AirCon
AirCon copied to clipboard
deiger
AEH-W4G2
Stumbled upon this looking to connect my new Hisense AC to home assistant. It has the W4G2 wifi module and uses the ConnectLife app. Nothing really comes up for this module when googling. I have attempted adding it to the other apps but the WiFi network is HIS-####### not HiSmart-####### or the other variations it is looking for.
Anything I can do to look at having support for this AC added?
EDIT: looks like the url the AC communicates with is ac-eu-link.hijuconn.com
I have just purchased this unit as well, model number AP1022CW1G and have the same issues. I've tried almost every app in the list of supported apps but have had no luck getting it to pair. Information does seem to be incredibly sparse on this model.
Edit: I have no idea if it is helpful or not, but I have nmap scanned all ports. The only one open appears to be UDP 5030.
I did a nmap scan when directly connected to the AC and TCP 5020 was open for me. Never noticed UDP 5030 open when the AC was paired to the app. Seems all traffic was HTTPS.
I picked up a couple of these ACs too. Seems like this repo doesn't have the ability to connect to whatever server "ConnectLife" uses. Hopefully the protocol is the same and it's as simple as finding the new endpoint.
OK so I took a look at the auth network traffic using mitmproxy, it's talking to:
POST https://auth-gateway.hijuconn.com/account/acc/login_pwd HTTP/2.0
{
"accessToken": "pa2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoX2mQ1PKNlTbu1rOmV3bKLU_-C1GjurjEGAhqYxgrBONlXd-5MZC6GtwLASr5jTWE5drMWncHgKTzlpdCBqLA85O8gm6eKRMOItp_HFPBgxjwT6wXuZ2TgWQXqvY2nxjDB2WHnwF6sCuFM_bUIxYlEXI2PV3O_puigM8sXQfEtSkaX2wIMyutjUXQSyJFpRa0X5NPiBTl67O0fU4W7POeWV_tCx9Xi-wvNbA4loZ-L3t42uPVsolnaICGu8I91faQatBVHgyscr0Z5B8cwUl0WMWKclNOa4xqAhX0rqEmF8YjKmmGwESF_dzsgIczemhDy",
"appId": "47110565134383",
"appSecret": "yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv",
"languageId": "1",
"loginName": "MY_EMAIL_HERE",
"password": "E5o+7sDv0vuDw.....hashed password continues....zz405TLK1n0bjE/xV/g==",
"randStr": "389429",
"sign": "IzR2jIgqJwWr8hsWkueuhC6nI/UlMZs29cegGiwuhkyIBjcBwlMft4xVPsbRYX+DGEFGmK02PWzzIV8QBlXhSQ9beh71eMkhbtWOCkynMQ98cKuwqrlefxmwSBPu8YA3unX+5ue+fQJgE1uX4gy9NuqIV6XUbarGMNR3z7JrmFUG07M5n2d7AXyLwiNwbhNzortsZ8RG4Q2OL+T2MV4PF5dpFmrvizFSDBPTelprObQZOpKqIBPxOjsppKF8RGtaYrkOaIMqcS44sV2Swl0cGLLXbbVCxSk6to7ljvL+097I5BkEhOcchoq/80WBmUGazlWBvUwL+6qJIA8/sS9LLQ==",
"sourceId": "td0010020000D51781E428534D17A50E67A07F2AC106",
"timeStamp": "1652731738",
"timezone": "EDT",
"version": "2.1"
}
with response
{
"response": {
"accessToken": "pa1u47x.......long token here.... LAdOQ",
"accessTokenCreateTime": 1652731738,
"accessTokenExpiredTime": 86400,
"customerId": "315843845029890",
"refreshToken": "pr1u47x....long token here....PcK1Q53A",
"refreshTokenExpiredTime": 2592000,
"resultCode": 0
},
"signatureServer": "vj9IJbpirL6cp1dcrt8HBO8lj5An7L0z+PAkTNvtV1nA1RhZNGZbFqKzABlf/0ZEPIPz/IkHT47fCN5ZgtJm9joNGPBgfP85QWULd9DmCq1xn3EIDxHVQ51WpavyAQBY8LNXFFnDvzf44/u49tkLAzhnJjkm0nhmo5x0vXAMlS2OqkkMHnbJlwDQohbxnIcXfhiIaVHjNcZLhB0KPnrZgDQlHp84HVLiiDG6nkQuYGFK+gR3E3bjxIWgM8FRPTMXJeRRr+tXro6fkPZONWCkZ9lmUnZwMrxJlAQi40lI0WIOYUj4BYnys84QPyJRf/CM695zNXLFRGn9L2IZ5shvLw=="
}
I'm guessing that adding an implementation for fetching the accessToken and refreshToken from these endpoints is probably what's needed to make these ACs work but I haven't really looked at this codebase much and I'm not well versed in python so I don't know if I'll have time to do it anytime soon.
@deiger could you let me know if there is any more information needed to add support for the newer models with the ConnectLife app?
So it seems that (at least) the discovery requests are somewhat different.
For the previous models, there was a POST query to a user server (replaced here by auth-gateway.hijuconn.com), and then GET queries to a devices server to fetch the list of devices and LAN data (maybe bas-gateway.hijuconn.com here?).
Could you check if you see further queries?
Yes, sorry, there are further queries (to bas-gateway.hijuconn.com as you already guessed) although I didn't see any device info in the responses. Let me capture more info and I'll post it here shortly.
@deiger Here is the series of requests and responses, obvious analytics calls omitted starting from a fresh login to the ConnectLife app
I'm guessing at some point it's opening a connection to a websocket or to local devices but mitmproxy isn't picking it up since I don't see any traffic captured when I control an AC with the app, but at least here is the auth flow.
