Step 1-4 + refresh_token in PHP #283

ralfonso4 · 2021-02-03T03:13:08Z

ralfonso4
Feb 3, 2021

Just my quick and dirty version - works so far

EDIT: snipppp Code snippp
The code in the next comment is better

ralfonso4 · 2021-02-03T09:53:46Z

ralfonso4
Feb 3, 2021
Author

1 reply

sam070266 Feb 7, 2021

When I run this on a Windows 10 machine I get the following error. Am I doing something daft ?

Fatal error: Uncaught Error: Call to undefined function curl_init() in C:\PHP\generateV3TeslaRefreshToken1.php:509
Stack trace:
#0 {main}
thrown in C:\PHP\generateV3TeslaRefreshToken1.php on line 509

benjaminfrombe · 2021-02-03T15:36:31Z

benjaminfrombe
Feb 3, 2021

can't get this to work. Could you please provide a complete script ? I tried adding a class and adding base64url functions but I still get following notices and no result:

PHP Notice:  Undefined property: Teslaauth::$accessUrl in /usr/local/scripts/tesla/gt.php on line 30
PHP Notice:  Undefined index: Set-Cookie in /usr/local/scripts/tesla/gt.php on line 61
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 72
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 72
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 73
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 73
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 74
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 74
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 75
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 75
PHP Notice:  Undefined variable: hiddeninputs in /usr/local/scripts/tesla/gt.php on line 76
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 76
PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/gt.php on line 87
PHP Notice:  Undefined property: Teslaauth::$tokenUrlNew in /usr/local/scripts/tesla/gt.php on line 92
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 114
PHP Notice:  Trying to access array offset on value of type null in /usr/local/scripts/tesla/gt.php on line 115
PHP Notice:  Undefined property: Teslaauth::$tokenUrl in /usr/local/scripts/tesla/gt.php on line 119
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 139
PHP Notice:  Array to string conversion in /usr/local/scripts/tesla/gt.php on line 217

0 replies

benjaminfrombe · 2021-02-03T16:31:21Z

benjaminfrombe
Feb 3, 2021

ok thanks, that explains a lot :) But still an issue:

so I tried :

$t = new Tesla;
var_dump($t->getAccessToken("myusername", "mypassword"));

but I get:

PHP Notice:  Undefined index: Set-Cookie in /usr/local/scripts/tesla/gt.php on line 291
PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/gt.php on line 317
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 344
PHP Notice:  Undefined index: refresh_token in /usr/local/scripts/tesla/gt.php on line 345
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/gt.php on line 369
array(2) {
  ["response"]=>
  string(17) "invalid_sso_token"
  ["refresh_token"]=>
  NULL
}

0 replies

benjaminfrombe · 2021-02-03T17:14:21Z

benjaminfrombe
Feb 3, 2021

I copy/pasted the whole lib in there. Must be forgetting something stupid ...
To be complete, this is the total script including lib:

<?php

class Tesla
{
protected $apiBaseUrl = "https://owner-api.teslamotors.com/api/1";
protected $tokenUrl = 'https://owner-api.teslamotors.com/oauth/token';
protected $tokenUrlNew = 'https://auth.tesla.com/oauth2/v3/token';
protected $accessUrl = 'https://auth.tesla.com/oauth2/v3/authorize';
protected $accessToken;
protected $vehicleId = null;

public function __construct(string $accessToken = null)
{
    $this->accessToken = $accessToken;
}

public function setAccessToken(string $accessToken)
{
    $this->accessToken = $accessToken;
}

public function allData()
{
    return $this->sendRequest('/vehicle_data')['response'];
}

public function vehicles()
{
    return $this->sendRequest('/vehicles');
}

public function vehicle()
{
    return $this->sendRequest('')['response'];
}

public function setVehicleId(int $vehicleId)
{
    $this->vehicleId = $vehicleId;
}

public function setClientId(string $clientId)
{
    putenv('TESLA_CLIENT_ID=' . $clientId);
}

public function setClientSecret(string $clientSecret)
{
    putenv('TESLA_CLIENT_SECRET=' . $clientSecret);
}

