TMC is an independent, primarily volunteer organization that relies on ad revenue to cover its operating costs. Please consider whitelisting TMC on your ad blocker and becoming a Supporting Member. For more info: Support TMC

Tesla OAuth API procedure compliant with RFC6749?

Discussion in 'Model S: User Interface' started by billytcherno, Mar 30, 2015.

  1. billytcherno

    billytcherno Member

    Joined:
    Jul 19, 2013
    Messages:
    352
    Location:
    Dilbeek, Belgium
    Hi all,

    Does anyone know if Tesla's implementation of its OAuth authorization procedure to use the REST API is compliant with the official RFC? My first impression is that it is not

    - All the code I have seen so far (VisibleTesla etc) make only a request for a token, not for an authorization grant
    - the token request contains the email and password fields in the header, whereas the RFC in the case of a Resource Owner Password Credentials Grant (https://tools.ietf.org/html/rfc6749#section-4.3), which I then suppose is the procedure they opted for, requires a username & password field, which are not present.
    - the client_id and client_secret seem to be a constant, e.g. they fixed it so that their own iOS clients can skip the authorization step? strange

    Did anyone used wireshark or alike to see what is really going on?

    Tx
     
  2. hans

    hans P631

    Joined:
    Sep 27, 2012
    Messages:
    1,128
    Location:
    Menlo Park
    Tesla doesn't officially support any third party apps so there is no OAUTH procedure today. The existing apps have no choice but to mimic the official mobile apps and to use their hard coded credentials.
     
  3. beacham

    beacham New Member

    Joined:
    Jul 4, 2018
    Messages:
    3
    Location:
    Fort Worth, Texas
    Is this still the case today, in 2018?
     
  4. cryptyk

    cryptyk Member

    Joined:
    Jul 8, 2015
    Messages:
    361
    Location:
    United States
    Yes. They don't provide oauth, so we collect your actual credentials and exchange them for a token. We basically mimic what the mobile app does.
     

Share This Page

  • About Us

    Formed in 2006, Tesla Motors Club (TMC) was the first independent online Tesla community. Today it remains the largest and most dynamic community of Tesla enthusiasts. Learn more.
  • Do you value your experience at TMC? Consider becoming a Supporting Member of Tesla Motors Club. As a thank you for your contribution, you'll get nearly no ads in the Community and Groups sections. Additional perks are available depending on the level of contribution. Please visit the Account Upgrades page for more details.


    SUPPORT TMC