POST https://auth-gateway.hijuconn.com/account/acc/login_pwd HTTP/2.0
accept: */*
content-type: application/json; charset=utf-8
accept-encoding: gzip, deflate, br
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept-language: en-US;q=1
content-length: 660
{"timeStamp":"1652835843","loginName":"","accessToken":"","version":"2.1","appId":"47110565134383","languageId":"1","sourceId":"td0010020000F278F2200E3740B6BA5E3CEEF9380E49","password":"","randStr":"437002","appSecret":"yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv","timezone":"EDT","sign":"Lokg92Sz7Z7ExTT5GuFYgu7bES3PYT8AnqiiQGEpEdIPaSEpbsy0LifRVKGt17B4BFgJFyh4JBmmGE5JHmdnJLuLjU8wcwxJx3ZtkiYqNnvxRXUsh5xISCpSZEwhs6GoLJ8MIJinXLBm5qXPQTApG8jKu2+LFyKde\/JKosrVriaonnB6kTTNqXNExbwFNOd0cA77FwhGKE9FA7XHGTRHNoRCN8gqpaYLXg5mUKlPlKw51hEojr4C\/tkKHPvHIZwQIG1W4DEKvXhavS6pWtBGigBkrTvbgAo2Fj7\/vl4jFuBqrkjRHmt7OS7G9LhiRCIIUQzzdcXJNsPaqGAxvuqSVA=="}
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:04 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1319
{"response":{"resultCode":0,"customerId":"","accessToken":"pa2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXfxZd8yYeFm0zx4nHuDgnb-yVh7tV5759vhggy2_OVt5m4y28FkaWgHdwQ6G2lLcV_p6faWIkh0K1EFVSTA_NB8kIQ413P0hd1HhYYRwC-4Gm6USHFDKwdE1WxZInT_KhRmVAlLFT4LRCBqjTVpS28UG6-cx8UhvdaZaZwHdap9jfsl4JJweIHl2rfI4HT2vXgqof_Unxvay-aoJQ2xjQlooBZVmarKscL-qlDuf3rJDUGPX-oHmadOAYkW8juSblxr8WPge8jqgy_jaq-W5KEBqU-fjx4URePfBhdxHoQZMw6OMkKBnhGoyfra5-fYHd","accessTokenCreateTime":1652835844,"accessTokenExpiredTime":86400,"refreshToken":"pr2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXfxZd8yYeFm0zx4nHuDgnb-yVh7tV5759vhggy2_OVt5m4y28FkaWgHdwQ6G2lLcV_p6faWIkh0K1EFVSTA_NB8kIQ413P0hd1HhYYRwC-4GfDMWZt2yYoeSuEoFQLgrDpZt1nQgmppMlAIfUJvRJjrXIREln-xLgaP_L4EBizQ5BJJG-AnyuRqMzt9Nn4tcGGSBw87ImQuLXabVTskBswtQpnpJ24f2NpHDNhTDCr0FtVk4EzZUEKPhSIFEiZm_3FNOYSAAG4pq1z4Eyvcf5-PFiriEhUNKN_1jDjpOD0cPi48PO5lNmgRCXKOKHPlx5","refreshTokenExpiredTime":2592000},"signatureServer":"U0dwEZwPLX/dp+b1eUO7hPZbCrr1FZab4GZvv2niD/0vSwxE8V0ICbZmrFg6INp+6spi5CUBmlXh29dwDM4XMBpvqF0cOYEk5hGldppxWgu5ya0uri58RCL+sFCSBr/rh9q4ZMhYMUYRRG0sZIHmBoWP3jqC6B+zPJ9pCDJ7YACR99sClxasJR3HOOvIm/ic91Rxax35e4ZQCTvKZu7wzrCGs3UBrzRzjhsJ/Ff65c6espCGi+v9JTfPmHQCWqhXbio4yg6Al5QaT9PDM3aIzQZ2FIgJKNg1y52fLPQCsVGACAHwWHuxqRBljynrdhhkLJrOSI7+iIMUG9DenddwBg=="}
GET https://bas-gateway.hijuconn.com/account/get_pa_tos?accessToken=pa2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXfxZd8yYeFm0zx4nHuDgnb-yVh7tV5759vhggy2_OVt5m4y28FkaWgHdwQ6G2lLcV_p6faWIkh0K1EFVSTA_NB8kIQ413P0hd1HhYYRwC-4Gm6USHFDKwdE1WxZInT_KhRmVAlLFT4LRCBqjTVpS28UG6-cx8UhvdaZaZwHdap9jfsl4JJweIHl2rfI4HT2vXgqof_Unxvay-aoJQ2xjQlooBZVmarKscL-qlDuf3rJDUGPX-oHmadOAYkW8juSblxr8WPge8jqgy_jaq-W5KEBqU-fjx4URePfBhdxHoQZMw6OMkKBnhGoyfra5-fYHd&appId=47110565134383&appSecret=yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv&languageId=1&randStr=445500&sign=vfQvMhTGoc4Tt7mdcu3XsfxnDYAeJ5yg6HPsP1aEf9FK9uq7C9PWGjcSu896ZFHAMp8xWKP3tCVOlGcknnIaZq4Au0d%2BDGcBcXIazYs3fRpO8IbXjdpwpXhQmcQl1VJB8Ani3KMaZ92UZiP/0g93fKP0Xs65BDIfJNeTFZg1KiiJ%2BkPhgaSe7wPARjmArt2XJQtl7oj6ZYdW5v5QwdUgcdPO9OF/NMBGBp%2Bp2Ojtzjh3nyI0gSsD8xv44YlmFdNGIbT2sd/6mM/gnuWx7t%2Bn1EB5%2BvxhFLkBBq%2BPNiyQMwmlFhcwPwJcCdY/5JFDSDO8TytbDLk8xNkg96crIW3OCg%3D%3D&sourceId=td0010020000F278F2200E3740B6BA5E3CEEF9380E49&timeStamp=1652835844&timezone=EDT&version=2.1 HTTP/2.0
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept: */*
accept-language: en-US;q=1
accept-encoding: gzip, deflate, br
content-length: 0
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:04 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 770