public function mobileEnabled()
{
    return $this->sendRequest('/mobile_enabled')['response'];
}

public function chargeState()
{
    return $this->sendRequest('/data_request/charge_state')['response'];
}

public function climateState()
{
    return $this->sendRequest('/data_request/climate_state')['response'];
}

public function driveState()
{
    return $this->sendRequest('/data_request/drive_state')['response'];
}

public function guiSettings()
{
    return $this->sendRequest('/data_request/gui_settings')['response'];
}

public function vehicleState()
{
    return $this->sendRequest('/data_request/vehicle_state')['response'];
}

public function vehicleConfig()
{
    return $this->sendRequest('/data_request/vehicle_config')['response'];
}

public function wakeUp()
{
    return $this->sendRequest('/wake_up', [], 'POST')['response'];
}

public function startSoftwareUpdate( int $seconds = 0 )
{
    return $this->sendRequest('/command/schedule_software_update', [ 'offset_sec' => $seconds ], 'POST')['response'];
}

public function setValetMode(bool $active = false, int $pin = 0000)
{
    $params = [
        'on' => $active,
        'pin' => $pin
    ];

    return $this->sendRequest('/command/set_valet_mode', $params, 'POST')['response'];
}

public function resetValetPin()
{
    return $this->sendRequest('/command/reset_valet_pin', [], 'POST')['response'];
}

public function openChargePort()
{
    return $this->sendRequest('/command/charge_port_door_open', [], 'POST')['response'];
}

public function setChargeLimitToStandard()
{
    return $this->sendRequest('/command/charge_standard', [], 'POST')['response'];
}

public function setChargeLimitToMaxRange()
{
    return $this->sendRequest('/command/charge_max_range', [], 'POST')['response'];
}

public function setChargeLimit(int $percent = 90)
{
    $params = [
        'percent' => "$percent"
    ];
    return $this->sendRequest('/command/set_charge_limit', $params, 'POST')['response'];
}

public function startCharging()
{
    return $this->sendRequest('/command/charge_start', [], 'POST')['response'];
}

public function stopCharging()
{
    return $this->sendRequest('/command/charge_stop', [], 'POST')['response'];
}

public function flashLights()
{
    return $this->sendRequest('/command/flash_lights', [], 'POST')['response'];
}

public function honkHorn()
{
    return $this->sendRequest('/command/honk_horn', [], 'POST')['response'];
}

public function unlockDoors()
{
    return $this->sendRequest('/command/door_unlock', [], 'POST')['response'];
}

public function lockDoors()
{
    return $this->sendRequest('/command/door_lock', [], 'POST')['response'];
}

public function windowControl(string $state = 'close', int $lat = 0, int $lon = 0)
{
    return $this->sendRequest('/command/window_control', [ 'command' => $state, 'lat' => $lat, 'lon' => $lon ], 'POST')['response'];
}

public function setTemperature(float $driverDegreesCelcius = 20.0, float $passengerDegreesCelcius = 20.0)
{
    return $this->sendRequest('/command/set_temps?driver_temp=' . $driverDegreesCelcius . '&passenger_temp=' . $passengerDegreesCelcius, [], 'POST')['response'];
}

public function startHvac()
{
    return $this->sendRequest('/command/auto_conditioning_start', [], 'POST')['response'];
}

public function stopHvac()
{
    return $this->sendRequest('/command/auto_conditioning_stop', [], 'POST')['response'];
}

public function movePanoramicRoof(string $state = 'vent', int $percent = 50)
{
    return $this->sendRequest('/command/sun_roof_control?state=' . $state . '&percent=' . $percent, [], 'POST')['response'];
}

public function remoteStart(string $password = '')
{
    return $this->sendRequest('/command/remote_start_drive?password=' . $password, [], 'POST')['response'];
}

public function openTrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'rear' ], 'POST')['response'];
}

public function openFrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'front' ], 'POST')['response'];
}

