n8n-nodes-jygse-vw-weconnect 0.1.12 → 0.1.14

package/dist/nodes/VwWeConnect/VwWeConnect.node.js

@@ -179,8 +179,23 @@ async function vwLogin(context, email, password) {
     try {
         const traceId = generateTraceId();
         const nonce = generateNonce();
-        // Common headers used for all requests (matching WeConnect-python v0.60.9 exactly)
-        const commonHeaders = {
+        // Browser-like headers for initial authorization request
+        // The CARIAD BFF expects a browser-style request, not an API-style request
+        const browserHeaders = {
+            'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
+            'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8',
+            'Accept-Language': 'de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7',
+            'Accept-Encoding': 'gzip, deflate, br',
+            'Connection': 'keep-alive',
+            'Upgrade-Insecure-Requests': '1',
+            'Sec-Fetch-Dest': 'document',
+            'Sec-Fetch-Mode': 'navigate',
+            'Sec-Fetch-Site': 'none',
+            'Sec-Fetch-User': '?1',
+            'Cache-Control': 'max-age=0',
+        };
+        // API headers for subsequent requests (WeConnect-python style)
+        const apiHeaders = {
             'User-Agent': VW_USER_AGENT,
             'Accept': '*/*',
             'Accept-Language': VW_ACCEPT_LANGUAGE,
@@ -199,10 +214,11 @@ async function vwLogin(context, email, password) {
             redirect_uri: VW_REDIRECT_URI,
             nonce: nonce,
         });
+        // Use browser-like headers for the initial CARIAD BFF request
         const authorizeResponse = await context.helpers.httpRequest({
             method: 'GET',
             url: `${authorizeUrl}?${authorizeParams.toString()}`,
-            headers: commonHeaders,
+            headers: browserHeaders,
             encoding: 'text',
             returnFullResponse: true,
             ignoreHttpStatusErrors: true,
@@ -212,12 +228,14 @@ async function vwLogin(context, email, password) {
         let htmlContent;
         let currentUrl = '';
         let stateToken = '';
+        let httpStatusCode = 0;
         if (typeof authorizeResponse === 'string') {
             htmlContent = authorizeResponse;
         }
         else if (authorizeResponse && typeof authorizeResponse === 'object') {
             const respObj = authorizeResponse;
             const respHeaders = respObj.headers;
+            httpStatusCode = respObj.statusCode || 0;
             // Check for redirect in headers (case-insensitive)
             if (respHeaders) {
                 const locationHeader = respHeaders.location || respHeaders.Location;
@@ -238,6 +256,11 @@ async function vwLogin(context, email, password) {
         else {
             htmlContent = String(authorizeResponse);
         }
+        // Debug: If we got an error page (status 400/500 or "Oops" in content), throw with details
+        if (httpStatusCode >= 400 || htmlContent.includes('Oops!, something went wrong')) {
+            const preview = htmlContent.substring(0, 1000);
+            throw new Error(`CARIAD BFF Error (HTTP ${httpStatusCode}): ${preview}`);
+        }
         // Follow redirects manually to capture the state parameter
         let maxInitialRedirects = 5;
         while (currentUrl && maxInitialRedirects > 0) {
@@ -250,12 +273,12 @@ async function vwLogin(context, email, password) {
             if (currentUrl.includes('/u/login') && stateToken) {
                 break;
             }
-            // Follow the redirect
+            // Follow the redirect using browser-like headers
             const followUrl = currentUrl.startsWith('http') ? currentUrl : `https://identity.vwgroup.io${currentUrl}`;
             const followResponse = await context.helpers.httpRequest({
                 method: 'GET',
                 url: followUrl,
-                headers: commonHeaders,
+                headers: browserHeaders,
                 encoding: 'text',
                 returnFullResponse: true,
                 ignoreHttpStatusErrors: true,
@@ -458,7 +481,9 @@ async function vwLogin(context, email, password) {
                 method: 'POST',
                 url: `https://identity.vwgroup.io/u/login?state=${encodeURIComponent(stateToken)}`,
                 headers: {
-                    ...commonHeaders,
+                    'User-Agent': browserHeaders['User-Agent'],
+                    'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8',
+                    'Accept-Language': 'de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7',
                     'Content-Type': 'application/x-www-form-urlencoded',
                     'Origin': 'https://identity.vwgroup.io',
                     'Referer': `https://identity.vwgroup.io/u/login?state=${encodeURIComponent(stateToken)}`,
@@ -536,7 +561,7 @@ async function vwLogin(context, email, password) {
             const followResponse = await context.helpers.httpRequest({
                 method: 'GET',
                 url: redirectUrl.startsWith('http') ? redirectUrl : `https://identity.vwgroup.io${redirectUrl}`,
-                headers: commonHeaders,
+                headers: browserHeaders,
                 encoding: 'text',
                 returnFullResponse: true,
                 ignoreHttpStatusErrors: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-jygse-vw-weconnect",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "n8n community node for VW We Connect - Control your Volkswagen T6.1 and other VW vehicles",
   "keywords": [
     "n8n-community-node-package",