SCENIC : Error: ('err.func.wired.forbidden', 'The access is forbidden') #1348

remo-tech · 2024-10-10T15:18:55Z

Hello,
I am trying to use this api to control the new Renault Scenic , I got the error :

$renault-api charge start
Error: ('err.func.wired.forbidden', 'The access is forbidden')

And he log :

2024-10-10 17:12:32,076 - renault_api.kamereon - DEBUG - Received Kamereon response 403 on GET to https://api-wired-prod-1-euw1.wrd-aws.com/commerce/v1/accounts/XXXXXXXXXXXXX/kamereon/kca/car-adapter/v1/cars/VF1XXXXXXXXXXX/charge-mode?country=FR: {"type":"FUNCTIONAL","messages":[{"code":"err.func.wired.forbidden","message":"The access is forbidden"}],"errors":[{"errorCode":"err.func.wired.forbidden","errorMessage":"The access is forbidden"}],"error_reference":"FUNCTIONAL"}

Any idea how to fix that ? The feature to start charging is working fine from the MyRenault app.

epenet · 2024-10-14T10:00:25Z

Sadly the Renault API is fully undocumented.
Hopefully someone can work out which endpoints get called - with what parameters...

remo-tech · 2024-10-14T10:02:42Z

Any clue on how I can to help find the endpoint / parameters ? Any documentation on how the current API was discovered ?

d4icon · 2024-10-14T11:38:57Z

As I said in the other repository:

To discover the endpoints and the parameters that are sent and received, I managed (after several days) to set up an android emulator with the Renault application.
Thanks to Frida, HttpTookit and (above all) to some scripts that I found how to bypass the ‘certificate pinning’ I managed to capture all the traffic of the application.
I've tried with a secondary account and it works.

The problem is that I'm afraid to add my car account, which is the one we are interested in to capture the call in question.

So my doubts are, @epenet

-Do you know if there could be any kind of blocking of the account if they detect something?
-Do you know if using your python application in console-cli can also cause some kind of temporary or indefinite ban?

In short, I'm a bit ‘afraid’ to use my original account, both for my testing environment and for yours.

Give me more information on this, to see if I can do a final test.

epenet · 2024-10-14T11:48:51Z

To discover the endpoints and the parameters that are sent and received, I managed (after several days) to set up an android emulator with the Renault application. Thanks to Frida, HttpTookit and (above all) to some scripts that I found how to bypass the ‘certificate pinning’ I managed to capture all the traffic of the application. I've tried with a secondary account and it works.

Originally it was much easier - I gave up when they went with certificate pinning.
If you have some time, it might be nice if you add a small guide to show how you managed it.

-Do you know if there could be any kind of blocking of the account if they detect something?
-Do you know if using your python application in console-cli can also cause some kind of temporary or indefinite ban?

They have rate-control in place, so if you do too many tests in a short time you may get rate-limited for a few hours.
I suggest to close the phone app and disable in HA while you make some tests

d4icon · 2024-10-14T12:57:41Z

To discover the endpoints and the parameters that are sent and received, I managed (after several days) to set up an android emulator with the Renault application. Thanks to Frida, HttpTookit and (above all) to some scripts that I found how to bypass the ‘certificate pinning’ I managed to capture all the traffic of the application. I've tried with a secondary account and it works.

Originally it was much easier - I gave up when they went with certificate pinning. If you have some time, it might be nice if you add a small guide to show how you managed it.

-Do you know if there could be any kind of blocking of the account if they detect something?
-Do you know if using your python application in console-cli can also cause some kind of temporary or indefinite ban?

They have rate-control in place, so if you do too many tests in a short time you may get rate-limited for a few hours. I suggest to close the phone app and disable in HA while you make some tests

I'm going to prepare everything again, since it's been a few weeks since the tests, and anyway, as you know it's a bit complex at the beginning, and I need to remember some things again.