public function setNavigation(string $location)
{
    $params = [
        'type' => 'share_ext_content_raw',
        'value' => [
            'android.intent.extra.TEXT' => $location
        ],
        'locale' => 'en-US',
        'timestamp_ms' => time(),
    ];
    return $this->sendRequest('/command/navigation_request', $params, 'POST')['response'];
}

public function startSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => True], 'POST')['response'];
}

public function stopSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => False], 'POST')['response'];
}

public function setSeatHeater(int $heater = 0, int $level = 0)
{
    return $this->sendRequest('/command/remote_seat_heater_request', ['heater' => $heater, 'level' => $level], 'POST')['response'];
}

 public function setTemps(float $driver = 21.0, float $passenger = 21.0)
{
    return $this->sendRequest('/command/set_temps', ['driver_temp' => $driver, 'passenger_temp' => $passenger], 'POST')['response'];
}

public function base64url_encode($data) { 
	return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); 
} 

public function getAccessToken(string $username, string $password)
{
###Step 1: Obtain the login page

	$code_verifier = substr(hash('sha512', mt_rand()), 0, 86);
	$state = $this->base64url_encode(substr(hash('sha256', mt_rand()), 0, 12));
	$code_challenge = $this->base64url_encode($code_verifier);
	
	$data =[
        'client_id' => 'ownerapi',
        'code_challenge' => $code_challenge,
        'code_challenge_method' => 'S256',
        'redirect_uri' => 'https://auth.tesla.com/void/callback',
        'response_type' => 'code',
        'scope' => 'openid email offline_access',
        'state' => $state,
    ];
    
	$GetUrl = $this->accessUrl.'?'.http_build_query ($data);

   
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
	$apiResult = curl_exec($ch);
    curl_close($ch);
    
    $dom = new DomDocument();
	@ $dom->loadHTML($apiResult);
	$child_elements = $dom->getElementsByTagName('input'); //DOMNodeList
	foreach( $child_elements as $h2 ) {
		$hiddeninputs[$h2->getAttribute('name')]=$h2->getAttribute('value');
	}
	$headers = [];
	$output = rtrim($apiResult);
	$data = explode("\n",$output);
	$headers['status'] = $data[0];
	array_shift($data);

	foreach($data as $part){
		//some headers will contain ":" character (Location for example), and the part after ":" will be lost, Thanks to @Emanuele
		$middle = explode(":",$part,2);

		//Supress warning message if $middle[1] does not exist, Thanks to @crayons
		if ( !isset($middle[1]) ) { $middle[1] = null; }
			$headers[trim($middle[0])] = trim($middle[1]);
	}
	$cookie = $headers['Set-Cookie'];
###Step 2: Obtain an authorization code

	$ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded','Cookie: '.$cookie));
	$postData = array(
		'_csrf' => $hiddeninputs['_csrf'],
		'_phase' => $hiddeninputs['_phase'],
		'_process' => $hiddeninputs['_process'],
		'transaction_id' => $hiddeninputs['transaction_id'],
		'cancel' =>$hiddeninputs['cancel'],
        'identity' => $username,
      	'credential' => $password
    );
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData));
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);


    $apiResult = curl_exec($ch);
    curl_close($ch);
	#print_r($apiResult);
	$code= explode('&',explode('https://auth.tesla.com/void/callback?code=',$apiResult)[1])[0];
	#print 'CODE'.$code;
###Step 3: Exchange authorization code for bearer token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'authorization_code',
    'client_id' => 'ownerapi',
    'code' => $code,
    'code_verifier' => $code_verifier,
    'redirect_uri' => 'https://auth.tesla.com/void/callback'
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

public function refreshAccessToken(string $refreshToken)
{
$tesla = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
curl_close($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$tesla->setClientId(trim($id[1]));
$tesla->setClientSecret(trim($secret[1]));

  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  #print 'XX '.getenv('TESLA_CLIENT_ID');exit;
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'refresh_token',
    'client_id' => 'ownerapi',
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
    'refresh_token' => $refreshToken,
    'scope' => 'openid email offline_access'
  ]));

