Support for two way authentication

[avol-io]

There is some trick to maintain two way authentication on ezviz account and this library?
If not there is a plan to implement that in the future? Can i help in some way?

Thanks

[RenierM26]

Short answer:

In the future yes.

Long answer:

I have one AJAX endpoint that I need to replace with the API endpoint. (To enable/disable Alarm notifications per camera.)

The API endpoint makes use of their CAS proxy and seems to make use of Chinese or binary character in the response. Really difficult to reverse engineer at the moment.

Once all the endpoint are via their API, I should be able to use tokens instead of username/password., then it will be possible for MFA to work. They have a modified oauth2 token system so I should be possible.

[kklem0]

@RenierM26 is there a repo or something for the environment you're using for reverse engineering?
I have some docs in Chinese and I speak Chinese and would like to help where possible and first would be cool to reproduce your result.

[RenierM26]

Hi @avol-io,

Added MFA/Verification code in the latest release!

Hi @klem-everywhere,

I'm using mitmproxy and literally following the API calls from the android app. Some of the requests are more complex and require wireshark and some guessing on encryption schemes. (might also be due to latin-1 or utf-8 character support in mitmproxy

[avol-io]

great news! thank you!!!