': this.CLIENT_VERSION,
+        'x-region': 'EU',
       },
     })
       .then(async (res) => {
@@ -436,7 +553,8 @@ class Toyota extends utils.Adapter {
 
           const remoteArray = [
             { command: 'climate-control', name: 'True = Start, False = Stop' },
-            { command: 'refresh', name: 'Refresh Status' },
+            { command: 'refresh', name: 'Re-poll cached status from cloud' },
+            { command: 'force-refresh', name: 'Wake car and request fresh status, climate and EV data' },
             { command: 'door', name: 'True = Lock, False = Unlock' },
           ];
           for (const remote of remoteArray) {
@@ -462,6 +580,8 @@ class Toyota extends utils.Adapter {
         error.response && this.log.error(JSON.stringify(error.response.data));
       });
   }
+
+  // ...existing code...
   async cleanOldObjects(vin) {
     const remoteState = await this.getObjectAsync(vin + '.addtionalInfo');
     if (remoteState) {
@@ -469,11 +589,12 @@ class Toyota extends utils.Adapter {
       await this.delObjectAsync(vin, { recursive: true });
     }
   }
+
   async updateDevices() {
     const statusArray = [
       {
         path: 'status',
-        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/status',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/vehicle/status',
         desc: 'Status of the car',
       },
       {
@@ -483,9 +604,24 @@ class Toyota extends utils.Adapter {
       },
       {
         path: 'climate',
-        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/climate-status',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/vehicle/climate-status',
         desc: 'Climate of the car',
       },
+      {
+        path: 'electric',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/electric/status',
+        desc: 'Electric/PHEV status (battery, charging, range)',
+      },
+      {
+        path: 'location',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/location',
+        desc: 'Current vehicle location',
+      },
+      {
+        path: 'health',
+        url: 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/vehiclehealth/status',
+        desc: 'Vehicle health and service warnings',
+      },
     ];
 
     const headers = {
@@ -495,7 +631,6 @@ class Toyota extends utils.Adapter {
       guid: this.uuid,
       'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
       'x-guid': this.uuid,
-      'x-region': 'EU',
       region: 'EU',
       brand: this.brand,
       'x-channel': 'ONEAPP',
@@ -504,14 +639,21 @@ class Toyota extends utils.Adapter {
       'x-brand': this.brand,
       authorization: 'Bearer ' + this.session.access_token,
       'accept-language': 'de-DE,de;q=0.9',
-      'x-correlationid': '7683DC30-D4DA-4FEC-850E-F3557A7DCEF4',
-      'x-appversion': '2.4.2',
       accept: '*/*',
       'x-user-region': 'DE',
       'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      API_KEY: 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      // Updated client-ref generation using new key
+      'x-client-ref': this.generate_hmac_sha256(this.CLIENT_VERSION, this.uuid),
+      'x-correlationid': uuidv4(),
+      'x-appversion': this.CLIENT_VERSION,
+      'x-region': 'EU',
     };
     for (const vin of this.deviceArray) {
-      statusArray.forEach(async (element) => {
+      for (const element of statusArray) {
+        if (this.blockedEndpoints[vin] && this.blockedEndpoints[vin].includes(element.path)) {
+          continue;
+        }
         const url = element.url.replace('$vin', vin);
         headers.vin = vin;
 
@@ -548,12 +690,19 @@ class Toyota extends utils.Adapter {
 
                 return;
               }
+              if (error.response.status >= 500) {
+                this.log.warn(JSON.stringify(error.response.data));
+                this.log.info(element.path + ' receive 500 error. Skip until restart');
+                this.blockedEndpoints[vin] = this.blockedEndpoints[vin] || [];
+                this.blockedEndpoints[vin].push(element.path);
+                return;
+              }
             }
             this.log.error(url);
             this.log.error(error);
             error.response && this.log.error(JSON.stringify(error.response.data));
           });
-      });
+      }
     }
   }
 