  $apiResult = curl_exec($ch);
  $apiResultJson = json_decode($apiResult, true);

  curl_close($ch);
  #print_r($apiResult);exit;
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

protected function sendRequest(string $endpoint, array $params = [], string $method = 'GET')
{
    $ch = curl_init();

    if ($endpoint !== '/vehicles' && ! is_null($this->vehicleId)) {
        $endpoint = '/vehicles/' . $this->vehicleId . $endpoint;
    }

    curl_setopt($ch, CURLOPT_URL, $this->apiBaseUrl . $endpoint);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Accept: application/json',
        'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
        'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
        'Authorization: Bearer ' . $this->accessToken,
    ]);

    if ($method == 'POST' || $method == 'PUT' || $method == 'DELETE') {
        if ($method == 'POST') {
            curl_setopt($ch, CURLOPT_POST, true);
        }
        if (in_array($method, ['PUT', 'DELETE'])) {
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        }
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($params));
    }

    $apiResult = curl_exec($ch);
    $headerInfo = curl_getinfo($ch);
    $apiResultJson = json_decode($apiResult, true);
    curl_close($ch);

    $result = [];
    if ($apiResult === false) {
        $result['errorcode'] = 0;
        $result['errormessage'] = curl_error($ch);

        //print $result['errormessage'].' api<br>';
    }

    if (! in_array($headerInfo['http_code'], ['200', '201', '204'])) {
        $result['errorcode'] = $headerInfo['http_code'];
        if (isset($apiResult)) {
            $result['errormessage'] = $apiResult;
        }

        //print $result['errormessage'].' header<br>';;
    }
	
    return $apiResultJson ?? $apiResult;
    
}
}

$t = new Tesla;
var_dump($t->getAccessToken("login", "password"));


?>

6 replies

MrTemple Feb 3, 2021

I can confirm it's getting the right ClientId and ClientSecret from pastebin. So I'm not sure where else may be going wrong.

string(64) "81527cff06843c8634fdc09e8ac0abefb46ac849f38fe1e431c2ef2106796384" // ClientId
string(64) "c7257eb71a564034f9419ee651c7d0e5f7aa6bfbd18bafb5c5c033b093bb2fa3" // ClientSecret

MrTemple Feb 3, 2021

Updating as I go with my investigation (in case anybody else is working on it)...

Looks like something's wrong in Step 3 at least. Here's the Step 3 API response:

//  Step 3:   var_dump($apiResultJson);
array(3) {
  ["error"]=>
  string(15) "invalid_request"
  ["error_description"]=>
  string(21) "Internal server error"
  ["error_uri"]=>
  string(89) "https://auth.tesla.com/error/reference/327b9d0e-04cd-4e31-882e-9942bcc32521-1612377782219"
}

MrTemple Feb 3, 2021

Looks like the response we're getting from Step 2 does not contain the expected redirect:
auth.tesla.com/void/callback?code=c7dc7f8196d001632558d6632558d6243632558d6b6d60f82c0632558d67

Instead we're getting back:

Found. Redirecting to https://auth.tesla.com/oauth2/v3/authorize?client_id=ownerapi&code_challenge=MTRmMTlhMmMzNmM5MzBiNjE2OTY5NDMyODRlY2I5ZWJkZTAwMzZhNWI0NGVlZGExMGZmYjdjNGYxYmYz...&code_challenge_method=...

And when I parse that new response using the code_challenge as the code from Step 2 for Step 3 I get the following response back:

array(3) {
  ["error"]=>
  string(13) "invalid_grant"
  ["error_description"]=>
  string(21) "Internal server error"
  ["error_uri"]=>
  string(89) "https://auth.tesla.com/error/reference/1307012f-35dc-462d-b65b-990f287833d6-1612378547374"
}

MrTemple Feb 3, 2021

Ah, I'm getting a NULL $cookie value out of Step 1. Investigating...

MrTemple Feb 3, 2021

GOT IT!

The cookie header is case sensitive. It's should be:

$cookie = $headers['set-cookie']; // works
// $cookie = $headers['Set-Cookie']; // doesn't work

timdorr · 2021-02-03T18:55:06Z

timdorr
Feb 3, 2021
Maintainer

Just FYI, I added code fences around all the example code in this thread. For future reference, you can use three backticks and the name of the language (```php) to set a multi-line block of code with syntax highlighting. Close it out with three more backticks at the end.

