n8n-nodes-jygse-vw-weconnect 0.1.5 → 0.1.7

package/dist/nodes/VwWeConnect/VwWeConnect.node.js

@@ -141,11 +141,11 @@ class VwWeConnect {
     }
 }
 exports.VwWeConnect = VwWeConnect;
-// VW OAuth2 Configuration (Updated January 2026)
-const VW_CLIENT_ID = 'a24fba63-34b3-4d43-b181-942111e6bda8@apps_vw-dilab_com';
-const VW_SCOPE = 'openid profile badge cars dealers birthdate vin';
-const VW_REDIRECT_URI = 'weconnect://authenticated';
-const VW_RESPONSE_TYPE = 'code id_token token';
+// VW OAuth2 Configuration (Updated January 2026 - from ioBroker.vw-connect)
+const VW_CLIENT_ID = '9496332b-ea03-4091-a224-8c746b885068@apps_vw-dilab_com';
+const VW_SCOPE = 'openid profile mbb email cars birthdate badge address vin';
+const VW_REDIRECT_URI = 'carnet://identity-kit/login';
+const VW_RESPONSE_TYPE = 'id_token token code';
 // Generate PKCE code verifier and challenge
 function generateCodeVerifier() {
     const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
@@ -271,26 +271,66 @@ async function vwLogin(context, email, password) {
             maxInitialRedirects--;
         }
         // Try to extract state token from the final HTML if not found in URL
+        // Auth0 embeds the state in various ways
+        // Method 1: Hidden form field
         if (!stateToken) {
             const stateHtmlMatch = htmlContent.match(/name="state"\s+value="([^"]+)"/);
             if (stateHtmlMatch) {
                 stateToken = stateHtmlMatch[1];
             }
         }
-        // Try to find state in form action URL
+        // Method 2: Form action URL
         if (!stateToken) {
             const formActionMatch = htmlContent.match(/action="[^"]*\?state=([^"&]+)/);
             if (formActionMatch) {
                 stateToken = decodeURIComponent(formActionMatch[1]);
             }
         }
-        // Try to extract state from any URL in the page
+        // Method 3: JavaScript variable or config object
+        if (!stateToken) {
+            const jsStateMatch = htmlContent.match(/"state"\s*:\s*"([^"]+)"/);
+            if (jsStateMatch) {
+                stateToken = jsStateMatch[1];
+            }
+        }
+        // Method 4: data-state attribute
+        if (!stateToken) {
+            const dataStateMatch = htmlContent.match(/data-state="([^"]+)"/);
+            if (dataStateMatch) {
+                stateToken = dataStateMatch[1];
+            }
+        }
+        // Method 5: Auth0 config in script tag
+        if (!stateToken) {
+            const auth0ConfigMatch = htmlContent.match(/config\s*=\s*\{[^}]*state[^}]*\}/);
+            if (auth0ConfigMatch) {
+                const configStateMatch = auth0ConfigMatch[0].match(/state['"]\s*:\s*['"]([^'"]+)['"]/);
+                if (configStateMatch) {
+                    stateToken = configStateMatch[1];
+                }
+            }
+        }
+        // Method 6: URL in any href or src with state parameter
+        if (!stateToken) {
+            const hrefStateMatch = htmlContent.match(/(?:href|src|action)="[^"]*[?&]state=([^"&]+)/);
+            if (hrefStateMatch) {
+                stateToken = decodeURIComponent(hrefStateMatch[1]);
+            }
+        }
+        // Method 7: Any state= pattern in HTML (last resort)
         if (!stateToken) {
             const anyStateMatch = htmlContent.match(/state=([a-zA-Z0-9_.-]+)/);
             if (anyStateMatch) {
                 stateToken = anyStateMatch[1];
             }
         }
+        // Method 8: Extract from window.__AUTH0_STATE or similar
+        if (!stateToken) {
+            const windowStateMatch = htmlContent.match(/__(?:AUTH0_)?STATE__?\s*=\s*['"]([^'"]+)['"]/i);
+            if (windowStateMatch) {
+                stateToken = windowStateMatch[1];
+            }
+        }
         // Try legacy CSRF-based flow first
         const csrfMatch = htmlContent.match(/name="_csrf"\s+value="([^"]+)"/);
         const relayStateMatch = htmlContent.match(/name="relayState"\s+value="([^"]+)"/);
@@ -392,7 +432,11 @@ async function vwLogin(context, email, password) {
                 }
             }
             if (!stateToken) {
-                throw new Error(`Could not extract state token from Auth0 login page. Response preview: ${htmlContent.substring(0, 500)}`);
+                // Show more of the HTML to help debug
+                const htmlPreview = htmlContent.substring(0, 2000);
+                const formMatch = htmlContent.match(/<form[^>]*>[\s\S]*?<\/form>/i);
+                const formPreview = formMatch ? formMatch[0].substring(0, 500) : 'No form found';
+                throw new Error(`Could not extract state token. Form: ${formPreview} | HTML preview: ${htmlPreview}`);
             }
             // Submit credentials to Auth0 /u/login endpoint
             const loginResponse = await context.helpers.httpRequest({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-jygse-vw-weconnect",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "n8n community node for VW We Connect - Control your Volkswagen T6.1 and other VW vehicles",
   "keywords": [
     "n8n-community-node-package",