Step 1-4 + refresh_token in PHP #283

ralfonso4 · 2021-02-03T03:13:08Z

ralfonso4
Feb 3, 2021

Just my quick and dirty version - works so far

EDIT: snipppp Code snippp
The code in the next comment is better

ralfonso4 · 2021-02-03T09:53:46Z

ralfonso4
Feb 3, 2021
Author

1 reply

sam070266 Feb 7, 2021

When I run this on a Windows 10 machine I get the following error. Am I doing something daft ?

Fatal error: Uncaught Error: Call to undefined function curl_init() in C:\PHP\generateV3TeslaRefreshToken1.php:509
Stack trace:
#0 {main}
thrown in C:\PHP\generateV3TeslaRefreshToken1.php on line 509

benjaminfrombe · 2021-02-03T15:36:31Z

benjaminfrombe
Feb 3, 2021

can't get this to work. Could you please provide a complete script ? I tried adding a class and adding base64url functions but I still get following notices and no result:

PHP Notice:  Undefined property: Teslaauth::$accessUrl in /usr/local/scripts/tesla/gt.php on line 30
PHP Notice:  Undefined index: Set-Cookie in /usr/local/scripts/tesla/gt.php on line 61
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 72
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 72
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 73
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 73
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 74
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 74
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 75
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 75
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 76
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 76
PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/gt.php on line 87
PHP Notice:  Undefined property: Teslaauth::$tokenUrlNew in /usr/local/scripts/tesla/gt.php on line 92
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 114
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 115
PHP Notice:  Undefined property: Teslaauth::$tokenUrl in /usr/local/scripts/tesla/gt.php on line 119
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 139
PHP Notice:  Array to string conversion in /usr/local/scripts/tesla/gt.php on line 217

0 replies

benjaminfrombe · 2021-02-03T16:31:21Z

benjaminfrombe
Feb 3, 2021

ok thanks, that explains a lot :) But still an issue:

so I tried :

$t = new Tesla;
var_dump($t->getAccessToken("myusername", "mypassword"));

but I get:

PHP Notice:  Undefined index: Set-Cookie in /usr/local/scripts/tesla/gt.php on line 291
PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/gt.php on line 317
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 344
PHP Notice:  Undefined index: refresh_token in /usr/local/scripts/tesla/gt.php on line 345
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 369
array(2) {
  ["response"]=>
  string(17) "invalid_sso_token"
  ["refresh_token"]=>
  NULL
}

0 replies

benjaminfrombe · 2021-02-03T17:14:21Z

benjaminfrombe
Feb 3, 2021

I copy/pasted the whole lib in there. Must be forgetting something stupid ...
To be complete, this is the total script including lib:

<?php

class Tesla
{
protected $apiBaseUrl = "https://owner-api.teslamotors.com/api/1";
protected $tokenUrl = 'https://owner-api.teslamotors.com/oauth/token';
protected $tokenUrlNew = 'https://auth.tesla.com/oauth2/v3/token';
protected $accessUrl = 'https://auth.tesla.com/oauth2/v3/authorize';
protected $accessToken;
protected $vehicleId = null;

public function __construct(string $accessToken = null)
{
    $this->accessToken = $accessToken;
}

public function setAccessToken(string $accessToken)
{
    $this->accessToken = $accessToken;
}

public function allData()
{
    return $this->sendRequest('/vehicle_data')['response'];
}

public function vehicles()
{
    return $this->sendRequest('/vehicles');
}

public function vehicle()
{
    return $this->sendRequest('')['response'];
}

public function setVehicleId(int $vehicleId)
{
    $this->vehicleId = $vehicleId;
}

public function setClientId(string $clientId)
{
    putenv('TESLA_CLIENT_ID=' . $clientId);
}

public function setClientSecret(string $clientSecret)
{
    putenv('TESLA_CLIENT_SECRET=' . $clientSecret);
}

public function mobileEnabled()
{
    return $this->sendRequest('/mobile_enabled')['response'];
}

public function chargeState()
{
    return $this->sendRequest('/data_request/charge_state')['response'];
}

public function climateState()
{
    return $this->sendRequest('/data_request/climate_state')['response'];
}

public function driveState()
{
    return $this->sendRequest('/data_request/drive_state')['response'];
}

public function guiSettings()
{
    return $this->sendRequest('/data_request/gui_settings')['response'];
}