@@ -572,11 +721,9 @@ class Toyota extends utils.Adapter {
       'x-appbrand': this.brand,
       'x-device-timezone': 'CEST',
       'x-osname': 'iOS',
-
       guid: this.uuid,
       'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
       'x-guid': this.uuid,
-      'x-region': 'EU',
       region: 'EU',
       brand: this.brand,
       'x-channel': 'ONEAPP',
@@ -585,11 +732,15 @@ class Toyota extends utils.Adapter {
       'x-brand': this.brand,
       authorization: 'Bearer ' + this.session.access_token,
       'accept-language': 'de-DE,de;q=0.9',
-      'x-correlationid': '7683DC30-D4DA-4FEC-850E-F3557A7DCEF4',
-      'x-appversion': '2.4.2',
       accept: '*/*',
       'x-user-region': 'DE',
       'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      API_KEY: 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+      // Updated client-ref generation using new key
+      'x-client-ref': this.generate_hmac_sha256(this.CLIENT_VERSION, this.uuid),
+      'x-correlationid': uuidv4(),
+      'x-appversion': this.CLIENT_VERSION,
+      'x-region': 'EU',
     };
     for (const vin of this.deviceArray) {
       statusArray.forEach(async (element) => {
@@ -607,6 +758,12 @@ class Toyota extends utils.Adapter {
               return;
             }
             const data = res.data.payload;
+            for (const trip of data.trips) {
+              delete trip.route;
+            }
+            for (const summary of data.summary) {
+              delete summary.histograms;
+            }
             this.json2iob.parse(vin + '.' + element.path, data, {
               forceIndex: true,
               channelName: element.desc,
@@ -632,6 +789,7 @@ class Toyota extends utils.Adapter {
       });
     }
   }
+
   /**
    * Is called when adapter shuts down - callback has to be called under any circumstances!
    * @param {() => void} callback
@@ -645,7 +803,7 @@ class Toyota extends utils.Adapter {
       this.updateInterval && clearInterval(this.updateInterval);
       this.refreshTokenInterval && clearInterval(this.refreshTokenInterval);
       callback();
-    } catch (e) {
+    } catch {
       callback();
     }
   }
@@ -667,10 +825,14 @@ class Toyota extends utils.Adapter {
           this.updateDevices();
           return;
         }
+        if (path === 'force-refresh') {
+          await this.forceRefresh(deviceId);
+          return;
+        }
         const data = {};
         let url = 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/command';
         if (path === 'climate-control') {
-          url = 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v1/global/remote/climate-control';
+          url = 'https://ctpa-oneapi.tceu-ctp-prd.toyotaconnectedeurope.io/v2/remote/climate-control';
           data.command = state.val ? 'engine-start' : 'engine-stop';
         }
         if (path === 'door') {
@@ -686,25 +848,27 @@ class Toyota extends utils.Adapter {
             'x-appbrand': this.brand,
             'x-device-timezone': 'CEST',
             'x-osname': 'iOS',
-            guid: '091a3196-0d1d-4ba6-92c4-d44967cd6567',
+            guid: this.uuid,
             'user-agent': 'Toyota/134 CFNetwork/1410.0.3 Darwin/22.6.0',
-            'x-guid': '091a3196-0d1d-4ba6-92c4-d44967cd6567',
-            'x-region': 'EU',
+            'x-guid': this.uuid,
             region: 'EU',
             brand: this.brand,
             'x-channel': 'ONEAPP',
-            vin: 'JTMGBRFV90D151864',
+            vin: deviceId,
             'x-osversion': '16.7.2',
             'x-locale': 'de-DE',
             'x-brand': this.brand,
             authorization: 'Bearer ' + this.session.access_token,
             'accept-language': 'de-DE,de;q=0.9',
-            'x-correlationid': 'D7F048C1-F0A1-4920-AA37-264C8A1FB4A3',
-            'x-appversion': '2.4.2',
             accept: '*/*',
-            'content-type': 'application/json',
-            'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
             'x-user-region': 'DE',
+            'x-api-key': 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+            API_KEY: 'tTZipv6liF74PwMfk9Ed68AQ0bISswwf3iHQdqcF',
+            // Updated client-ref generation using new key
+            'x-client-ref': this.generate_hmac_sha256(this.CLIENT_VERSION, this.uuid),
+            'x-correlationid': uuidv4(),
+            'x-appversion': this.CLIENT_VERSION,
+            'x-region': 'EU',
           },
           data: data,
         })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iobroker.toyota",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "description": "Adapter for myT Toyota/Lexus App",
   "author": {
     "name": "TA2k",
@@ -23,21 +23,27 @@
     "url": "https://github.com/TA2k/ioBroker.toyota"
   },
   "dependencies": {
-    "@iobroker/adapter-core": "^3.0.4",
-    "axios": "^1.6.5",
-    "http-cookie-agent": "^5.0.4",
-    "json2iob": "^2.6.6",
-    "jsonwebtoken": "^9.0.2",
-    "qs": "^6.11.2",
-    "tough-cookie": "^4.1.3"
+    "@iobroker/adapter-core": "^3.4.1",
+    "axios": "^1.18.0",
+    "http-cookie-agent": "^8.0.0",
+    "json2iob": "^2.6.25",
+    "jsonwebtoken": "^9.0.3",
+    "qs": "^6.15.2",
+    "tough-cookie": "^6.0.1",
+    "uuid": "^14.0.1"
   },
   "devDependencies": {
-    "@iobroker/testing": "^4.1.0",
-    "@types/node": "^20.11.4",
-    "eslint": "^8.56.0",
-    "typescript": "~5.3.3"
+    "@eslint/js": "^10.0.1",
+    "@iobroker/testing": "^5.2.2",
+    "@types/node": "^26.0.0",
+    "eslint": "^10.5.0",
+    "globals": "^17.6.0",
+    "typescript": "~6.0.3"
   },
   "main": "main.js",
+  "engines": {
+    "node": ">=22.13.0"
+  },
   "files": [
     "admin{,/!(src)/**}/!(tsconfig|tsconfig.*).json",
     "admin{,/!(src)/**}/*.{html,css,png,svg,jpg,js}",
@@ -60,4 +66,5 @@
     "url": "https://github.com/TA2k/ioBroker.toyota/issues"
   },
   "readmeFilename": "README.md"
+
 }