Once I have it all working again .... I don't know where to share this with you. You tell me... I don't know if some things can be put here.
Let me know
Best regards

remo-tech · 2024-10-14T13:10:29Z

Ok I may have found something to help. I have decompiled the Android apk , and found a "ChargeEndpoint" class that seems to contains all endpoints linked to charge :

Here is the list :

GET : 
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/battery-inhibition-status
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charges
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-mode
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/settings
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-history?type=month

POST :
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/actions/charge-mode
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/actions/charge-schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/start

The charge/start endpoint seems different than the one use in renault-api , could this help you fix the problem ? Any clue on how to test this ?

d4icon · 2024-10-14T14:50:30Z

Ok I may have found something to help. I have decompiled the Android apk , and found a "ChargeEndpoint" class that seems to contains all endpoints linked to charge :

Here is the list :

GET : 
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/battery-inhibition-status
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charges
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-mode
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/settings
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/charge-history?type=month

POST :
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/actions/charge-mode
/commerce/v1/accounts/{id}/kamereon/kca/car-adapter/v1/cars/{vin}/actions/charge-schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/schedule
/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/start

The charge/start endpoint seems different than the one use in renault-api , could this help you fix the problem ? Any clue on how to test this ?

At first glance, it looks good...
Maybe it would be quicker right now to do a test with renault-api testing those enpodint.

remo-tech · 2024-10-17T07:12:19Z

So quick update, I have tried to modify renault-api locally to test 2 things. But at this point , all my attempts are unsuccessful ..

1 - Adding

  "XCB1SE": {  # SCENIC E-TECH
        "control-charge-via-kcm": True
    },

in models.py
=> Still 403

2- Changing endpoint to point to

/commerce/v1/accounts/{id}/kamereon/kcm/v1/vehicles/{vin}/charge/start

int renault_vehicle.py
=> Still 403

I will continue to investigate, but maybe there is something else that need to be done to get the access rights ?

remo-tech · 2024-10-17T12:40:24Z

Soo, I think I found the solution looking at the Android app logs : When I click the button "Start Charge" on the app, there is no specific request for this, but there is a request that change the charging schedule. It just set all programActivationStatus to false if they are True .

The request seems to wake up the vehicule, than if it is plugged in , it will start charge.
I think that there is no way to stop a charge at this point.

Here is an exemple that will work for on my Scenic E-TECH to wake it up, and start charging.

renault-api --log http  post-file "/commerce/v1/accounts/{account_id}/kamereon/kcm/v1/vehicles/{vin}/ev/settings?country=FR" .\settings_request.json

settings_request.json :

{
	"lastSettingsUpdateTimestamp": "2024-10-17T11:27:42.928046Z",
	"chargeModeRq": "SCHEDULED",
	"chargeTimeStart": "09:00",
	"chargeDuration": 600,
	"preconditioningTemperature": 21.0,
	"preconditioningHeatedStrgWheel": false,
	"preconditioningHeatedRightSeat": false,
	"preconditioningHeatedLeftSeat": false,
	"programs": [
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "11:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		},
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "13:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		},
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "15:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		}
	]
}

The thing is if we want to integrate this, the request need to first GET the settings, then POST the modified result to ensure no setting is lost (that is what is done on the MyRenault)

I could try to integrate this into renault-api for the scenic only, but I am not sure what is the best way ? With a specific setting for the Scenic ? A totally different command ?

@epenet , any preferences ?

d4icon · 2024-10-17T13:05:42Z

Soo, I think I found the solution looking at the Android app logs : When I click the button "Start Charge" on the app, there is no specific request for this, but there is a request that change the charging schedule. It just set all programActivationStatus to false if they are True .

The request seems to wake up the vehicule, than if it is plugged in , it will start charge. I think that there is no way to stop a charge at this point.