public function vehicleState()
{
    return $this->sendRequest('/data_request/vehicle_state')['response'];
}

public function vehicleConfig()
{
    return $this->sendRequest('/data_request/vehicle_config')['response'];
}

public function wakeUp()
{
    return $this->sendRequest('/wake_up', [], 'POST')['response'];
}

public function startSoftwareUpdate( int $seconds = 0 )
{
    return $this->sendRequest('/command/schedule_software_update', [ 'offset_sec' => $seconds ], 'POST')['response'];
}

public function setValetMode(bool $active = false, int $pin = 0000)
{
    $params = [
        'on' => $active,
        'pin' => $pin
    ];

    return $this->sendRequest('/command/set_valet_mode', $params, 'POST')['response'];
}

public function resetValetPin()
{
    return $this->sendRequest('/command/reset_valet_pin', [], 'POST')['response'];
}

public function openChargePort()
{
    return $this->sendRequest('/command/charge_port_door_open', [], 'POST')['response'];
}

public function setChargeLimitToStandard()
{
    return $this->sendRequest('/command/charge_standard', [], 'POST')['response'];
}

public function setChargeLimitToMaxRange()
{
    return $this->sendRequest('/command/charge_max_range', [], 'POST')['response'];
}

public function setChargeLimit(int $percent = 90)
{
    $params = [
        'percent' => "$percent"
    ];
    return $this->sendRequest('/command/set_charge_limit', $params, 'POST')['response'];
}

public function startCharging()
{
    return $this->sendRequest('/command/charge_start', [], 'POST')['response'];
}

public function stopCharging()
{
    return $this->sendRequest('/command/charge_stop', [], 'POST')['response'];
}

public function flashLights()
{
    return $this->sendRequest('/command/flash_lights', [], 'POST')['response'];
}

public function honkHorn()
{
    return $this->sendRequest('/command/honk_horn', [], 'POST')['response'];
}

public function unlockDoors()
{
    return $this->sendRequest('/command/door_unlock', [], 'POST')['response'];
}

public function lockDoors()
{
    return $this->sendRequest('/command/door_lock', [], 'POST')['response'];
}

public function windowControl(string $state = 'close', int $lat = 0, int $lon = 0)
{
    return $this->sendRequest('/command/window_control', [ 'command' => $state, 'lat' => $lat, 'lon' => $lon ], 'POST')['response'];
}

public function setTemperature(float $driverDegreesCelcius = 20.0, float $passengerDegreesCelcius = 20.0)
{
    return $this->sendRequest('/command/set_temps?driver_temp=' . $driverDegreesCelcius . '&passenger_temp=' . $passengerDegreesCelcius, [], 'POST')['response'];
}

public function startHvac()
{
    return $this->sendRequest('/command/auto_conditioning_start', [], 'POST')['response'];
}

public function stopHvac()
{
    return $this->sendRequest('/command/auto_conditioning_stop', [], 'POST')['response'];
}

public function movePanoramicRoof(string $state = 'vent', int $percent = 50)
{
    return $this->sendRequest('/command/sun_roof_control?state=' . $state . '&percent=' . $percent, [], 'POST')['response'];
}

public function remoteStart(string $password = '')
{
    return $this->sendRequest('/command/remote_start_drive?password=' . $password, [], 'POST')['response'];
}

public function openTrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'rear' ], 'POST')['response'];
}

public function openFrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'front' ], 'POST')['response'];
}

public function setNavigation(string $location)
{
    $params = [
        'type' => 'share_ext_content_raw',
        'value' => [
            'android.intent.extra.TEXT' => $location
        ],
        'locale' => 'en-US',
        'timestamp_ms' => time(),
    ];
    return $this->sendRequest('/command/navigation_request', $params, 'POST')['response'];
}

public function startSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => True], 'POST')['response'];
}

public function stopSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => False], 'POST')['response'];
}

public function setSeatHeater(int $heater = 0, int $level = 0)
{
    return $this->sendRequest('/command/remote_seat_heater_request', ['heater' => $heater, 'level' => $level], 'POST')['response'];
}

 public function setTemps(float $driver = 21.0, float $passenger = 21.0)
{
    return $this->sendRequest('/command/set_temps', ['driver_temp' => $driver, 'passenger_temp' => $passenger], 'POST')['response'];
}

public function base64url_encode($data) { 
	return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); 
} 

public function getAccessToken(string $username, string $password)
{
###Step 1: Obtain the login page

	$code_verifier = substr(hash('sha512', mt_rand()), 0, 86);
	$state = $this->base64url_encode(substr(hash('sha256', mt_rand()), 0, 12));
	$code_challenge = $this->base64url_encode($code_verifier);
	
	$data =[
        'client_id' => 'ownerapi',
        'code_challenge' => $code_challenge,
        'code_challenge_method' => 'S256',
        'redirect_uri' => 'https://auth.tesla.com/void/callback',
        'response_type' => 'code',
        'scope' => 'openid email offline_access',
        'state' => $state,
    ];
    
	$GetUrl = $this->accessUrl.'?'.http_build_query ($data);

   
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
	$apiResult = curl_exec($ch);
    curl_close($ch);
    
    $dom = new DomDocument();
	@ $dom->loadHTML($apiResult);
	$child_elements = $dom->getElementsByTagName('input'); //DOMNodeList
	foreach( $child_elements as $h2 ) {
		$hiddeninputs[$h2->getAttribute('name')]=$h2->getAttribute('value');
	}
	$headers = [];
	$output = rtrim($apiResult);
	$data = explode("\n",$output);
	$headers['status'] = $data[0];
	array_shift($data);

	foreach($data as $part){
		//some headers will contain ":" character (Location for example), and the part after ":" will be lost, Thanks to @Emanuele
		$middle = explode(":",$part,2);

		//Supress warning message if $middle[1] does not exist, Thanks to @crayons
		if ( !isset($middle[1]) ) { $middle[1] = null; }
			$headers[trim($middle[0])] = trim($middle[1]);
	}
	$cookie = $headers['Set-Cookie'];
###Step 2: Obtain an authorization code

	$ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded','Cookie: '.$cookie));
	$postData = array(
		'_csrf' => $hiddeninputs['_csrf'],
		'_phase' => $hiddeninputs['_phase'],
		'_process' => $hiddeninputs['_process'],
		'transaction_id' => $hiddeninputs['transaction_id'],
		'cancel' =>$hiddeninputs['cancel'],
        'identity' => $username,
      	'credential' => $password
    );
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData));
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);


    $apiResult = curl_exec($ch);
    curl_close($ch);
	#print_r($apiResult);
	$code= explode('&',explode('https://auth.tesla.com/void/callback?code=',$apiResult)[1])[0];
	#print 'CODE'.$code;
###Step 3: Exchange authorization code for bearer token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'authorization_code',
    'client_id' => 'ownerapi',
    'code' => $code,
    'code_verifier' => $code_verifier,
    'redirect_uri' => 'https://auth.tesla.com/void/callback'
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

public function refreshAccessToken(string $refreshToken)
{
$tesla = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
curl_close($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$tesla->setClientId(trim($id[1]));
$tesla->setClientSecret(trim($secret[1]));

  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  #print 'XX '.getenv('TESLA_CLIENT_ID');exit;
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'refresh_token',
    'client_id' => 'ownerapi',
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
    'refresh_token' => $refreshToken,
    'scope' => 'openid email offline_access'
  ]));

  $apiResult = curl_exec($ch);
  $apiResultJson = json_decode($apiResult, true);

  curl_close($ch);
  #print_r($apiResult);exit;
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

protected function sendRequest(string $endpoint, array $params = [], string $method = 'GET')
{
    $ch = curl_init();

    if ($endpoint !== '/vehicles' && ! is_null($this->vehicleId)) {
        $endpoint = '/vehicles/' . $this->vehicleId . $endpoint;
    }

    curl_setopt($ch, CURLOPT_URL, $this->apiBaseUrl . $endpoint);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Accept: application/json',
        'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
        'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
        'Authorization: Bearer ' . $this->accessToken,
    ]);

    if ($method == 'POST' || $method == 'PUT' || $method == 'DELETE') {
        if ($method == 'POST') {
            curl_setopt($ch, CURLOPT_POST, true);
        }
        if (in_array($method, ['PUT', 'DELETE'])) {
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        }
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($params));
    }

    $apiResult = curl_exec($ch);
    $headerInfo = curl_getinfo($ch);
    $apiResultJson = json_decode($apiResult, true);
    curl_close($ch);

    $result = [];
    if ($apiResult === false) {
        $result['errorcode'] = 0;
        $result['errormessage'] = curl_error($ch);

        //print $result['errormessage'].' api<br>';
    }

    if (! in_array($headerInfo['http_code'], ['200', '201', '204'])) {
        $result['errorcode'] = $headerInfo['http_code'];
        if (isset($apiResult)) {
            $result['errormessage'] = $apiResult;
        }

        //print $result['errormessage'].' header<br>';;
    }
	
    return $apiResultJson ?? $apiResult;
    
}
}

$t = new Tesla;
var_dump($t->getAccessToken("login", "password"));


?>

6 replies

MrTemple Feb 3, 2021

I can confirm it's getting the right ClientId and ClientSecret from pastebin. So I'm not sure where else may be going wrong.

string(64) "81527cff06843c8634fdc09e8ac0abefb46ac849f38fe1e431c2ef2106796384" // ClientId
string(64) "c7257eb71a564034f9419ee651c7d0e5f7aa6bfbd18bafb5c5c033b093bb2fa3" // ClientSecret

MrTemple Feb 3, 2021

Updating as I go with my investigation (in case anybody else is working on it)...

Looks like something's wrong in Step 3 at least. Here's the Step 3 API response:

//  Step 3:   var_dump($apiResultJson);
array(3) {
  ["error"]=>
  string(15) "invalid_request"
  ["error_description"]=>
  string(21) "Internal server error"
  ["error_uri"]=>
  string(89) "https://auth.tesla.com/error/reference/327b9d0e-04cd-4e31-882e-9942bcc32521-1612377782219"
}

MrTemple Feb 3, 2021

Looks like the response we're getting from Step 2 does not contain the expected redirect:
auth.tesla.com/void/callback?code=c7dc7f8196d001632558d6632558d6243632558d6b6d60f82c0632558d67

Instead we're getting back:

Found. Redirecting to https://auth.tesla.com/oauth2/v3/authorize?client_id=ownerapi&code_challenge=MTRmMTlhMmMzNmM5MzBiNjE2OTY5NDMyODRlY2I5ZWJkZTAwMzZhNWI0NGVlZGExMGZmYjdjNGYxYmYz...&code_challenge_method=...

And when I parse that new response using the code_challenge as the code from Step 2 for Step 3 I get the following response back:

array(3) {
  ["error"]=>
  string(13) "invalid_grant"
  ["error_description"]=>
  string(21) "Internal server error"
  ["error_uri"]=>
  string(89) "https://auth.tesla.com/error/reference/1307012f-35dc-462d-b65b-990f287833d6-1612378547374"
}

MrTemple Feb 3, 2021

Ah, I'm getting a NULL $cookie value out of Step 1. Investigating...

MrTemple Feb 3, 2021

GOT IT!

The cookie header is case sensitive. It's should be:

$cookie = $headers['set-cookie']; // works
// $cookie = $headers['Set-Cookie']; // doesn't work

timdorr · 2021-02-03T18:55:06Z

timdorr
Feb 3, 2021
Maintainer

Just FYI, I added code fences around all the example code in this thread. For future reference, you can use three backticks and the name of the language (```php) to set a multi-line block of code with syntax highlighting. Close it out with three more backticks at the end.

0 replies

MrTemple · 2021-02-03T19:14:02Z

MrTemple
Feb 3, 2021

WORKING SCRIPT

(As of this comment.)

Here's a complete working script. (Fixed a case-sensitivity bug in the set-cookie header.)

Just change your "login" and "password" to your tesla.com credentials and it will generate your update token. Confirmed to work in TeslaFi.com.

<?php

class Tesla
{
protected $apiBaseUrl = "https://owner-api.teslamotors.com/api/1";
protected $tokenUrl = 'https://owner-api.teslamotors.com/oauth/token';
protected $tokenUrlNew = 'https://auth.tesla.com/oauth2/v3/token';
protected $accessUrl = 'https://auth.tesla.com/oauth2/v3/authorize';
protected $accessToken;
protected $vehicleId = null;

public function __construct(string $accessToken = null)
{
    $this->accessToken = $accessToken;
}

public function setAccessToken(string $accessToken)
{
    $this->accessToken = $accessToken;
}

public function allData()
{
    return $this->sendRequest('/vehicle_data')['response'];
}

public function vehicles()
{
    return $this->sendRequest('/vehicles');
}

public function vehicle()
{
    return $this->sendRequest('')['response'];
}

public function setVehicleId(int $vehicleId)
{
    $this->vehicleId = $vehicleId;
}

public function setClientId(string $clientId)
{
    putenv('TESLA_CLIENT_ID=' . $clientId);
}

public function setClientSecret(string $clientSecret)
{
    putenv('TESLA_CLIENT_SECRET=' . $clientSecret);
}

public function mobileEnabled()
{
    return $this->sendRequest('/mobile_enabled')['response'];
}

public function chargeState()
{
    return $this->sendRequest('/data_request/charge_state')['response'];
}

public function climateState()
{
    return $this->sendRequest('/data_request/climate_state')['response'];
}

public function driveState()
{
    return $this->sendRequest('/data_request/drive_state')['response'];
}

public function guiSettings()
{
    return $this->sendRequest('/data_request/gui_settings')['response'];
}

public function vehicleState()
{
    return $this->sendRequest('/data_request/vehicle_state')['response'];
}

public function vehicleConfig()
{
    return $this->sendRequest('/data_request/vehicle_config')['response'];
}

public function wakeUp()
{
    return $this->sendRequest('/wake_up', [], 'POST')['response'];
}

public function startSoftwareUpdate( int $seconds = 0 )
{
    return $this->sendRequest('/command/schedule_software_update', [ 'offset_sec' => $seconds ], 'POST')['response'];
}

public function setValetMode(bool $active = false, int $pin = 0000)
{
    $params = [
        'on' => $active,
        'pin' => $pin
    ];

    return $this->sendRequest('/command/set_valet_mode', $params, 'POST')['response'];
}

public function resetValetPin()
{
    return $this->sendRequest('/command/reset_valet_pin', [], 'POST')['response'];
}

public function openChargePort()
{
    return $this->sendRequest('/command/charge_port_door_open', [], 'POST')['response'];
}

public function setChargeLimitToStandard()
{
    return $this->sendRequest('/command/charge_standard', [], 'POST')['response'];
}

public function setChargeLimitToMaxRange()
{
    return $this->sendRequest('/command/charge_max_range', [], 'POST')['response'];
}

public function setChargeLimit(int $percent = 90)
{
    $params = [
        'percent' => "$percent"
    ];
    return $this->sendRequest('/command/set_charge_limit', $params, 'POST')['response'];
}

public function startCharging()
{
    return $this->sendRequest('/command/charge_start', [], 'POST')['response'];
}

public function stopCharging()
{
    return $this->sendRequest('/command/charge_stop', [], 'POST')['response'];
}

public function flashLights()
{
    return $this->sendRequest('/command/flash_lights', [], 'POST')['response'];
}

public function honkHorn()
{
    return $this->sendRequest('/command/honk_horn', [], 'POST')['response'];
}

public function unlockDoors()
{
    return $this->sendRequest('/command/door_unlock', [], 'POST')['response'];
}

public function lockDoors()
{
    return $this->sendRequest('/command/door_lock', [], 'POST')['response'];
}

public function windowControl(string $state = 'close', int $lat = 0, int $lon = 0)
{
    return $this->sendRequest('/command/window_control', [ 'command' => $state, 'lat' => $lat, 'lon' => $lon ], 'POST')['response'];
}

public function setTemperature(float $driverDegreesCelcius = 20.0, float $passengerDegreesCelcius = 20.0)
{
    return $this->sendRequest('/command/set_temps?driver_temp=' . $driverDegreesCelcius . '&passenger_temp=' . $passengerDegreesCelcius, [], 'POST')['response'];
}

public function startHvac()
{
    return $this->sendRequest('/command/auto_conditioning_start', [], 'POST')['response'];
}

public function stopHvac()
{
    return $this->sendRequest('/command/auto_conditioning_stop', [], 'POST')['response'];
}

public function movePanoramicRoof(string $state = 'vent', int $percent = 50)
{
    return $this->sendRequest('/command/sun_roof_control?state=' . $state . '&percent=' . $percent, [], 'POST')['response'];
}

public function remoteStart(string $password = '')
{
    return $this->sendRequest('/command/remote_start_drive?password=' . $password, [], 'POST')['response'];
}

public function openTrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'rear' ], 'POST')['response'];
}

public function openFrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'front' ], 'POST')['response'];
}

public function setNavigation(string $location)
{
    $params = [
        'type' => 'share_ext_content_raw',
        'value' => [
            'android.intent.extra.TEXT' => $location
        ],
        'locale' => 'en-US',
        'timestamp_ms' => time(),
    ];
    return $this->sendRequest('/command/navigation_request', $params, 'POST')['response'];
}

public function startSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => True], 'POST')['response'];
}

public function stopSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => False], 'POST')['response'];
}

public function setSeatHeater(int $heater = 0, int $level = 0)
{
    return $this->sendRequest('/command/remote_seat_heater_request', ['heater' => $heater, 'level' => $level], 'POST')['response'];
}

 public function setTemps(float $driver = 21.0, float $passenger = 21.0)
{
    return $this->sendRequest('/command/set_temps', ['driver_temp' => $driver, 'passenger_temp' => $passenger], 'POST')['response'];
}

public function base64url_encode($data) { 
	return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); 
} 

public function getAccessToken(string $username, string $password)
{
###Step 1: Obtain the login page

	$code_verifier = substr(hash('sha512', mt_rand()), 0, 86);
	$state = $this->base64url_encode(substr(hash('sha256', mt_rand()), 0, 12));
	$code_challenge = $this->base64url_encode($code_verifier);
	
	$data =[
        'client_id' => 'ownerapi',
        'code_challenge' => $code_challenge,
        'code_challenge_method' => 'S256',
        'redirect_uri' => 'https://auth.tesla.com/void/callback',
        'response_type' => 'code',
        'scope' => 'openid email offline_access',
        'state' => $state,
    ];
    
	$GetUrl = $this->accessUrl.'?'.http_build_query ($data);

   
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
	$apiResult = curl_exec($ch);
    curl_close($ch);
    
    $dom = new DomDocument();
	@ $dom->loadHTML($apiResult);
	$child_elements = $dom->getElementsByTagName('input'); //DOMNodeList
	foreach( $child_elements as $h2 ) {
		$hiddeninputs[$h2->getAttribute('name')]=$h2->getAttribute('value');
	}
	$headers = [];
	$output = rtrim($apiResult);
	$data = explode("\n",$output);
	$headers['status'] = $data[0];
	array_shift($data);

	foreach($data as $part){
		//some headers will contain ":" character (Location for example), and the part after ":" will be lost, Thanks to @Emanuele
		$middle = explode(":",$part,2);

		//Supress warning message if $middle[1] does not exist, Thanks to @crayons
		if ( !isset($middle[1]) ) { $middle[1] = null; }
			$headers[trim($middle[0])] = trim($middle[1]);
	}
	$cookie = $headers['set-cookie'];
###Step 2: Obtain an authorization code

	$ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded','Cookie: '.$cookie));
	$postData = array(
		'_csrf' => $hiddeninputs['_csrf'],
		'_phase' => $hiddeninputs['_phase'],
		'_process' => $hiddeninputs['_process'],
		'transaction_id' => $hiddeninputs['transaction_id'],
		'cancel' =>$hiddeninputs['cancel'],
        'identity' => $username,
      	'credential' => $password
    );
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData));
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);


    $apiResult = curl_exec($ch);
    curl_close($ch);
	#print_r($apiResult);
	$code= explode('&',explode('https://auth.tesla.com/void/callback?code=',$apiResult)[1])[0];
	#print 'CODE'.$code;
###Step 3: Exchange authorization code for bearer token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'authorization_code',
    'client_id' => 'ownerapi',
    'code' => $code,
    'code_verifier' => $code_verifier,
    'redirect_uri' => 'https://auth.tesla.com/void/callback'
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

public function refreshAccessToken(string $refreshToken)
{
$tesla = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
curl_close($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$tesla->setClientId(trim($id[1]));
$tesla->setClientSecret(trim($secret[1]));

  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  #print 'XX '.getenv('TESLA_CLIENT_ID');exit;
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'refresh_token',
    'client_id' => 'ownerapi',
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
    'refresh_token' => $refreshToken,
    'scope' => 'openid email offline_access'
  ]));