{"response":{"resultCode":0,"data":{"ppVersion":"4","tosVersion":"4","ppUrl":"https://app-resources.hijuconn.com/wgplatform/164273433592900775.html","tosUrl":"https://app-resources.hijuconn.com/wgplatform/164272948052500605.html","ppSHA256":"37dea41701a9df98119ff6f8b37ae0cf7b050d7bb84a12f057da797649024300","tosSHA256":"e3c651a5b38c164a0cdfb3601830608bd74f421fea21534d87c050e4c77d309d","updateCount":0}},"signatureServer":"cqMpn7jHLFYF03eJUkD4d6C6ttUMW4TbcTfZagCIF9c2F7LdM1ZASk+bhrH9UTH/FlZ/58oH5GcQx+Jhs6i0EBaeYE/gpV0s9JY5ByzVkxOIRCgdKRManWpj5yWI+7nyFrGbcAFlKbwkPYxIPpbWwAXyP1Ndo+ya9OH0jphHLwfVEzQROgS6S/owKZWeR0B8xSASIhTcuBLSrGVa1l7b3rdB5b5NEv7Hyp5qNTQZpbFJDFgm+YPmU8SIXMXIJWEuV7lf1i+AOMjzebEHhrHz7Tiv/vVcDDPvOpdYTSzHPcJxX/HLzj7NhEZWWq23unUpmnUiGQqCgTPdbo+Cakxfug=="}
POST https://auth-gateway.hijuconn.com/account/acc/login_pwd HTTP/2.0
accept: */*
content-type: application/json; charset=utf-8
accept-encoding: gzip, deflate, br
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept-language: en-US;q=1
content-length: 662
{"timeStamp":"1652835860","loginName":"","accessToken":"","version":"2.1","appId":"47110565134383","languageId":"1","sourceId":"td0010020000F278F2200E3740B6BA5E3CEEF9380E49","password":"","randStr":"609053","appSecret":"yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv","timezone":"EDT","sign":"oyqIcAcqvaTpxRH21cLlQQ3q3H3zepR2sjrrz\/bf56TPpRzNqiqR6AVWMjrIMkL9s83KbXpYZFGmuJMEVUQxOlQQiSd+agq1s55+P3h4ZOocqnq8SX09zPAEqWJtU97RAOicyIrC++\/\/qfaWzDgv1b0ovCWcI\/WwipgudiyyTcmIhste0pTkOusSK2Si27+rjjofPOQSDhBBJi1B8giGFG8Dreyl9TSWZFr0EQgQUv3a7N+Kqbo\/uwEgFWmv7H42Lu0oSWC81fbooeZBLOxwCP4UpBmBpUaWIIb9GqTYFnEOiCtfv7GNPyUZt04xHjH8v1q5xsCFbr+J9Wl1Li3aCQ=="}
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:21 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1319
{"response":{"resultCode":0,"customerId":"","accessToken":"pa2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXh5IO9Ew46sIL0_FQa3U9JTA5Qgz7py9O2Yj-a8HXZm4KEPeawvGOZNX3-mcNMT9jmJ3czmwACaJFBcBLc8n2el1MaquTqpxWN-2UZZgnPAN13XSE8i7zgUVnEe-KqsdAlPTEq6kuwdlyFYk_4NmXkaZhK1GO-S3fsiU1P1EbDuVzxfgxKKRmjr_YbNpFhpQgmqjL-5-cEtV-5MkQX4VGWY8XkzjLzJi6-zTpYiJ3AyWlQ1CcT9WHmhgMG8dRPF1CtHZooSNXjqfCeLaHjQ1kNZU0ghR_Dxh-MuAlYxfyT5H3lHcHvGh6uBArc9olxNRm","accessTokenCreateTime":1652835861,"accessTokenExpiredTime":86400,"refreshToken":"pr2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXh5IO9Ew46sIL0_FQa3U9JTA5Qgz7py9O2Yj-a8HXZm4KEPeawvGOZNX3-mcNMT9jmJ3czmwACaJFBcBLc8n2el1MaquTqpxWN-2UZZgnPANI-8fFOZ-h7uHH4rRGrmOAvAyit86nXB9Xa-9qRcO65U_jhvG0mIvfNaR-3hBdBuQpu__lQtysjmud2a_puFovW_w8OknsAe_Y7FWiUozKJjasBd42foMDl72lKkNPJVP3sywL_jtVzZ8nHe5r8ohcq1ebuxinvfgoJgHKyGkw3pBF8A0KNHAQEuGm7tuMubYLxEaitqGlO9bhvyvmpeG6","refreshTokenExpiredTime":2592000},"signatureServer":"EoXE7fZIKN0vT2Ow4vpsvMn/MVPpJ0VzFbVaQ/fBDmMTHHNIFsKol4XXE/uPNot1nFwueEPKlytXTQac7m+M4q6xzknpy1P2dPhSdyE9AJF9h6y4XkpA2tNGIS+6PEbID5f+4zl4ZLjvoI5Dmbq4miivFgVcYzo02j/H9/bAFK6LY7rVNzBQzOLSPjbH6S6fZ/JAscF4LiIAT4c9B0MGZt6Lx/LpFVwEFAAeFeMLkvLGP+vVHSVhR5YBSsjFuKjJB2P9XwgM5eHTGAh4bkV0ErupYCaqVyi/w0kgzOkMR6G+SSg8+92ihPE8XdHtTP16M047G2Ot4COJQGV5/wV6FQ=="}
POST https://auth-gateway.hijuconn.com/account/acc/login_pwd HTTP/2.0
accept: */*
content-type: application/json; charset=utf-8
accept-encoding: gzip, deflate, br
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept-language: en-US;q=1
content-length: 1158
