n8n-nodes-vw-weconnect 0.1.0 → 0.1.1

package/dist/nodes/VwWeConnect/VwWeConnect.node.js

@@ -141,42 +141,148 @@ class VwWeConnect {
     }
 }
 exports.VwWeConnect = VwWeConnect;
+// VW OAuth2 Configuration
+const VW_CLIENT_ID = '9496332b-ea03-4091-a224-8c746b885068@apps_vw-dilab_com';
+const VW_SCOPE = 'openid profile mbb';
+const VW_REDIRECT_URI = 'weconnect://authenticated';
 async function vwLogin(context, email, password) {
-    // VW We Connect uses a complex OAuth2 flow
-    // Step 1: Get initial login page and CSRF token
-    const baseUrl = 'https://www.portal.volkswagen-we.com';
-    const loginUrl = `${baseUrl}/portal/en_GB/web/guest/home`;
     try {
-        // Initial request to get cookies and CSRF
-        await context.helpers.httpRequest({
+        // Step 1: Get authorization page and extract form data
+        const authorizeUrl = 'https://identity.vwgroup.io/oidc/v1/authorize';
+        const authorizeParams = new URLSearchParams({
+            client_id: VW_CLIENT_ID,
+            scope: VW_SCOPE,
+            response_type: 'code',
+            redirect_uri: VW_REDIRECT_URI,
+            nonce: generateNonce(),
+            state: generateNonce(),
+        });
+        const authorizeResponse = await context.helpers.httpRequest({
             method: 'GET',
-            url: loginUrl,
+            url: `${authorizeUrl}?${authorizeParams.toString()}`,
             headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
                 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
             },
+            returnFullResponse: true,
+            ignoreHttpStatusErrors: true,
         });
-        // Step 2: Perform login
-        const loginPayload = {
-            email: email,
-            password: password,
-        };
-        await context.helpers.httpRequest({
+        // Extract CSRF token and relay state from the response
+        const htmlContent = authorizeResponse.body;
+        const csrfMatch = htmlContent.match(/name="_csrf"\s+value="([^"]+)"/);
+        const relayStateMatch = htmlContent.match(/name="relayState"\s+value="([^"]+)"/);
+        const hmacMatch = htmlContent.match(/name="hmac"\s+value="([^"]+)"/);
+        if (!csrfMatch) {
+            throw new Error('Could not extract CSRF token from login page');
+        }
+        const csrf = csrfMatch[1];
+        const relayState = relayStateMatch ? relayStateMatch[1] : '';
+        const hmac = hmacMatch ? hmacMatch[1] : '';
+        // Step 2: Submit email
+        const identifierResponse = await context.helpers.httpRequest({
+            method: 'POST',
+            url: 'https://identity.vwgroup.io/signin-service/v1/signin/login/identifier',
+            headers: {
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
+                'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                _csrf: csrf,
+                relayState: relayState,
+                hmac: hmac,
+                email: email,
+            }).toString(),
+            returnFullResponse: true,
+            ignoreHttpStatusErrors: true,
+        });
+        // Extract new CSRF for password submission
+        const identifierHtml = identifierResponse.body;
+        const csrf2Match = identifierHtml.match(/name="_csrf"\s+value="([^"]+)"/);
+        const relayState2Match = identifierHtml.match(/name="relayState"\s+value="([^"]+)"/);
+        const hmac2Match = identifierHtml.match(/name="hmac"\s+value="([^"]+)"/);
+        const csrf2 = csrf2Match ? csrf2Match[1] : csrf;
+        const relayState2 = relayState2Match ? relayState2Match[1] : relayState;
+        const hmac2 = hmac2Match ? hmac2Match[1] : hmac;
+        // Step 3: Submit password
+        const authResponse = await context.helpers.httpRequest({
+            method: 'POST',
+            url: 'https://identity.vwgroup.io/signin-service/v1/signin/login/authenticate',
+            headers: {
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
+                'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                _csrf: csrf2,
+                relayState: relayState2,
+                hmac: hmac2,
+                email: email,
+                password: password,
+            }).toString(),
+            returnFullResponse: true,
+            ignoreHttpStatusErrors: true,
+        });
