n8n-nodes-jygse-vw-weconnect 0.1.4 → 0.1.6

package/dist/nodes/VwWeConnect/VwWeConnect.node.js

@@ -189,19 +189,24 @@ async function vwLogin(context, email, password) {
             encoding: 'text',
             returnFullResponse: true,
             ignoreHttpStatusErrors: true,
+            skipAutoFollowRedirects: true,
         });
         // Extract response body and check for redirect
         let htmlContent;
         let currentUrl = '';
+        let stateToken = '';
         if (typeof authorizeResponse === 'string') {
             htmlContent = authorizeResponse;
         }
         else if (authorizeResponse && typeof authorizeResponse === 'object') {
             const respObj = authorizeResponse;
             const respHeaders = respObj.headers;
-            // Check for redirect in headers
-            if (respHeaders && respHeaders.location) {
-                currentUrl = respHeaders.location;
+            // Check for redirect in headers (case-insensitive)
+            if (respHeaders) {
+                const locationHeader = respHeaders.location || respHeaders.Location;
+                if (locationHeader) {
+                    currentUrl = locationHeader;
+                }
             }
             if (respObj.body && typeof respObj.body === 'string') {
                 htmlContent = respObj.body;
@@ -216,28 +221,116 @@ async function vwLogin(context, email, password) {
         else {
             htmlContent = String(authorizeResponse);
         }
-        // Try to extract state token from Auth0 page (new flow)
-        // Look for state in URL or in hidden form field
-        let stateToken = '';
-        // Check if we were redirected to /u/login
-        const stateUrlMatch = currentUrl.match(/state=([^&]+)/);
-        if (stateUrlMatch) {
-            stateToken = decodeURIComponent(stateUrlMatch[1]);
+        // Follow redirects manually to capture the state parameter
+        let maxInitialRedirects = 5;
+        while (currentUrl && maxInitialRedirects > 0) {
+            // Extract state from redirect URL
+            const stateMatch = currentUrl.match(/state=([^&]+)/);
+            if (stateMatch) {
+                stateToken = decodeURIComponent(stateMatch[1]);
+            }
+            // If we reached the /u/login page, we have what we need
+            if (currentUrl.includes('/u/login') && stateToken) {
+                break;
+            }
+            // Follow the redirect
+            const followUrl = currentUrl.startsWith('http') ? currentUrl : `https://identity.vwgroup.io${currentUrl}`;
+            const followResponse = await context.helpers.httpRequest({
+                method: 'GET',
+                url: followUrl,
+                headers: {
+                    'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
+                    'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+                },
+                encoding: 'text',
+                returnFullResponse: true,
+                ignoreHttpStatusErrors: true,
+                skipAutoFollowRedirects: true,
+            });
+            if (typeof followResponse === 'string') {
+                htmlContent = followResponse;
+                currentUrl = '';
+            }
+            else if (followResponse && typeof followResponse === 'object') {
+                const respObj = followResponse;
+                const respHeaders = respObj.headers;
+                currentUrl = '';
+                if (respHeaders) {
+                    const locationHeader = respHeaders.location || respHeaders.Location;
+                    if (locationHeader) {
+                        currentUrl = locationHeader;
+                    }
+                }
+                if (respObj.body && typeof respObj.body === 'string') {
+                    htmlContent = respObj.body;
+                }
+                else if (respObj.data && typeof respObj.data === 'string') {
+                    htmlContent = respObj.data;
+                }
+            }
+            maxInitialRedirects--;
         }
-        // Also try to find state in the HTML
+        // Try to extract state token from the final HTML if not found in URL
+        // Auth0 embeds the state in various ways
+        // Method 1: Hidden form field
         if (!stateToken) {
             const stateHtmlMatch = htmlContent.match(/name="state"\s+value="([^"]+)"/);
             if (stateHtmlMatch) {
                 stateToken = stateHtmlMatch[1];
             }
         }
-        // Try to find state in form action URL
+        // Method 2: Form action URL
         if (!stateToken) {
             const formActionMatch = htmlContent.match(/action="[^"]*\?state=([^"&]+)/);
             if (formActionMatch) {
                 stateToken = decodeURIComponent(formActionMatch[1]);
             }
         }
+        // Method 3: JavaScript variable or config object
+        if (!stateToken) {
+            const jsStateMatch = htmlContent.match(/"state"\s*:\s*"([^"]+)"/);
+            if (jsStateMatch) {
+                stateToken = jsStateMatch[1];
+            }
+        }
+        // Method 4: data-state attribute
+        if (!stateToken) {
+            const dataStateMatch = htmlContent.match(/data-state="([^"]+)"/);
+            if (dataStateMatch) {
+                stateToken = dataStateMatch[1];
+            }
+        }
+        // Method 5: Auth0 config in script tag
+        if (!stateToken) {
+            const auth0ConfigMatch = htmlContent.match(/config\s*=\s*\{[^}]*state[^}]*\}/);
+            if (auth0ConfigMatch) {
+                const configStateMatch = auth0ConfigMatch[0].match(/state['"]\s*:\s*['"]([^'"]+)['"]/);
+                if (configStateMatch) {
+                    stateToken = configStateMatch[1];
+                }
+            }
+        }
+        // Method 6: URL in any href or src with state parameter
+        if (!stateToken) {
+            const hrefStateMatch = htmlContent.match(/(?:href|src|action)="[^"]*[?&]state=([^"&]+)/);
+            if (hrefStateMatch) {
+                stateToken = decodeURIComponent(hrefStateMatch[1]);
+            }
+        }
+        // Method 7: Any state= pattern in HTML (last resort)
+        if (!stateToken) {
+            const anyStateMatch = htmlContent.match(/state=([a-zA-Z0-9_.-]+)/);
+            if (anyStateMatch) {
+                stateToken = anyStateMatch[1];
+            }
+        }
+        // Method 8: Extract from window.__AUTH0_STATE or similar
+        if (!stateToken) {
+            const windowStateMatch = htmlContent.match(/__(?:AUTH0_)?STATE__?\s*=\s*['"]([^'"]+)['"]/i);
+            if (windowStateMatch) {
+                stateToken = windowStateMatch[1];
+            }
+        }
         // Try legacy CSRF-based flow first
         const csrfMatch = htmlContent.match(/name="_csrf"\s+value="([^"]+)"/);
         const relayStateMatch = htmlContent.match(/name="relayState"\s+value="([^"]+)"/);
@@ -339,7 +432,11 @@ async function vwLogin(context, email, password) {
                 }
             }
             if (!stateToken) {
-                throw new Error(`Could not extract state token from Auth0 login page. Response preview: ${htmlContent.substring(0, 500)}`);
+                // Show more of the HTML to help debug
+                const htmlPreview = htmlContent.substring(0, 2000);
+                const formMatch = htmlContent.match(/<form[^>]*>[\s\S]*?<\/form>/i);
+                const formPreview = formMatch ? formMatch[0].substring(0, 500) : 'No form found';
+                throw new Error(`Could not extract state token. Form: ${formPreview} | HTML preview: ${htmlPreview}`);
             }
             // Submit credentials to Auth0 /u/login endpoint
             const loginResponse = await context.helpers.httpRequest({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-jygse-vw-weconnect",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "n8n community node for VW We Connect - Control your Volkswagen T6.1 and other VW vehicles",
   "keywords": [
     "n8n-community-node-package",