{"timeStamp":"1652835861","loginName":"[email protected]","accessToken":"pa2u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXh5IO9Ew46sIL0_FQa3U9JTA5Qgz7py9O2Yj-a8HXZm4KEPeawvGOZNX3-mcNMT9jmJ3czmwACaJFBcBLc8n2el1MaquTqpxWN-2UZZgnPAN13XSE8i7zgUVnEe-KqsdAlPTEq6kuwdlyFYk_4NmXkaZhK1GO-S3fsiU1P1EbDuVzxfgxKKRmjr_YbNpFhpQgmqjL-5-cEtV-5MkQX4VGWY8XkzjLzJi6-zTpYiJ3AyWlQ1CcT9WHmhgMG8dRPF1CtHZooSNXjqfCeLaHjQ1kNZU0ghR_Dxh-MuAlYxfyT5H3lHcHvGh6uBArc9olxNRm","version":"2.1","appId":"47110565134383","languageId":"1","sourceId":"td0010020000F278F2200E3740B6BA5E3CEEF9380E49","password":"oB+XIzFlnR5+5fWa5LYQOGoDd7bScAOaB\/3dPDkJqbnBXIK5lsHRFqi1UD4H9yBMURuI7Z4gLSZ1Eo5FlgmvRA==","randStr":"619986","appSecret":"yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv","timezone":"EDT","sign":"hIU1BdxqhNlRZPQj71w1c\/9\/T0kj3BL5lmxsaOBvsCWS02xik8oI1aALHM0t58uvR2cWcKDQECk+UaYu6NhWjsVbEucW+jZHO95dyj8vY8nxe0t34AQx1gL+ZP2J7dUpefqsnVNmTjqNMQapblSJMhP6Q6VRnA9IuYe3NbiOexjsRQlyZeeKY0tETZ\/OM\/CSm0GmEl6QfwLii7DtLonmXlrOjXsOBxlhHvxhYTFdl4uvfdWzoCy\/N10lgwJiVZn3sPH26W5iF9jCiA3gV9k7uLaOlXFvpV0fU61Io+VNwDia02ngZEW7vC4IVtV2fSSjUE+HGMaxc8Pr11KGusTtjQ=="}
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:21 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1378
{"response":{"resultCode":0,"customerId":"315843845029890","accessToken":"pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA","accessTokenCreateTime":1652835861,"accessTokenExpiredTime":86400,"refreshToken":"pr1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PHSAz3HQZmB1KXRhmPfdi1Cf1aofyuZlJbxq2eKOE1eVhCy1VdFWhOoQfs2r_l0FezkfXx59_h_Xu69g6xcTJWybuZOUbeB3guQ-JOj3ue0AlzkhwJySk3FOdxGMvOWieNKAazKrNkCblMNqsYDIGC_4EuIhp2-qaam-YkPgBv04aO7Hu88pSwEskN_-pUCb9fseuwtX3rjAWc2rwj-ivZ_Q","refreshTokenExpiredTime":2592000},"signatureServer":"fDy014WWT4hs4zmFgxG0unuZZ6+3wSwBNTbY3yOUZRPO3rdXVEGinYQ8VtMSP7UMGqlGrWB9axM7eqSlIL62xTj7aP4KHpFnNHK6tT1HH7xJT1sbsRiMiEoW2KYtXqxX+wCRsO7yoevJNZfcvDiXaovCe4DDFAO2MYMeu4C9vwOmIFAwp8LKLDo3YDgSegrScSs1YoNESCtBs8s5jJNlzGC6Abqtvybu6VB4z5uVByomsBcEBdOmo956oj8LJoqMbnADRplwMYWhwkmd4Jn9MY+Xg6gqYqmsD21CZU0Liu9SOcv2gzxouCHgax2u16cX44ZGm7QI9qPX29dDpRFDFg=="}
GET https://bas-gateway.hijuconn.com/account/check_pa_tos?accessToken=pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA&appId=47110565134383&appSecret=yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv&languageId=0&randStr=612442&sign=BDpGvH1PHhGImfCm4KJTu8QvWuuujbSE/pNngPZsCo/EY/vkiSLeSzw0Co0LXKtiIcqdueaXhnELD9hhQj3VpNp2TLvV/9Xlk/Tq8SaD6aQs61GcBSpk1RhSGczDYK%2BvOSrnQsOXD/EWZsssLhkBu1jQcGCyFNH3sE2kamshjV66Bj/Wpq%2BTcObLmvB/lw5QcfhoQHbwJljWD17e7ZYp8r4Lksp/o1Vv9ovRwn9fXNhGJ4ptg90JI30n72Yn1l8Z00j7BbLtkD95ffmRKRbDeIaH0KHrJpA2/NvB75Zi0DsrlcLwesm51Mc9BHKPR0242X4O66EnFNlDNgXBnyYPaw%3D%3D&sourceId=td0010020000F278F2200E3740B6BA5E3CEEF9380E49&timeStamp=1652835861&timezone=EDT&version=2.1 HTTP/2.0
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept: */*
accept-language: en-US;q=1
accept-encoding: gzip, deflate, br
content-length: 0
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:21 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 770
{"response":{"resultCode":0,"data":{"ppVersion":"4","tosVersion":"4","ppUrl":"https://app-resources.hijuconn.com/wgplatform/164273433592900775.html","tosUrl":"https://app-resources.hijuconn.com/wgplatform/164272948052500605.html","ppSHA256":"37dea41701a9df98119ff6f8b37ae0cf7b050d7bb84a12f057da797649024300","tosSHA256":"e3c651a5b38c164a0cdfb3601830608bd74f421fea21534d87c050e4c77d309d","updateCount":0}},"signatureServer":"cqMpn7jHLFYF03eJUkD4d6C6ttUMW4TbcTfZagCIF9c2F7LdM1ZASk+bhrH9UTH/FlZ/58oH5GcQx+Jhs6i0EBaeYE/gpV0s9JY5ByzVkxOIRCgdKRManWpj5yWI+7nyFrGbcAFlKbwkPYxIPpbWwAXyP1Ndo+ya9OH0jphHLwfVEzQROgS6S/owKZWeR0B8xSASIhTcuBLSrGVa1l7b3rdB5b5NEv7Hyp5qNTQZpbFJDFgm+YPmU8SIXMXIJWEuV7lf1i+AOMjzebEHhrHz7Tiv/vVcDDPvOpdYTSzHPcJxX/HLzj7NhEZWWq23unUpmnUiGQqCgTPdbo+Cakxfug=="}
