Issue With Step 2 - Authorization #641

iEquos · 2022-10-27T10:01:34Z

iEquos
Oct 27, 2022

When trying to obtain the authorization code, instead of been redirected to the 404 page that contains the code, I get redirected back to the login page. Which indicates the request is somehow wrong but I can't find out what is is.

Steps.

First I fetch the login page:
https://auth.tesla.cn/oauth2/v3/authorizeclient_id=ownerapi&code_challenge=${codeChallenge}&code_challenge_method=S256&redirect_uri=https://auth.tesla.com/void/callback&response_type=code&scope=openid email offline_access&state=123

Note. that's https://auth.tesla.cn and not https://auth.tesla.com, even though I'm not based in China. For some reason if I send the post request to https://auth.tesla.com from my application (and from postman) I just get this HTML:

<HTML>
<HEAD>
	<TITLE>Access Denied</TITLE>
</HEAD>

<BODY>
	<H1>Access Denied</H1>
	You don't have permission to access "http&#58;&#47;&#47;auth&#46;tesla&#46;com&#47;oauth2&#47;v3&#47;authorize&#63;"
	on this server.<P>
		Reference&#32;&#35;18&#46;39051702&#46;1666858488&#46;2844a603
</BODY>
</HTML>

I've been able to authorize manually via the .cn site so I don't think this is the issue. But if any one knows why I get the above error please say because I have no idea why.

Next I send the post request. In the request I've got the: tesla-auth.sid cookie, hidden form fields, identity parameter, credential parameter and all the parameters mentioned in the api. But this request just returns the same html page that I had before.

Hers's my Code in C#, I call this Authenticate method with the user details, the response for PostPassword should be the 404 but instead it just redirects back to the login.

public async Task Authenticate(UserPassDto user)
        {
            // Get OAuth Page
            RestClientOptions options = new()
            {
                BaseUrl = new Uri($"https://auth.tesla.cn/oauth2/v3/authorize?client_id=ownerapi&code_challenge={codeChallnge}&code_challenge_method=S256&redirect_uri=https://auth.tesla.com/void/callback&response_type=code&scope=openid%20email%20offline_access&state={state}&login_hint={user.Username}"),
            };
            var client = new RestClient(options);
            var request = new RestRequest("", Method.Get);

            var response = await Task.Run(() => client.Execute(request));



            var header = response.Headers.First(x => x.Name == "Set-Cookie" && ((string)x.Value).Contains("tesla-auth.sid"));
            string cookie = ((string)header.Value).Split(';').First().Split('=')[1];
            var formFields = GetFormFields(response.Content);
            var passwordResponse = await PostPassword(formFields, user, cookie);
        }

        private async Task<RestResponse> PostPassword(Dictionary<string, string> formFields, UserPassDto user, string cookie)
        {
            var options = new RestClientOptions()
            {
                BaseUrl = new Uri($"https://auth.tesla.cn/oauth2/v3/authorize?client_id=ownerapi&code_challenge={codeChallnge}&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fauth.tesla.com%2Fvoid%2Fcallback&response_type=code&scope=openid+email+offline_access&state={state}&login_hint={user.Username}"),
                FollowRedirects = false
            };

            var client = new RestClient(options);
            var request = new RestRequest("", Method.Post);
            request.AddHeader("cookie", $"tesla-auth.sid={cookie}");
            request.AddHeader("Content-Type", "application/x-www-form-urlencoded");

            foreach (KeyValuePair<string, string> entry in formFields)
            {
                request.AddParameter(entry.Key, entry.Value);
            }
            request.AddParameter("identity", user.Username);
            request.AddParameter("credential", user.Password);
            var response = await Task.Run(() => client.Execute(request));
            return response;
        }

        private static Dictionary<string, string> GetFormFields(string content)
        {
            var hiddenFields = Regex.Matches(content, "type=\\\"hidden\\\" name=\\\"(.*?)\\\" value=\\\"(.*?)\\\"");
            var formFields = new Dictionary<string, string>();
            foreach (Match match in hiddenFields)
            {
                formFields[match.Groups[1].Value] = match.Groups[2].Value;
            }
            return formFields;
        }

Any help would be greatly appreciated.
Thanks - Matt

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Issue With Step 2 - Authorization #641

{{title}}

Replies: 0 comments

Select a reply

Issue With Step 2 - Authorization #641

iEquos Oct 27, 2022

Replies: 0 comments

iEquos
Oct 27, 2022