Here is an exemple that will work for on my Scenic E-TECH to wake it up, and start charging.
renault-api --log http  post-file "/commerce/v1/accounts/{account_id}/kamereon/kcm/v1/vehicles/{vin}/ev/settings?country=FR" .\settings_request.json
settings_request.json :
{
	"lastSettingsUpdateTimestamp": "2024-10-17T11:27:42.928046Z",
	"chargeModeRq": "SCHEDULED",
	"chargeTimeStart": "09:00",
	"chargeDuration": 600,
	"preconditioningTemperature": 21.0,
	"preconditioningHeatedStrgWheel": false,
	"preconditioningHeatedRightSeat": false,
	"preconditioningHeatedLeftSeat": false,
	"programs": [
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "11:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		},
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "13:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		},
		{
			"programActivationStatus": false,
			"programType": "CHARGE",
			"programDepartureTime": "15:00",
			"programActivationMonday": true,
			"programActivationTuesday": true,
			"programActivationWednesday": true,
			"programActivationThursday": true,
			"programActivationFriday": true,
			"programActivationSaturday": true,
			"programActivationSunday": true
		}
	]
}
The thing is if we want to integrate this, the request need to first GET the settings, then POST the modified result to ensure no setting is lost (that is what is done on the MyRenault)

I could try to integrate this into renault-api for the scenic only, but I am not sure what is the best way ? With a specific setting for the Scenic ? A totally different command ?

@epenet , any preferences ?

Interesting,
Thanks @remo-tech

On the other hand .... I understand that when you press the ‘load button’ in the application, in case you have ‘timetable schedules’ you are warned that all of them will be deleted. Can it be related to what you say?

On the other hand... You say you can't stop the upload?
There is a button for that... no? It works for me in the mobile app.

remo-tech · 2024-10-17T13:10:38Z

On the other hand .... I understand that when you press the ‘load button’ in the application, in case you have ‘timetable schedules’ you are warned that all of them will be deleted. Can it be related to what you say?

You mean the button to start the Charge ? Yes it disables all schedules (they are not deleted , just disabled)

On the other hand... You say you can't stop the upload? There is a button for that... no? It works for me in the mobile app.

If you mean stop de charging process, I personally don't have any button to do so on the MyRenault app for the Scenic. There is button to start, but if the vehicule is currently charging, there is no button to stop it....

d4icon · 2024-10-17T13:46:03Z

On the other hand .... I understand that when you press the ‘load button’ in the application, in case you have ‘timetable schedules’ you are warned that all of them will be deleted. Can it be related to what you say?

You mean the button to start the Charge ? Yes it disables all schedules (they are not deleted , just disabled)

On the other hand... You say you can't stop the upload? There is a button for that... no? It works for me in the mobile app.

If you mean stop de charging process, I personally don't have any button to do so on the MyRenault app for the Scenic. There is button to start, but if the vehicule is currently charging, there is no button to stop it....

oops...
really?
are you on the latest version (with the skin change) of the application?

I think that's why
In the previous one it was there, button to load and button to stop.

remo-tech · 2024-10-17T13:47:56Z

oops... really? are you on the latest version (with the skin change) of the application?

I think that's why In the previous one it was there, button to load and button to stop.

Yes latest version. The previous version had a toggle I think, but I am not sure it was really working ...

d4icon · 2024-10-17T13:50:35Z

oops... really? are you on the latest version (with the skin change) of the application?
I think that's why In the previous one it was there, button to load and button to stop.

Yes latest version. The previous version had a toggle I think, but I am not sure it was really working ...

Yes, it was a switch.
But yes, I can confirm that it worked for me.

d4icon · 2024-11-19T19:00:35Z

@remo-tech any news?

remo-tech · 2024-11-20T09:10:24Z

Not really. I have managed to make a quick & dirty python script that just send the settings_request I mentioned earlier to restart the charge when needed. But I did not had the time to update the renault-api for this

xontik · 2024-11-20T23:04:57Z

Hi ! Could you share your quick and dirty script? I'd really like to automate the charge restart after failure, and would gladly use any script in the meantime.

remo-tech · 2024-11-21T10:26:21Z

Hi ! Could you share your quick and dirty script? I'd really like to automate the charge restart after failure, and would gladly use any script in the meantime.