+        // Get the redirect URL which contains the authorization code
+        const headers = authResponse.headers;
+        let redirectUrl = headers.location;
+        if (!redirectUrl) {
+            // Check if we got a redirect in the response
+            const authHtml = authResponse.body;
+            const redirectMatch = authHtml.match(/URL=([^"]+)"/i);
+            if (redirectMatch) {
+                redirectUrl = redirectMatch[1];
+            }
+        }
+        // Follow redirects to get the auth code
+        let authCode = '';
+        let maxRedirects = 10;
+        while (maxRedirects > 0 && redirectUrl && !authCode) {
+            if (redirectUrl.includes('code=')) {
+                const codeMatch = redirectUrl.match(/code=([^&]+)/);
+                if (codeMatch) {
+                    authCode = codeMatch[1];
+                    break;
+                }
+            }
+            const followResponse = await context.helpers.httpRequest({
+                method: 'GET',
+                url: redirectUrl.startsWith('http') ? redirectUrl : `https://identity.vwgroup.io${redirectUrl}`,
+                headers: {
+                    'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
+                },
+                returnFullResponse: true,
+                ignoreHttpStatusErrors: true,
+            });
+            const followHeaders = followResponse.headers;
+            redirectUrl = followHeaders.location;
+            maxRedirects--;
+        }
+        if (!authCode) {
+            throw new Error('Could not obtain authorization code. Please check your credentials.');
+        }
+        // Step 4: Exchange auth code for tokens
+        const tokenResponse = await context.helpers.httpRequest({
             method: 'POST',
-            url: `${baseUrl}/portal/web/guest/home/-/csrftokenhandling/get-login-url`,
+            url: 'https://tokenrefreshservice.apps.emea.vwapps.io/exchangeAuthCode',
             headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36',
                 'Accept': 'application/json',
                 'Content-Type': 'application/json',
+                'X-Client-Id': VW_CLIENT_ID,
+            },
+            body: {
+                auth_code: authCode,
+                id_token: '',
+                brand: 'vw',
             },
-            body: loginPayload,
         });
-        // For now, return a mock session - the actual implementation
-        // requires handling VW's complex OAuth2 flow with multiple redirects
         return {
-            accessToken: 'session_token',
-            refreshToken: 'refresh_token',
-            csrf: 'csrf_token',
+            accessToken: tokenResponse.access_token,
+            refreshToken: tokenResponse.refresh_token,
+            idToken: tokenResponse.id_token || '',
+            homeRegion: 'https://mal-1a.prd.ece.vwg-connect.com',
+            userId: '',
         };
     }
     catch (error) {
@@ -186,17 +292,46 @@ async function vwLogin(context, email, password) {
         });
     }
 }
+function generateNonce() {
+    const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+    let result = '';
+    for (let i = 0; i < 32; i++) {
+        result += chars.charAt(Math.floor(Math.random() * chars.length));
+    }
+    return result;
+}
+async function getHomeRegion(context, session, vin) {
+    try {
+        const response = await context.helpers.httpRequest({
+            method: 'GET',
+            url: `https://mal-1a.prd.ece.vwg-connect.com/api/cs/vds/v1/vehicles/${vin}/homeRegion`,
+            headers: {
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+                'Accept': 'application/json',
+                'Authorization': `Bearer ${session.accessToken}`,
+            },
+        });
+        const homeRegion = response.homeRegion;
+        if (homeRegion && homeRegion.baseUri) {
+            const baseUri = homeRegion.baseUri;
+            return baseUri.content || session.homeRegion;
+        }
+        return session.homeRegion;
+    }
+    catch {
+        return session.homeRegion;
+    }
+}
 async function getPosition(context, session, vin) {
-    const baseUrl = 'https://www.portal.volkswagen-we.com';
     try {
+        // Try the new CARIAD API first
         const response = await context.helpers.httpRequest({
             method: 'GET',