POST https://bas-gateway.hijuconn.com/push/register_devicetoken HTTP/2.0
accept: */*
content-type: application/json
accept-encoding: gzip, deflate, br
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept-language: en-US;q=1
content-length: 1198
{"timeStamp":"1652835862","version":"2.1","accessToken":"pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA","deviceToken":"c3f1ec2b7c5eefbe3031b84ee63bce23fb2b16fe1fca991e1f9b2750badfcbb4","appId":"47110565134383","deviceId":"D6424948-DAB6-41B1-8BD3-D8D969C18257","deviceplatform":"IOS","sourceId":"td0010020000F278F2200E3740B6BA5E3CEEF9380E49","languageId":"1","randStr":"629956","appSecret":"yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv","timezone":"EDT","sign":"cxYG\/uOHY25DxDoTd1Y6QJgwwWYrSuAxM5zbKlCqnhNUxzA2efc8gn1+CbSJ5oUt8F\/XR+U90Od3RLkxtCJsKTm6W7vDKT2tatYXjVvtwCxNYF\/R2HrnhhXL4rDovGExLfPiTiSKwk91Zq7DE4mygyj0S2NoUiFNYgD9KcRYsINzgVQMW6GBZ\/YwnYxDv56KmsTVgO\/V\/rPwDeFmlH7D+hKr6gpkd2C2U9+DRTCxv+Ot0v+JN8s\/aQDypCWL98czT3nBxQkuy568Ilg28udowM7lOvjYrq56wS+nb0jNSR5nHPBo1PyyMgkpyHLeABv8RDhPwQU2tdV9ohr0J3T5BQ=="}
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:22 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 410
{"response":{"resultCode":0,"desc":"成功"},"signatureServer":"qcS/Wjprwpcie69jpTwOAmvTdVuDbzc8PQcrt8njIycRwEw8jkmc9J09pOp9fUiQ5ak/DvmhZq392IVKWJ/DsPO5MnGe/bddwK72AnJgqYSaQF15vf30pY418DhDtsTyAUHmlECXIzJWxtP3oCGdnUtAOLL6sBvcHDo2ipNtyVXrqHNbBIuzVGTCA68Gq6+FG+g2B79VeulI3anN8C/8Zsxg6y/LmfzmR2Sjihx/lQZx+lETypoxnHbtaCk+CDkF0fOn5Rz/jN/NGom3gx6XJjc9Fj+IVo752g4XlLOl+H7UeXAxjc9sE2UGyVydsSxCu2olZVgV/k/E7y9gm5IPlg=="}
GET https://auth-gateway.hijuconn.com/account/get_user_profile?accessToken=pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA&appId=47110565134383&appSecret=yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv&customerId=315843845029890&languageId=1&platformId=103&randStr=618723&sign=uHQgj9cyj9VwN1pzhUoy1muTYqt7%2BfXVab0T5q6EDuH25a8WiEn5EA8v/4YTRfud/KRU689nYN5Np%2BifqGg4tkUxKyM/g7xj9aS1rV7aQvuaiOvYIJczKNqgFDrxXskj4Emex7%2BcMGkdtVqCLxUFyddouGjL94V3dkFvF0Xm9nuGPRKt/yipsdVCelE0uP1O9fEKuahMOtOeO1ysD2SZkOe4ARyhBKXsKaGM4c2g1ale4BGF5YXi1V%2BdewW5utzekrWd3ye3fH0PrasvyfdO1alzuLSG2U8cuha2oyOpvjGXrDL3gs3MHHTTRCFSOfjYXcUKlEcRM8CpY2P/Kyeqog%3D%3D&sourceId=td0010020000F278F2200E3740B6BA5E3CEEF9380E49&timeStamp=1652835861&timezone=EDT&version=2.1 HTTP/2.0
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept: */*
accept-language: en-US;q=1
accept-encoding: gzip, deflate, br
content-length: 0
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:22 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1015
{"response":{"resultCode":0,"userProfile":{"id":43576,"source":"JUCONNECT","platformId":null,"customerId":"315843845029890","userId":"MY_EMAIL_HERE","firstName":"Fuck","lastName":"Off","language":"en","photoUrl":"","socialAuthProviders":null,"addresses":[{"addressType":"BILLING","street":null,"houseNumber":null,"postalCode":null,"city":null,"country":"US","gpsInfo":{"latitude":0.0,"longitude":0.0}}],"phoneNumbers":null,"birthDate":null,"gender":null,"company":null,"userMedia":null,"additionalData":[{"group":"Juhaokan","name":"CustomerId","value":"315843845029890"}],"country":"US","createTime":1652569913270,"updateTime":1652569913270}},"signatureServer":"NxT1GAPhK8UbuJDmOakWWGtvyAbcboStrLtfIjc4Y+QnIEWv55pftkUH/kHSbJ5DCOY2/47OREgUi3uL/rs9T/qwF/smdrVNwdsoi7ezuPzBV/Q5ProwiCSilf+FEPELxm9JZusNIXywCyBzqtqa0GjPSmoufNxFa68nMWeVPVsTYlW8VPJAaeZxjI8AympNPtNAlZVtZJhpIbTVCcYQiNU0cdD99notj0SE9hTcfDO0QjWIyrxZfxsb3OP7m/yK/UuNvsvc9Y4NqsvqVl/Ijl0UkAh2Nr49IhCWHWZiUU+AsJm5A+MjrS8uM+hKdtyrhnVWYZaz83bXZFWwrHKnSg=="}
POST https://bas-gateway.hijuconn.com/push/register_devicetoken HTTP/2.0
accept: */*
content-type: application/json
accept-encoding: gzip, deflate, br
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept-language: en-US;q=1
content-length: 1196
{"timeStamp":"1652835862","version":"2.1","accessToken":"pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA","deviceToken":"c3f1ec2b7c5eefbe3031b84ee63bce23fb2b16fe1fca991e1f9b2750badfcbb4","appId":"47110565134383","deviceId":"D6424948-DAB6-41B1-8BD3-D8D969C18257","deviceplatform":"IOS","sourceId":"td0010020000F278F2200E3740B6BA5E3CEEF9380E49","languageId":"1","randStr":"620859","appSecret":"yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv","timezone":"EDT","sign":"P3742qKGlpb0fPIYAo5AQ9QZb83\/TbIM7ymcSTmjryi3fa5O2n8hubZMm1Y2UA200BjMqLByz67nBHEocPfu1fkJLXRVARjFT5\/4f6NNFsyLeW31RGSnHUwlPVqKWtMUDoLqJ7iV2cyZTUm8RwVUJcaENUcBf3zzPSoC4hudza\/vi8RCzbw8YaIHcX7KlcBow+ueGflMC8dov\/IeSoR7Z7NUBUFnRHaqFiYNMoLCPCdm0aoE\/uFSRgn06Semm14q1ekKcqw87qwniiDtOzfx1aEEYka4ssRf5Ye9e52T0DpS1QNI8+z7dkdUY41e7fM+SHwlxZ8fjfelPYdEiYrkLw=="}
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:22 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 410
{"response":{"resultCode":0,"desc":"成功"},"signatureServer":"qcS/Wjprwpcie69jpTwOAmvTdVuDbzc8PQcrt8njIycRwEw8jkmc9J09pOp9fUiQ5ak/DvmhZq392IVKWJ/DsPO5MnGe/bddwK72AnJgqYSaQF15vf30pY418DhDtsTyAUHmlECXIzJWxtP3oCGdnUtAOLL6sBvcHDo2ipNtyVXrqHNbBIuzVGTCA68Gq6+FG+g2B79VeulI3anN8C/8Zsxg6y/LmfzmR2Sjihx/lQZx+lETypoxnHbtaCk+CDkF0fOn5Rz/jN/NGom3gx6XJjc9Fj+IVo752g4XlLOl+H7UeXAxjc9sE2UGyVydsSxCu2olZVgV/k/E7y9gm5IPlg=="}
GET https://auth-gateway.hijuconn.com/account/get_user_profile?accessToken=pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA&appId=47110565134383&appSecret=yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv&customerId=315843845029890&languageId=1&platformId=103&randStr=626187&sign=a7HZMXRaz4%2B7ZH%2Bti0q6NJmQlPvIlimghcEFR8Dqd2/NuYpJkZCROP7%2BOsNRbVTrJtAfxj3GIQOfaZwwqrGN5/ftSOWn8Sn7/sTQZQ2QeU8E6exQ9B8a5fEjT3trVDhakP3Og5E1Ofz3ZHGq%2BMISi/93Ispw0QxshgG3d%2B11GNKMxM3WpGEQv4DPEbKM7oH8FRFMvCK1Kdf%2BDELtvxgCRi6AuUBH4gczxEcUodkO2dv/CkHraDBQcyYy/UKz/3ueM9kMfy7vvKJYoDnl%2BZEkcM7BxrubuVNSmlw2B1caVsbEna5vvmBWv5nkIV8ctOYmmFRSsn%2BRS8ysJfhwtBw/cA%3D%3D&sourceId=td0010020000F278F2200E3740B6BA5E3CEEF9380E49&timeStamp=1652835862&timezone=EDT&version=2.1 HTTP/2.0
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept: */*
accept-language: en-US;q=1
accept-encoding: gzip, deflate, br
content-length: 0
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:22 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1015
{"response":{"resultCode":0,"userProfile":{"id":43576,"source":"JUCONNECT","platformId":null,"customerId":"315843845029890","userId":"MY_EMAIL_HERE","firstName":"Fuck","lastName":"Off","language":"en","photoUrl":"","socialAuthProviders":null,"addresses":[{"addressType":"BILLING","street":null,"houseNumber":null,"postalCode":null,"city":null,"country":"US","gpsInfo":{"latitude":0.0,"longitude":0.0}}],"phoneNumbers":null,"birthDate":null,"gender":null,"company":null,"userMedia":null,"additionalData":[{"group":"Juhaokan","name":"CustomerId","value":"315843845029890"}],"country":"US","createTime":1652569913270,"updateTime":1652569913270}},"signatureServer":"NxT1GAPhK8UbuJDmOakWWGtvyAbcboStrLtfIjc4Y+QnIEWv55pftkUH/kHSbJ5DCOY2/47OREgUi3uL/rs9T/qwF/smdrVNwdsoi7ezuPzBV/Q5ProwiCSilf+FEPELxm9JZusNIXywCyBzqtqa0GjPSmoufNxFa68nMWeVPVsTYlW8VPJAaeZxjI8AympNPtNAlZVtZJhpIbTVCcYQiNU0cdD99notj0SE9hTcfDO0QjWIyrxZfxsb3OP7m/yK/UuNvsvc9Y4NqsvqVl/Ijl0UkAh2Nr49IhCWHWZiUU+AsJm5A+MjrS8uM+hKdtyrhnVWYZaz83bXZFWwrHKnSg=="}
