New logon method
See original GitHub issueSeems like my Kia Connect (Not KIA Uvo) is working slightly different to get a “ControlToken”. It gets a token by sending vehicle ID and PIN:
PUT https://prd.eu-ccapi.kia.com:8080/api/v1/user/pin HTTP/1.1
Host: prd.eu-ccapi.kia.com:8080
Authorization: Bearer ey...Wg
Accept: */*
ccsp-service-id: fdc85c00-0a2f-4c64-bcb4-2cfb1500730a
Accept-Language: en-GB;q=1.0
ccsp-application-id: a2...74
Accept-Encoding: br;q=1.0, gzip;q=0.9, deflate;q=0.8
Stamp: oY..cA=
offset: 1
Content-Length: 64
User-Agent: EU_BlueLink/2.1.3 (com.kia.connect.eu; build:269; iOS 15.3.0) Alamofire/5.4.3
Connection: keep-alive
Content-Type: application/json; charset=UTF-8
ccsp-device-id: 35..0d
Cookie: TS012...dd=01...99
{"deviceId":"a0-VIN-10","pin":"9999"}
And I am getting a control token back:
HTTP/1.1 200 OK
Ccsp-Request-Id: fe6b64fd-9604-4a32-9286-d121326cd7f9
Ccsp-Span-Id: 5
Content-Length: 705
Content-Security-Policy: script-src https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'unsafe-inline'; frame-src https://www.google.com/recaptcha/
Content-Type: application/json
Date: Mon, 07 Feb 2022 09:56:30 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Option: SAMEORIGIN
X-Ratelimit-Limit: 0
X-Ratelimit-Remaining: 0
X-Ratelimit-Reset: 0
X-Xss-Protection: 1; mode=block
Set-Cookie: TS012b00dd=01cb...99; Path=/; Domain=.prd.eu-ccapi.kia.com
{"controlToken":"ey.....sQ","expiresTime":600}
The control token is used as a Bearer token to all following requests. So not a full logon, but it is just using car ID and a 4 digit PIN code to get a control token. PIN is setup in app, but most users enable biometric logon (face/finger ID)
Issue Analytics
- State:
- Created 2 years ago
- Comments:13 (6 by maintainers)
Top Results From Across the Web
Add or change your authentication method - Login.gov
On your Login.gov account page, review the “Your authentication methods” menu options on the left side of the page. Select a new device...
Read more >Google's new login method replaces passwords with your phone
Google is testing out a new feature that could do away with passwords entirely, letting users sign in using their own smartphones.
Read more >RIP passwords: new web standard designed to replace login ...
The Web Authentication (WebAuthn) standard is designed to replace the password with biometrics and devices that users already own, such as a ...
Read more >Authentication Tools for Secure Sign In - Google Safety Center
Learn how our authentication tools and services help you sign in securely. ... accessed from a new device, we make it quick and...
Read more >Set up Security info from a sign-in page - Microsoft Support
Password reset authentication only. You'll need to choose a different method for two-factor verification. Sign in to your work or school account.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
ANd a V2 call for getting status:
Response - the b62 before the json is there:
And V2 close door: