owlet_api icon indicating copy to clipboard operation
owlet_api copied to clipboard

EU uses different servers and API key

Open Mirarkitty opened this issue 5 years ago • 6 comments

I decompiled the Owlet-Europe app to get this info and it works fine with this change for me. Please add this support to the command.


...
    base_user_url = 'https://user-field-eu.aylanetworks.com/users/'
    base_properties_url = 'https://ads-field-eu.aylanetworks.com/apiv1/'
...
                    'app_id': "Owlet-Android-EU-rw-id",
                    'app_secret': "Owlet-Android-EU-OUJNUe5e79pPxvB0tMUaaUif-8o",

Mirarkitty avatar Jul 26 '19 05:07 Mirarkitty

Where did you find the info? I've decompiled the US Android app and cannot find the app_id or secret :( By the way, it's worth just using the US apk, the app is much better for some weird reason!

timdonovanuk avatar Aug 16 '19 09:08 timdonovanuk

I can't use the US apk? It doesn't even see my account. Ayla has a different user list for EU and US. :/

The EU app sucks so I'm even considering making my own but I haven't figured out how the notifications work.

The secret is base-64-encoded here:

sources/com/owletcare/owlet/BuildConfig.java: public static final String AYLA_APP_SECRET = "T3dsZXQtQW5kcm9pZC1FVS1PVUpOVWU1ZTc5cFB4dkIwdE1VYWFVaWYtOG8=";

Mirarkitty avatar Aug 17 '19 18:08 Mirarkitty

Can't you create a new account? I just used the US apk from the start, so registered I guess with a US account (used fake phone number). Although my Owlet came with a US plug, so maybe there are hardware differences and an EU Owlet wont even show up in the US app :(

There is no AYLA_APP_SECRET in the US apk. Damn. Been looking over and searching so many files but no luck.

timdonovanuk avatar Aug 17 '19 21:08 timdonovanuk

No, the base station just refused the US app, couldn't get through the registration. Also my units are blocked from using the new US app from the play store. I blame GDPR. Unit is through amazon.co.uk with an EU power supply. (The owlet uk store wouldn't ship to sweden, but amazon would.)

You could do it the alternative way and run https mitm. But it's a bit harder since you need to repack the apk to allow mitm attacks.

Mirarkitty avatar Aug 18 '19 17:08 Mirarkitty

Any idea if this is still working please?

freekeys avatar Nov 22 '20 14:11 freekeys

I'm still getting owlet data at least?

Mirarkitty avatar Nov 24 '20 15:11 Mirarkitty