step 2 redirect void/callback?error=login_cancelled&error_description=User%20cancelled

[bclipa]

Hi,
I'm facing an issue.
Until now it worked to fetch tokens, now when I send the data with the credentials, captcha, and everything else, I get a 302 redirect but not to the redirect link, but to the one below.
Does anyone have any idea what is wrong and how it can be fixed?
Found. Redirecting to https://auth.tesla.com/void/callback?error=login_cancelled&error_description=User%20cancelled%20login

[skimike02]

I have the same issue of getting 302 redirect to same URI when submitting credentials. Code previously worked. I am not getting asked for captcha though. I have tried changing UA strings, changing "cancel" from 1 to 0 (no effect), and removing cancel (get http 200 with login screen again instead of 302).

[bclipa]

I tried the same things, and still no luck. I hope someone will have an idea soon, because the application development is on stand by.

[skimike02]

Solved my problem by addressing recaptcha. Need to clean up code below a lot, and it currently only works for MFA accounts, but it works.

# -*- coding: utf-8 -*-
"""
Created on Fri Oct 29 17:19:34 2021

@author: Micha
"""
import config
import os
import base64
import hashlib
import urllib
import requests
import re
from urllib.parse import parse_qs
from time import sleep

API_KEY = config.API_KEY                      #2captcha API key
email = config.email                        #Tesla account email
password = config.pw                        #Tesla account password

TESLA_CLIENT_ID='81527cff06843c8634fdc09e8ac0abefb46ac849f38fe1e431c2ef2106796384'
TESLA_CLIENT_SECRET='c7257eb71a564034f9419ee651c7d0e5f7aa6bfbd18bafb5c5c033b093bb2fa3'


def recaptchasolver(sitekey, pageurl, API_KEY):
        API_KEY = API_KEY
        request_url = "http://2captcha.com/in.php"
        answer_url = "http://2captcha.com/res.php"
        #Make request to 2captcha API
        data = {
            "key": API_KEY,
            "method": "userrecaptcha",
            "googlekey": sitekey,
            "pageurl": pageurl      
            }
        r = requests.post(request_url,data=data)
        captcha_id = r.text.split('|')[1]
        
        #Retrieve captcha answer from 2captcha
        data = {
            "key": API_KEY,
            "action": "get",
            "id": captcha_id
            }
        r = requests.get(answer_url, params=data)
        captcha_answer = r.text
        while 'CAPCHA_NOT_READY' in captcha_answer:
            sleep(15)
            captcha_answer = requests.get(answer_url,params=data)
        captcha_answer = captcha_answer.text.split('|')[1]
        return captcha_answer


token = 'fail'
token_url="https://auth.tesla.com/oauth2/v3/token"
auth_url="https://auth.tesla.com/oauth2/v3/authorize"
base_path = 'https://owner-api.teslamotors.com'
auth_header = {'Content-Type': 'application/json',
               'Authorization': 'Bearer ' + token}

def handshake():
    verifier_bytes = os.urandom(86)
    challenge = base64.urlsafe_b64encode(verifier_bytes).rstrip(b'=')
    challenge_bytes = hashlib.sha256(challenge).digest()
    challenge_sum = base64.urlsafe_b64encode(challenge_bytes).rstrip(b'=')
    state=base64.urlsafe_b64encode(os.urandom(32)).rstrip(b"=").decode("utf-8")
    return challenge, challenge_sum, state

challenge, challenge_sum, state=handshake()

s = requests.Session()

params = {'client_id': 'ownerapi', 
        'code_challenge': challenge_sum,
        'code_challenge_method' : "S256",
        'redirect_uri' : "https://auth.tesla.com/void/callback",
        'response_type' : "code",
        'scope' : "openid email offline_access",
        'state' : "tesla_exporter"
        }
headers = {}

#Request login screen
print('getting login screen')
r = s.get(auth_url, headers=headers, params=params, timeout=10)
recaptcha_site_key = re.search(r".*sitekey.* : '(.*)'", r.text).group(1)
csrf = re.search(r'name="_csrf".+value="([^"]+)"', r.text).group(1)
transaction_id = re.search(r'name="transaction_id".+value="([^"]+)"', r.text).group(1)

#Solve captcha
print('solving captcha')
captchacode = recaptchasolver(recaptcha_site_key, auth_url, API_KEY)
print('captcha solved')

#Send username, password, and captcha
data = {"_csrf": csrf,
        "_phase": "authenticate",
        "_process": "1",
        "transaction_id": transaction_id,
        "cancel": "",
        "identity": email,
        "credential": password,
        "g-recaptcha-response:": captchacode,
        "recaptcha": captchacode
        }
print('sending username and password')
r = s.post(auth_url, headers=headers, params=params, data=data, allow_redirects=False)

#If MFA, send MFA
mfa_uri='https://auth.tesla.com/oauth2/v3/authorize/mfa/factors'
transaction_ID=data['transaction_id']
r=s.get(mfa_uri, headers=headers, params={'transaction_id':transaction_ID})
if len(r.json()['data'])>1:   
    print("Multiple MFA devices found. Please select which MFA device you will use.")
    n=1
    for i in r.json()['data']:
        print(n,"-",i['name'])
        n=n+1
    device=int(input())-1
else:
    device=0
factor_id=r.json()['data'][device]['id']


for i in range(3):
    print('Please enter your passcode:')
    passcode=input()
    r = s.post("https://auth.tesla.com/oauth2/v3/authorize/mfa/verify",
                  headers=headers,
                  json={"transaction_id": transaction_ID, "factor_id": factor_id, "passcode": passcode})
    if r.json()['data']['approved'] and r.json()['data']['valid'] :
        print('passcode approved')
        break
else:
    raise ValueError("Incorrect passcode entered")
        
r = s.post(auth_url, headers=headers, params={'transaction_id':transaction_ID}, data=data, allow_redirects=False)

code = parse_qs(r.headers["location"])["https://auth.tesla.com/void/callback?code"]


payload = {
   "grant_type": "authorization_code",
   "client_id": "ownerapi",
   "code_verifier": challenge.decode("utf-8"),
   "code": code,
   "redirect_uri": "https://auth.tesla.com/void/callback",
       }
r = s.post(token_url, headers=headers, json=payload)
access_token = r.json()["access_token"]
refresh_token=r.json()["refresh_token"]

[HarmOtten]

@skimike02 Thanks for pointing me in the right direction. I got it working too.
I use Node-RED on a Raspberry PI.
Between Step1 and Step2 described by timdorr https://tesla-api.timdorr.com/api-basics/authentication you need to call https://auth.tesla.com/captcha with the same cookie in the headers as in Step2.
The result is an svg-image.
The characters in the image need to be added in the body of Step2 with name "recaptcha".

[HarmOtten]

But now it doesn't work anymore. Again :-(
Step2 now responds with:
Access Denied
You don't have permission to access https://auth.tesla.com/oauth2/v3/authorize
Can anyone please let me know what Tesla changed in the API since Oct 31?

[skimike02]

This appears to be solved in another discussion. However, it is solved by using browser automation. Not sure if there is another way. Please report back if you get it working again some other way.