GET https://auth-gateway.hijuconn.com/account/get_user_profile?accessToken=pa1u47xnRnfcy7qqsjRweLt3ACThrT2VDNWZOfBKMV_OojBXuPkTqrR3trCAKOnpJoXqhDZNf93SpobHwOc8P-mVWkxYWqUFH67XBzHOOFHR6aNDt0baRlLhvFVJ_V2uvI0ZDPcCjTQS912yLCscQy3_NQc9CyH46rJfhCWYANbXvh4P3F-oTfnxJI6yPd2f5PH8IpRfqovZgMiTsvV8dEWBk3GDj15OM1f1epB3WFBOOhdTqRHXyRMeJDKLTsmtjk_L6ydGcYQ7kig-SqBLTi8UuRMZ8YlHAYjzahfR2Q3rebsk4vng9sDYsjDIFNL9bTf7fVKNGjrrEk3gXCtE8cxIhrecSDLBS1f1seQLy79wAjJy7pKXzzgwm6_KzTjNKWZ-o1wcdBt1X7XvYItkWDECA&appId=47110565134383&appSecret=yOzhz6junYno-nmULM3Wr7PU_dpSZN22ZdluvVWZ4uW5ZwwG8fIGCHTbrhcnU-iv&customerId=315843845029890&languageId=1&platformId=103&randStr=624017&sign=ndHl4YrWJYhtLf%2BdCgueexCtDXKFIkFy7zkhQKp505S85dXaGLdd4Ok0tfOVJ0GL6biPilliUJSz7NeBR97TC2ISXCqoVV7lwyPvSuSq2eMUcnAHiJVgTEi8n7IvbLBKLtQeeCWl1dMK898aVhk0RmndPY/CWyH4Cn0JD6qb4c8RkqgB7J6v2C/R7wx8OAMgL%2B0sKEoRp6JC14MFcH3FDNirmImQMb4Vqa7ngoRzpsLMcNU2O5H2Q25PKhfIJY1NZafn8vYXCTDOd7lcswQJMZHK0Ey5bk25UuI5kxL%2BqnfXYW2ZlRNXDYjICOa/X/2HZmFR8KrqisV7cUVexDcp6Q%3D%3D&sourceId=td0010020000F278F2200E3740B6BA5E3CEEF9380E49&timeStamp=1652835862&timezone=EDT&version=2.1 HTTP/2.0
user-agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
accept: */*
accept-language: en-US;q=1
accept-encoding: gzip, deflate, br
content-length: 0
HTTP/2.0 200
date: Wed, 18 May 2022 01:04:22 GMT
content-type: application/json;charset=UTF-8
x-application-context: api-gateway:10002
content-length: 1015
{"response":{"resultCode":0,"userProfile":{"id":43576,"source":"JUCONNECT","platformId":null,"customerId":"315843845029890","userId":"MY_EMAIL_HERE","firstName":"Fuck","lastName":"Off","language":"en","photoUrl":"","socialAuthProviders":null,"addresses":[{"addressType":"BILLING","street":null,"houseNumber":null,"postalCode":null,"city":null,"country":"US","gpsInfo":{"latitude":0.0,"longitude":0.0}}],"phoneNumbers":null,"birthDate":null,"gender":null,"company":null,"userMedia":null,"additionalData":[{"group":"Juhaokan","name":"CustomerId","value":"315843845029890"}],"country":"US","createTime":1652569913270,"updateTime":1652569913270}},"signatureServer":"NxT1GAPhK8UbuJDmOakWWGtvyAbcboStrLtfIjc4Y+QnIEWv55pftkUH/kHSbJ5DCOY2/47OREgUi3uL/rs9T/qwF/smdrVNwdsoi7ezuPzBV/Q5ProwiCSilf+FEPELxm9JZusNIXywCyBzqtqa0GjPSmoufNxFa68nMWeVPVsTYlW8VPJAaeZxjI8AympNPtNAlZVtZJhpIbTVCcYQiNU0cdD99notj0SE9hTcfDO0QjWIyrxZfxsb3OP7m/yK/UuNvsvc9Y4NqsvqVl/Ijl0UkAh2Nr49IhCWHWZiUU+AsJm5A+MjrS8uM+hKdtyrhnVWYZaz83bXZFWwrHKnSg=="}
I saw some failed requests in there too, not sure what they are but seem websocket related, this might be the actual device communication part but mitmproxy doesn't seem to pick it up or proxy it successfully
POST /api/systemLog HTTP/1.1
Host: 123.56.19.132:9420
Content-Type: application/json; charset=utf-8
Connection: keep-alive
Proxy-Connection: keep-alive
Accept: */*
User-Agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
Accept-Language: en-US;q=1
Content-Length: 113
Accept-Encoding: gzip, deflate
{"title":"iOS-315843845029890","content":"初始化创建长链接","type":9,"addTime":"2022-05-17 21:17:35:479"}
POST /api/systemLog HTTP/1.1
Host: 123.56.19.132:9420
Content-Type: application/json; charset=utf-8
Connection: keep-alive
Proxy-Connection: keep-alive
Accept: */*
User-Agent: Runner/1.2.0 (iPhone; iOS 15.4.1; Scale/3.00)
Accept-Language: en-US;q=1
Content-Length: 105
Accept-Encoding: gzip, deflate
{"title":"iOS-315843845029890","content":"webSocketDidOpen","type":9,"addTime":"2022-05-17 21:17:35:697"}
I have this same Hisense AEH-W4G2 module. Happy to help with testing if needed
@deiger is the information I provided useful or is there something else specific you'd like me to look for?
