n8n-nodes-jygse-vw-weconnect 0.2.1 → 0.2.2

package/dist/nodes/VwWeConnect/VwWeConnect.node.js

@@ -1,7 +1,41 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VwWeConnect = void 0;
 const n8n_workflow_1 = require("n8n-workflow");
+const crypto = __importStar(require("crypto"));
 class VwWeConnect {
     constructor() {
         this.description = {
@@ -167,11 +201,13 @@ function generateCodeVerifier() {
     }
     return result;
 }
-async function generateCodeChallenge(verifier) {
-    // Simple base64url encoding of SHA256 hash
-    // Since we can't use crypto directly, we'll use a simplified approach
-    // For now, use plain verifier (S256 would be better but requires crypto)
-    return verifier;
+function generateCodeChallenge(verifier) {
+    // SHA256 hash of the verifier, then base64url encode
+    const hash = crypto.createHash('sha256').update(verifier).digest();
+    return hash.toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=/g, '');
 }
 async function vwLogin(context, email, password) {
     try {
@@ -188,6 +224,8 @@ async function vwLogin(context, email, password) {
             'x-requested-with': VW_APP_PACKAGE,
             'upgrade-insecure-requests': '1',
         };
+        // Generate PKCE code challenge (required by VW identity)
+        const codeChallenge = generateCodeChallenge(codeVerifier);
         // Step 1: Go directly to identity.vwgroup.io (like ioBroker adapter)
         const authorizeUrl = 'https://identity.vwgroup.io/oidc/v1/authorize';
         const authorizeParams = new URLSearchParams({
@@ -197,6 +235,8 @@ async function vwLogin(context, email, password) {
             redirect_uri: VW_REDIRECT_URI,
             nonce: nonce,
             state: state,
+            code_challenge: codeChallenge,
+            code_challenge_method: 'S256',
         });
         // Use browser-like headers for initial request
         // Let n8n follow redirects automatically to reach the login page

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-jygse-vw-weconnect",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "n8n community node for VW We Connect - Control your Volkswagen T6.1 and other VW vehicles",
   "keywords": [
     "n8n-community-node-package",