  $apiResult = curl_exec($ch);
  $apiResultJson = json_decode($apiResult, true);

  curl_close($ch);
  #print_r($apiResult);exit;
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

protected function sendRequest(string $endpoint, array $params = [], string $method = 'GET')
{
    $ch = curl_init();

    if ($endpoint !== '/vehicles' && ! is_null($this->vehicleId)) {
        $endpoint = '/vehicles/' . $this->vehicleId . $endpoint;
    }

    curl_setopt($ch, CURLOPT_URL, $this->apiBaseUrl . $endpoint);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Accept: application/json',
        'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
        'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
        'Authorization: Bearer ' . $this->accessToken,
    ]);

    if ($method == 'POST' || $method == 'PUT' || $method == 'DELETE') {
        if ($method == 'POST') {
            curl_setopt($ch, CURLOPT_POST, true);
        }
        if (in_array($method, ['PUT', 'DELETE'])) {
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        }
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($params));
    }

    $apiResult = curl_exec($ch);
    $headerInfo = curl_getinfo($ch);
    $apiResultJson = json_decode($apiResult, true);
    curl_close($ch);

    $result = [];
    if ($apiResult === false) {
        $result['errorcode'] = 0;
        $result['errormessage'] = curl_error($ch);

        //print $result['errormessage'].' api<br>';
    }

    if (! in_array($headerInfo['http_code'], ['200', '201', '204'])) {
        $result['errorcode'] = $headerInfo['http_code'];
        if (isset($apiResult)) {
            $result['errormessage'] = $apiResult;
        }

        //print $result['errormessage'].' header<br>';;
    }
	
    return $apiResultJson ?? $apiResult;
    
}
}

$t = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$t->setClientId(trim($id[1]));
$t->setClientSecret(trim($secret[1]));

var_dump($t->getAccessToken("login", "password"));


?>

2 replies

ralfonso4 Feb 3, 2021
Author

Thanks for the 'set-cookie' fix!

MrTemple Feb 3, 2021

Thank YOU for the great work!

vulgarsonic · 2021-02-17T05:54:20Z

vulgarsonic
Feb 17, 2021

Struggling with this :(
Following errors are displayed when i run it:

I have curl enabled, same error if i try it at CLI or via IIS

PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 257
PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 258
PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 259
PHP Fatal error:  Uncaught ValueError: DOMDocument::loadHTML(): Argument #1 ($source) must not be empty in C:\inetpub\wwwroot\tesla.php:292
Stack trace:
#0 C:\inetpub\wwwroot\tesla.php(292): DOMDocument->loadHTML('')
#1 C:\inetpub\wwwroot\tesla.php(538): Tesla->getAccessToken('[myusername]', '[mypassword]')
#2 {main}
  thrown in C:\inetpub\wwwroot\tesla.php on line 292

0 replies

benjaminfrombe · 2021-02-24T10:30:04Z

benjaminfrombe
Feb 24, 2021

not working anymore since a couple of days ...

PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/teslac.php on line 323
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/teslac.php on line 350
PHP Notice:  Undefined index: refresh_token in /usr/local/scripts/tesla/teslac.php on line 351
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/teslac.php on line 375
array(2) {
  ["response"]=>
  string(17) "invalid_sso_token"
  ["refresh_token"]=>
  NULL
}

1 reply

BAngel87 Mar 9, 2021

Same here it is not working anymore:

array(2) {
["response"]=>
string(17) "invalid_sso_token"
["refresh_token"]=>
NULL
}

apach3guy · 2021-03-17T04:56:42Z

apach3guy
Mar 17, 2021

This discussion is forked here: #288

I fixed one problem with the above code, but now I'm getting HTTP 403 on step 3. Hopefully I'll have a fix by tomorrow.

2 replies

ralfonso4 Mar 17, 2021
Author

Please look here: #296 for my latest code

This discussion here is outdated

apach3guy Mar 18, 2021

Is that code working? It doesn't look like you are setting the cookie on steps 3 and 4. I couldn't get it to work without doing that.

Step 1-4 + refresh_token in PHP #283

Replies: 9 comments · 12 replies

ralfonso4 Feb 3, 2021 Author

timdorr Feb 3, 2021 Maintainer

WORKING SCRIPT

ralfonso4 Feb 3, 2021 Author

ralfonso4 Mar 17, 2021 Author

Replies: 9 comments 12 replies

ralfonso4
Feb 3, 2021
Author

timdorr
Feb 3, 2021
Maintainer

ralfonso4 Feb 3, 2021
Author

ralfonso4 Mar 17, 2021
Author