Sorry for the late reply. This is vastly different from other Hisense modules. Could you please try capturing the traffic sent to the A/C as well? If the issue is just with the bootstrap, we can deviate the code of discovery.py, but if the communication protocol with the A/C is different it might not be worth it.
@deiger Sorry but I'm not super familiar with inspecting network traffic. I used mitmproxy to capture the above but it didn't seem to pick up any traffic to the A/C. What tool would you recommend using to try to capture that traffic?
@evelant the same packet capture app should work also for the traffic against the A/C, but the packets would be sent to the local IP address of the A/C. Are you seeing the A/C in the Hisense app, and are able to control it?
I cant seem to find a way to input a proxy for the AC to use? thats a requirement of using mitmproxy correct? Also tried capturing packets from the android app, no luck unfortunately as the app (like most other android apps apparently) is using SSL certificate pinning which defeats the mitmproxy 😢
Unfortunately it doesn't look like there is any local traffic between the app and the AC. All traffic captured with Wireshark when controlling the AC was via an external IP.
@mattclar I used mitmproxy as a proxy for the app on my iphone to inspect the traffic. I didn't see any local traffic from the phone to the AC. I'm not sure if it doesn't exist or if mitmproxy didn't catch it somehow. It seems like maybe the AC is communicating directly with hisense servers instead of with the app. I'm not sure how to capture that traffic if that's what's going on.
Also, has anybody opened one of these up and gotten a look at the mcu? Maybe if it's an esp32 or some such it could be re-flashed.
I finally had some time to look into this more. I used mitmproxy in SOCKS mode and utilized an iOS app Brook to create a VPN connection to the SOCKS proxy.
I do not see any responses that provide LAN info of the AC and it seems all communication is done directly with the server over websockets. Every request seems to have a random string and is signed along with the access token.
Also, has anybody opened one of these up and gotten a look at the mcu? Maybe if it's an esp32 or some such it could be re-flashed.
I have a Fujitsu Halcyon split heat pump. Set up with FGLair app, then blocked from internet and used this repository to connect control. I am now interested in swapping this component out for some ESP32s or 8266s.
Do these photos help anyone?
I think this confirms there is a websocket connection opening as the app is throwing out this log to a random IP address
EDIT: sorry i can now see this was already established
Hi guys, same problem here. If I can provide any help, let me know. Using the android app, got 5 units with the newer W4G2 module and one with the older one. Have to fiddle with two apps which is quite annoying. Also did some research and as of now there is no public API nor any kind of documentation, though they are providing an alexa skill, which might be exploited for some refence information.
I have also 3 units with the new wifi module working only with connect life app. This apps works, however it is annoying that you cannot interconnect your AC with your other stuff in the house. I would really appreciate a working hass integration. If there is anything I can assist with just let me know
I did some more research on the "Omnichannel strategy" Gorenje Group and Hisense are employing. There is not a single word about integrating something else than the currently existing Alexa integration, so my hopes are down for a quick solution. One idea that came up, is to check how the Alexa skill works and maybe reverse-engineer. The second option is my AC-technician: Maybe he can come up with five more "old" wLAN modules 🙄 It's just so bad to not offer any kind of external API integration. Even Somfy, Netatmo, etc. do so.
@maschmann If you've found some contact info of the company who made the integration perhaps send them an email and ask? Might get lucky and they'll be willing to work on an integration since hass is so high profile these days.
@evelant I've tried - there seems to be no official way of contacting the people behind connectlife.io in any way - aside from vulnerability notifications. When researching ConnectLife LLC, you end up somewhere in Slovenia, but no contact info, so far. As I already stated: I've not seen something so closed before. I'll try to contact Hisense, but hopes are low.
// edit I've just written a lengthy email to ConnectLife on their privacy mail address, stating the case and providing some potential benefits of havign a public API or even SDK and letting open source add some additonal value like integrations to other platforms to their product. Curious if it works or if I even get an answer ;-) Will do the same with Hisense.
First update: Hisense Germany just read "Air conditioning" and directed me to a local dealer, instead of reading my email. Customer service++
Still no feedback from ConnectLife. I'll do some Wireshark runs to maybe catch the socket conneciton data in the local LAN.
// edit did some capturing. Since I use IPv6 mostly, it's beween a chinese endpoint and my external v6, TLS 1.2 encrypted. Plugging squid in between would need the modules to trust my selfsigned root-ca. Love it.
Still no feedback from ConnectLife. I'll do some Wireshark runs to maybe catch the socket conneciton data in the local LAN.
// edit did some capturing. Since I use IPv6 mostly, it's beween a chinese endpoint and my external v6, TLS 1.2 encrypted. Plugging squid in between would need the modules to trust my selfsigned root-ca. Love it.
Does it mean you came one step closer? Or was the "Love it" just ironically? Old Wifi Modules are not easy to get in Germany... also not from Italian Sellers...