Thomas Kluge

Currently the API is still accessible...

Since the old App has been deprecated, it seems the old api is also gone. But there is hope ;o) You can use the calls BMW uses for there Connected...

I‘ve fetched the clientID from the Connected Drive Website. This Id hasn’t changed since months... The state is a various ID of your choice. The Login is a normal oauth...

Quick guess: change the + into a space at the scope parameter. My example was html encoded 🤓

oh i do not use curl (ios ;o) but here is a http request dump : ``` POST /gcdm/oauth/authenticate?client_id=dbf0a542-ebd1-4ff0-a9a7-55172fbfce35&redirect_uri=https:%2F%2Fwww.bmw-connecteddrive.com%2Fapp%2Fdefault%2Fstatic%2Fexternal-dispatch.html&username=YOURUSERNAME&response_type=token&state=053AC226-29D7-46CA-A234-5E79DCA6CD19&scope=authenticate_user%20fupo&password=YOURPASSWORD HTTP/1.1 Host: customer.bmwgroup.com Connection: close User-Agent: Paw/3.1.5 (Macintosh; OS X/10.13.5) GCDHTTPRequest...

Seems like an Authentication error as mentioned by the access denied parameter ....

maybe.. you should try a normal browser (with google chrome) login and inspect all the calls by the google chrome web inspector.

Do you mean the 360 deg images of your car ?

just call the url as the other api calls with your VIN at the end. You have to add the authorization header and it works ...

also interesting : with https://www.bmw-connecteddrive.de/api/vehicle/image/v1/_VIN_?startAngle=0&stepAngle=10&width=780 you get a json with 36 urls to rendered images of your car. Edit : Without any credentials !