0 replies

MrTemple · 2021-02-03T19:14:02Z

MrTemple
Feb 3, 2021

WORKING SCRIPT

(As of this comment.)

Here's a complete working script. (Fixed a case-sensitivity bug in the set-cookie header.)

Just change your "login" and "password" to your tesla.com credentials and it will generate your update token. Confirmed to work in TeslaFi.com.

<?php

class Tesla
{
protected $apiBaseUrl = "https://owner-api.teslamotors.com/api/1";
protected $tokenUrl = 'https://owner-api.teslamotors.com/oauth/token';
protected $tokenUrlNew = 'https://auth.tesla.com/oauth2/v3/token';
protected $accessUrl = 'https://auth.tesla.com/oauth2/v3/authorize';
protected $accessToken;
protected $vehicleId = null;

public function __construct(string $accessToken = null)
{
    $this->accessToken = $accessToken;
}

public function setAccessToken(string $accessToken)
{
    $this->accessToken = $accessToken;
}

public function allData()
{
    return $this->sendRequest('/vehicle_data')['response'];
}

public function vehicles()
{
    return $this->sendRequest('/vehicles');
}

public function vehicle()
{
    return $this->sendRequest('')['response'];
}

public function setVehicleId(int $vehicleId)
{
    $this->vehicleId = $vehicleId;
}

public function setClientId(string $clientId)
{
    putenv('TESLA_CLIENT_ID=' . $clientId);
}

public function setClientSecret(string $clientSecret)
{
    putenv('TESLA_CLIENT_SECRET=' . $clientSecret);
}

public function mobileEnabled()
{
    return $this->sendRequest('/mobile_enabled')['response'];
}

public function chargeState()
{
    return $this->sendRequest('/data_request/charge_state')['response'];
}

public function climateState()
{
    return $this->sendRequest('/data_request/climate_state')['response'];
}

public function driveState()
{
    return $this->sendRequest('/data_request/drive_state')['response'];
}

public function guiSettings()
{
    return $this->sendRequest('/data_request/gui_settings')['response'];
}

public function vehicleState()
{
    return $this->sendRequest('/data_request/vehicle_state')['response'];
}

public function vehicleConfig()
{
    return $this->sendRequest('/data_request/vehicle_config')['response'];
}

public function wakeUp()
{
    return $this->sendRequest('/wake_up', [], 'POST')['response'];
}

public function startSoftwareUpdate( int $seconds = 0 )
{
    return $this->sendRequest('/command/schedule_software_update', [ 'offset_sec' => $seconds ], 'POST')['response'];
}

public function setValetMode(bool $active = false, int $pin = 0000)
{
    $params = [
        'on' => $active,
        'pin' => $pin
    ];

    return $this->sendRequest('/command/set_valet_mode', $params, 'POST')['response'];
}

public function resetValetPin()
{
    return $this->sendRequest('/command/reset_valet_pin', [], 'POST')['response'];
}

public function openChargePort()
{
    return $this->sendRequest('/command/charge_port_door_open', [], 'POST')['response'];
}

public function setChargeLimitToStandard()
{
    return $this->sendRequest('/command/charge_standard', [], 'POST')['response'];
}

public function setChargeLimitToMaxRange()
{
    return $this->sendRequest('/command/charge_max_range', [], 'POST')['response'];
}

public function setChargeLimit(int $percent = 90)
{
    $params = [
        'percent' => "$percent"
    ];
    return $this->sendRequest('/command/set_charge_limit', $params, 'POST')['response'];
}

public function startCharging()
{
    return $this->sendRequest('/command/charge_start', [], 'POST')['response'];
}

public function stopCharging()
{
    return $this->sendRequest('/command/charge_stop', [], 'POST')['response'];
}

public function flashLights()
{
    return $this->sendRequest('/command/flash_lights', [], 'POST')['response'];
}

public function honkHorn()
{
    return $this->sendRequest('/command/honk_horn', [], 'POST')['response'];
}

public function unlockDoors()
{
    return $this->sendRequest('/command/door_unlock', [], 'POST')['response'];
}

public function lockDoors()
{
    return $this->sendRequest('/command/door_lock', [], 'POST')['response'];
}

public function windowControl(string $state = 'close', int $lat = 0, int $lon = 0)
{
    return $this->sendRequest('/command/window_control', [ 'command' => $state, 'lat' => $lat, 'lon' => $lon ], 'POST')['response'];
}

public function setTemperature(float $driverDegreesCelcius = 20.0, float $passengerDegreesCelcius = 20.0)
{
    return $this->sendRequest('/command/set_temps?driver_temp=' . $driverDegreesCelcius . '&passenger_temp=' . $passengerDegreesCelcius, [], 'POST')['response'];
}

public function startHvac()
{
    return $this->sendRequest('/command/auto_conditioning_start', [], 'POST')['response'];
}

public function stopHvac()
{
    return $this->sendRequest('/command/auto_conditioning_stop', [], 'POST')['response'];
}

public function movePanoramicRoof(string $state = 'vent', int $percent = 50)
{
    return $this->sendRequest('/command/sun_roof_control?state=' . $state . '&percent=' . $percent, [], 'POST')['response'];
}

public function remoteStart(string $password = '')
{
    return $this->sendRequest('/command/remote_start_drive?password=' . $password, [], 'POST')['response'];
}

public function openTrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'rear' ], 'POST')['response'];
}

public function openFrunk()
{
    return $this->sendRequest('/command/actuate_trunk', [ 'which_trunk' => 'front' ], 'POST')['response'];
}

public function setNavigation(string $location)
{
    $params = [
        'type' => 'share_ext_content_raw',
        'value' => [
            'android.intent.extra.TEXT' => $location
        ],
        'locale' => 'en-US',
        'timestamp_ms' => time(),
    ];
    return $this->sendRequest('/command/navigation_request', $params, 'POST')['response'];
}

public function startSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => True], 'POST')['response'];
}

public function stopSentry()
{
    return $this->sendRequest('/command/set_sentry_mode', [ 'on' => False], 'POST')['response'];
}

public function setSeatHeater(int $heater = 0, int $level = 0)
{
    return $this->sendRequest('/command/remote_seat_heater_request', ['heater' => $heater, 'level' => $level], 'POST')['response'];
}

 public function setTemps(float $driver = 21.0, float $passenger = 21.0)
{
    return $this->sendRequest('/command/set_temps', ['driver_temp' => $driver, 'passenger_temp' => $passenger], 'POST')['response'];
}

public function base64url_encode($data) { 
	return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); 
} 

public function getAccessToken(string $username, string $password)
{
###Step 1: Obtain the login page

	$code_verifier = substr(hash('sha512', mt_rand()), 0, 86);
	$state = $this->base64url_encode(substr(hash('sha256', mt_rand()), 0, 12));
	$code_challenge = $this->base64url_encode($code_verifier);
	
	$data =[
        'client_id' => 'ownerapi',
        'code_challenge' => $code_challenge,
        'code_challenge_method' => 'S256',
        'redirect_uri' => 'https://auth.tesla.com/void/callback',
        'response_type' => 'code',
        'scope' => 'openid email offline_access',
        'state' => $state,
    ];
    
	$GetUrl = $this->accessUrl.'?'.http_build_query ($data);

   
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
	$apiResult = curl_exec($ch);
    curl_close($ch);
    
    $dom = new DomDocument();
	@ $dom->loadHTML($apiResult);
	$child_elements = $dom->getElementsByTagName('input'); //DOMNodeList
	foreach( $child_elements as $h2 ) {
		$hiddeninputs[$h2->getAttribute('name')]=$h2->getAttribute('value');
	}
	$headers = [];
	$output = rtrim($apiResult);
	$data = explode("\n",$output);
	$headers['status'] = $data[0];
	array_shift($data);

	foreach($data as $part){
		//some headers will contain ":" character (Location for example), and the part after ":" will be lost, Thanks to @Emanuele
		$middle = explode(":",$part,2);

		//Supress warning message if $middle[1] does not exist, Thanks to @crayons
		if ( !isset($middle[1]) ) { $middle[1] = null; }
			$headers[trim($middle[0])] = trim($middle[1]);
	}
	$cookie = $headers['set-cookie'];
###Step 2: Obtain an authorization code

	$ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $GetUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded','Cookie: '.$cookie));
	$postData = array(
		'_csrf' => $hiddeninputs['_csrf'],
		'_phase' => $hiddeninputs['_phase'],
		'_process' => $hiddeninputs['_process'],
		'transaction_id' => $hiddeninputs['transaction_id'],
		'cancel' =>$hiddeninputs['cancel'],
        'identity' => $username,
      	'credential' => $password
    );
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData));
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);


    $apiResult = curl_exec($ch);
    curl_close($ch);
	#print_r($apiResult);
	$code= explode('&',explode('https://auth.tesla.com/void/callback?code=',$apiResult)[1])[0];
	#print 'CODE'.$code;
###Step 3: Exchange authorization code for bearer token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'authorization_code',
    'client_id' => 'ownerapi',
    'code' => $code,
    'code_verifier' => $code_verifier,
    'redirect_uri' => 'https://auth.tesla.com/void/callback'
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

public function refreshAccessToken(string $refreshToken)
{
$tesla = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
curl_close($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$tesla->setClientId(trim($id[1]));
$tesla->setClientSecret(trim($secret[1]));

  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrlNew);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'Accept: application/json',
    'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
    'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
  ]);
  #print 'XX '.getenv('TESLA_CLIENT_ID');exit;
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'refresh_token',
    'client_id' => 'ownerapi',
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
    'refresh_token' => $refreshToken,
    'scope' => 'openid email offline_access'
  ]));

  $apiResult = curl_exec($ch);
  $apiResultJson = json_decode($apiResult, true);

  curl_close($ch);
  #print_r($apiResult);exit;
  
  $apiResultJson = json_decode($apiResult, true);
  $BearerToken = $apiResultJson['access_token'];
  $RefreshToken = $apiResultJson['refresh_token'];
###Step 4: Exchange bearer token for access token

	$ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $this->tokenUrl);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  curl_setopt($ch, CURLOPT_TIMEOUT, 30);
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer '.$BearerToken,
    'Content-Type: application/json'
  ]);
  curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
    'client_id' => getenv('TESLA_CLIENT_ID'),
    'client_secret' => getenv('TESLA_CLIENT_SECRET'),
  ]));

  $apiResult = curl_exec($ch);
  curl_close($ch);
  
  $apiResultJson = json_decode($apiResult, true);
  $apiResultJson['refresh_token']=$RefreshToken;
  #print_r($apiResultJson);exit;
  $this->accessToken = $apiResultJson['access_token'];

    return $apiResultJson;
}

protected function sendRequest(string $endpoint, array $params = [], string $method = 'GET')
{
    $ch = curl_init();

    if ($endpoint !== '/vehicles' && ! is_null($this->vehicleId)) {
        $endpoint = '/vehicles/' . $this->vehicleId . $endpoint;
    }

    curl_setopt($ch, CURLOPT_URL, $this->apiBaseUrl . $endpoint);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Accept: application/json',
        'User-Agent: Mozilla/5.0 (Linux; Android 9.0.0; VS985 4G Build/LRX21Y; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36',
        'X-Tesla-User-Agent: TeslaApp/3.4.4-350/fad4a582e/android/9.0.0',
        'Authorization: Bearer ' . $this->accessToken,
    ]);

    if ($method == 'POST' || $method == 'PUT' || $method == 'DELETE') {
        if ($method == 'POST') {
            curl_setopt($ch, CURLOPT_POST, true);
        }
        if (in_array($method, ['PUT', 'DELETE'])) {
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        }
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($params));
    }

    $apiResult = curl_exec($ch);
    $headerInfo = curl_getinfo($ch);
    $apiResultJson = json_decode($apiResult, true);
    curl_close($ch);