-            url: `${baseUrl}/portal/delegate/dashboard/${vin}/-/position/get-position`,
+            url: `https://emea.bff.cariad.digital/vehicle/v1/vehicles/${vin}/parkingposition`,
             headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
                 'Accept': 'application/json',
                 'Authorization': `Bearer ${session.accessToken}`,
-                'X-CSRF-Token': session.csrf,
             },
         });
         return {
@@ -206,24 +341,44 @@ async function getPosition(context, session, vin) {
             timestamp: new Date().toISOString(),
         };
     }
-    catch (error) {
-        throw new n8n_workflow_1.NodeApiError(context.getNode(), {
-            message: 'Failed to get vehicle position',
-            description: error.message,
-        });
+    catch {
+        // Fallback to older API
+        try {
+            const homeRegion = await getHomeRegion(context, session, vin);
+            const response = await context.helpers.httpRequest({
+                method: 'GET',
+                url: `${homeRegion}/api/bs/cf/v1/VW/DE/vehicles/${vin}/position`,
+                headers: {
+                    'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+                    'Accept': 'application/json',
+                    'Authorization': `Bearer ${session.accessToken}`,
+                },
+            });
+            return {
+                operation: 'getPosition',
+                vin: vin,
+                position: response,
+                timestamp: new Date().toISOString(),
+            };
+        }
+        catch (error) {
+            throw new n8n_workflow_1.NodeApiError(context.getNode(), {
+                message: 'Failed to get vehicle position',
+                description: error.message,
+            });
+        }
     }
 }
 async function getVehicleStatus(context, session, vin) {
-    const baseUrl = 'https://www.portal.volkswagen-we.com';
     try {
+        // Try the new CARIAD API first
         const response = await context.helpers.httpRequest({
             method: 'GET',
-            url: `${baseUrl}/portal/delegate/dashboard/${vin}/-/vsr/get-vsr`,
+            url: `https://emea.bff.cariad.digital/vehicle/v1/vehicles/${vin}/selectivestatus?jobs=all`,
             headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
                 'Accept': 'application/json',
                 'Authorization': `Bearer ${session.accessToken}`,
-                'X-CSRF-Token': session.csrf,
             },
         });
         return {
@@ -233,24 +388,44 @@ async function getVehicleStatus(context, session, vin) {
             timestamp: new Date().toISOString(),
         };
     }
-    catch (error) {
-        throw new n8n_workflow_1.NodeApiError(context.getNode(), {
-            message: 'Failed to get vehicle status',
-            description: error.message,
-        });
+    catch {
+        // Fallback to older API
+        try {
+            const homeRegion = await getHomeRegion(context, session, vin);
+            const response = await context.helpers.httpRequest({
+                method: 'GET',
+                url: `${homeRegion}/api/bs/vsr/v1/VW/DE/vehicles/${vin}/status`,
+                headers: {
+                    'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+                    'Accept': 'application/json',
+                    'Authorization': `Bearer ${session.accessToken}`,
+                },
+            });
+            return {
+                operation: 'getVehicleStatus',
+                vin: vin,
+                status: response,
+                timestamp: new Date().toISOString(),
+            };
+        }
+        catch (error) {
+            throw new n8n_workflow_1.NodeApiError(context.getNode(), {
+                message: 'Failed to get vehicle status',
+                description: error.message,
+            });
+        }
     }
 }
 async function getHeaterStatus(context, session, vin) {
-    const baseUrl = 'https://www.portal.volkswagen-we.com';
     try {
+        const homeRegion = await getHomeRegion(context, session, vin);
         const response = await context.helpers.httpRequest({
             method: 'GET',
-            url: `${baseUrl}/portal/delegate/dashboard/${vin}/-/rah/get-status`,
+            url: `${homeRegion}/api/bs/climatisation/v1/VW/DE/vehicles/${vin}/climater`,
             headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
                 'Accept': 'application/json',
                 'Authorization': `Bearer ${session.accessToken}`,
-                'X-CSRF-Token': session.csrf,
             },
         });
         return {
@@ -268,26 +443,70 @@ async function getHeaterStatus(context, session, vin) {
     }
 }
 async function controlHeater(context, session, vin, spin, action, duration) {
-    const baseUrl = 'https://www.portal.volkswagen-we.com';
-    const endpoint = action === 'start' ? 'start' : 'stop';
     try {
-        const body = {
-            spin: spin,
+        const homeRegion = await getHomeRegion(context, session, vin);
+        // First, get a security token for the action
+        const secTokenResponse = await context.helpers.httpRequest({
+            method: 'GET',
+            url: `${homeRegion}/api/rolesrights/authorization/v2/vehicles/${vin}/services/rclima_v1/operations/P_START_CLIMA_AU/security-pin-auth-requested`,
+            headers: {
+                'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+                'Accept': 'application/json',
+                'Authorization': `Bearer ${session.accessToken}`,
+            },
+        });
+        const securityPinAuthInfo = secTokenResponse.securityPinAuthInfo;
+        let secToken = '';
+        if (securityPinAuthInfo && securityPinAuthInfo.securityToken) {
+            // Complete S-PIN authentication
+            const spinAuthResponse = await context.helpers.httpRequest({
+                method: 'POST',
+                url: `${homeRegion}/api/rolesrights/authorization/v2/security-pin-auth-completed`,
+                headers: {
+                    'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+                    'Accept': 'application/json',
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${session.accessToken}`,
+                },
+                body: {
+                    securityPinAuthentication: {
+                        securityPin: spin,
+                        securityToken: securityPinAuthInfo.securityToken,
+                    },
+                },
+            });
+            const authInfo = spinAuthResponse.securityPinAuthInfo;
+            secToken = (authInfo === null || authInfo === void 0 ? void 0 : authInfo.securityToken) || '';
+        }
+        // Build the action request
+        const actionName = action === 'start' ? 'startClimatisation' : 'stopClimatisation';
+        const actionBody = {
+            action: {
+                type: actionName,
+            },
         };
         if (action === 'start' && duration) {
-            body.duration = duration;
+            actionBody.action.settings = {
+                targetTemperature: 2930, // ~20°C in deciKelvin
+                climatisationWithoutHVpower: true,
+                heaterSource: 'auxiliary',
+                runTime: duration,
+            };
+        }
+        const headers = {
+            'User-Agent': 'Mozilla/5.0 (Linux; Android 12; SM-G973F) AppleWebKit/537.36',
+            'Accept': 'application/json',
+            'Content-Type': 'application/json',
+            'Authorization': `Bearer ${session.accessToken}`,
+        };
+        if (secToken) {
+            headers['x-mbbSecToken'] = secToken;
         }
         const response = await context.helpers.httpRequest({
             method: 'POST',
-            url: `${baseUrl}/portal/delegate/dashboard/${vin}/-/rah/${endpoint}`,
-            headers: {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
-                'Accept': 'application/json',
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${session.accessToken}`,
-                'X-CSRF-Token': session.csrf,
-            },
-            body: body,
+            url: `${homeRegion}/api/bs/climatisation/v1/VW/DE/vehicles/${vin}/climater/actions`,
+            headers: headers,
+            body: actionBody,
         });
         return {
             operation: action === 'start' ? 'startHeater' : 'stopHeater',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-vw-weconnect",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "n8n community node for VW We Connect - Control your Volkswagen T6.1 and other VW vehicles",
   "keywords": [
     "n8n-community-node-package",