Here it is : https://gist.github.com/remo-tech/e9ffa42ddb19b94b21687ffd766dd910
Note : I have a Wallbox charger, so the script check the status of the wallbox to restart the charge only when needed. Look at the method RestartCharge.
Warning : The settings_request.json will clear all your charging schedules. If you want to keep them you will have to get the current one and resend them (that is what is blocking me for make the change in the renault-api )
(Please continue the discussion of the script on the gist if needed as it is a bit off topic)

jumpjack · 2024-11-27T18:29:29Z

Try this post:
/commerce/v1/accounts/{account_id}/kamereon/kcm/v1/vehicles/{vin}/charge/pause-resume

payload:

{
    "data": {
        "type": "ChargePauseResume",
        "attributes": {
            "action": "pause"
        }
    }
}

action must be "paused" or "resume", but I always get response "REJECTED"; other values for Action result in "Body has at least one wrongly formatted value,undefined", but if you specify "start" or "stop" you get :

Action must be either 'pause' or 'resume' but was 'start'

My terribly experimental/alpha/buggish page for testing: https://jumpjack.github.io/myRenaultLC/

(please use a temporary password)

jumpjack · 2024-11-27T18:31:11Z

-Do you know if there could be any kind of blocking of the account if they detect something?

There is a quota limit: if you send too many requests in a while, you get blocked for a while.

jumpjack · 2024-11-27T18:39:32Z

Time ago this GET worked:

charge-history?start=20220101&end=20220322&type=day

Now I get :-) :

{
    "message": "you should not be there but well done for the effort"
}

jumpjack · 2024-12-11T14:44:11Z

Any luck with charge history?

with endpoint "charges" i get "Not Found: There is no rows charge history for the vin", with "charrge-history" I get "you should not be there but well done for the effort", so what did they change?
The original android app keeps working normally.

remo-tech mentioned this issue Oct 14, 2024

Error "The access is forbidden" when "Pause Load" or "start load" home-assistant/core#122181

Open

epenet added the help wanted Extra attention is needed label Oct 14, 2024

epenet mentioned this issue Nov 8, 2024

Renault integration: Action "Stop charge button" not working home-assistant/core#129228

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

SCENIC : Error: ('err.func.wired.forbidden', 'The access is forbidden') #1348

SCENIC : Error: ('err.func.wired.forbidden', 'The access is forbidden') #1348

remo-tech commented Oct 10, 2024

epenet commented Oct 14, 2024

remo-tech commented Oct 14, 2024

d4icon commented Oct 14, 2024

epenet commented Oct 14, 2024

d4icon commented Oct 14, 2024

remo-tech commented Oct 14, 2024 •

edited

Loading

d4icon commented Oct 14, 2024

remo-tech commented Oct 17, 2024 •

edited

Loading

remo-tech commented Oct 17, 2024

d4icon commented Oct 17, 2024

remo-tech commented Oct 17, 2024 •

edited

Loading

d4icon commented Oct 17, 2024

remo-tech commented Oct 17, 2024

d4icon commented Oct 17, 2024

d4icon commented Nov 19, 2024

remo-tech commented Nov 20, 2024

xontik commented Nov 20, 2024

remo-tech commented Nov 21, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Dec 11, 2024

SCENIC : Error: ('err.func.wired.forbidden', 'The access is forbidden') #1348

SCENIC : Error: ('err.func.wired.forbidden', 'The access is forbidden') #1348

Comments

remo-tech commented Oct 10, 2024

epenet commented Oct 14, 2024

remo-tech commented Oct 14, 2024

d4icon commented Oct 14, 2024

epenet commented Oct 14, 2024

d4icon commented Oct 14, 2024

remo-tech commented Oct 14, 2024 • edited Loading

d4icon commented Oct 14, 2024

remo-tech commented Oct 17, 2024 • edited Loading

remo-tech commented Oct 17, 2024

d4icon commented Oct 17, 2024

remo-tech commented Oct 17, 2024 • edited Loading

d4icon commented Oct 17, 2024

remo-tech commented Oct 17, 2024

d4icon commented Oct 17, 2024

d4icon commented Nov 19, 2024

remo-tech commented Nov 20, 2024

xontik commented Nov 20, 2024

remo-tech commented Nov 21, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Nov 27, 2024

jumpjack commented Dec 11, 2024

remo-tech commented Oct 14, 2024 •

edited

Loading

remo-tech commented Oct 17, 2024 •

edited

Loading

remo-tech commented Oct 17, 2024 •

edited

Loading