    $result = [];
    if ($apiResult === false) {
        $result['errorcode'] = 0;
        $result['errormessage'] = curl_error($ch);

        //print $result['errormessage'].' api<br>';
    }

    if (! in_array($headerInfo['http_code'], ['200', '201', '204'])) {
        $result['errorcode'] = $headerInfo['http_code'];
        if (isset($apiResult)) {
            $result['errormessage'] = $apiResult;
        }

        //print $result['errormessage'].' header<br>';;
    }
	
    return $apiResultJson ?? $apiResult;
    
}
}

$t = new Tesla();
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://pastebin.com/raw/pS7Z6yyP');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
$api = explode(PHP_EOL,$result);
$id=explode('=',$api[0]);
$secret=explode('=',$api[1]);
$t->setClientId(trim($id[1]));
$t->setClientSecret(trim($secret[1]));

var_dump($t->getAccessToken("login", "password"));


?>

2 replies

ralfonso4 Feb 3, 2021
Author

Thanks for the 'set-cookie' fix!

MrTemple Feb 3, 2021

Thank YOU for the great work!

vulgarsonic · 2021-02-17T05:54:20Z

vulgarsonic
Feb 17, 2021

Struggling with this :(
Following errors are displayed when i run it:

I have curl enabled, same error if i try it at CLI or via IIS

PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 257
PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 258
PHP Warning:  Undefined array key 1 in C:\inetpub\wwwroot\tesla.php on line 259
PHP Fatal error:  Uncaught ValueError: DOMDocument::loadHTML(): Argument #1 ($source) must not be empty in C:\inetpub\wwwroot\tesla.php:292
Stack trace:
#0 C:\inetpub\wwwroot\tesla.php(292): DOMDocument->loadHTML('')
#1 C:\inetpub\wwwroot\tesla.php(538): Tesla->getAccessToken('[myusername]', '[mypassword]')
#2 {main}
  thrown in C:\inetpub\wwwroot\tesla.php on line 292

0 replies

benjaminfrombe · 2021-02-24T10:30:04Z

benjaminfrombe
Feb 24, 2021

not working anymore since a couple of days ...

PHP Notice:  Undefined offset: 1 in /usr/local/scripts/tesla/teslac.php on line 323
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/teslac.php on line 350
PHP Notice:  Undefined index: refresh_token in /usr/local/scripts/tesla/teslac.php on line 351
PHP Notice:  Undefined index: access_token in /usr/local/scripts/tesla/teslac.php on line 375
array(2) {
  ["response"]=>
  string(17) "invalid_sso_token"
  ["refresh_token"]=>
  NULL
}

1 reply

BAngel87 Mar 9, 2021

Same here it is not working anymore:

array(2) {
["response"]=>
string(17) "invalid_sso_token"
["refresh_token"]=>
NULL
}

apach3guy · 2021-03-17T04:56:42Z

apach3guy
Mar 17, 2021

This discussion is forked here: #288

I fixed one problem with the above code, but now I'm getting HTTP 403 on step 3. Hopefully I'll have a fix by tomorrow.

2 replies

ralfonso4 Mar 17, 2021
Author

Please look here: #296 for my latest code

This discussion here is outdated

apach3guy Mar 18, 2021

Is that code working? It doesn't look like you are setting the cookie on steps 3 and 4. I couldn't get it to work without doing that.

Uh oh!

Step 1-4 + refresh_token in PHP #283

Uh oh!

Uh oh!

Replies: 9 comments · 12 replies

Uh oh!

ralfonso4 Feb 3, 2021 Author

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

timdorr Feb 3, 2021 Maintainer

Uh oh!

WORKING SCRIPT

Uh oh!

ralfonso4 Feb 3, 2021 Author

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ralfonso4 Mar 17, 2021 Author

Uh oh!

Replies: 9 comments 12 replies

ralfonso4
Feb 3, 2021
Author

timdorr
Feb 3, 2021
Maintainer

ralfonso4 Feb 3, 2021
Author

ralfonso4 Mar 17, 2021
Author