Create a shared secret for Fossil HR watches and more.
This app allows authenticating against all endpoints that support the same protocol. I, for instance, use the authenticator to authenticate my Fossil HR against the Fossil servers.
First, the proper crypto lib needs to be injected into the project. The proper lib can be acquired from already existing Apks. For educational purposes, you can extract the libs from an app like "regualr. Just unzip the .apk and extract the "libs/" content, and pack it into the "jniLibs" folder from this project.
The, after compiling and installing, enter the proper endpoints and credentials into the app. Once again, for educational purposes, I used Fossils servers. If authentication succeeds, the app saves the refresh token and reuses it on next open. (In the screenshot, all the urls start with "https://c.fossil.com", although it is cut off in the screenshot.
also, other people reported that those endpoints work, only for educational purposes, though:
- https://api.skagen.linkplatforms.com/v2.1/rpc/auth/
- https://api.skagen.linkplatforms.com/v2.1/rpc/device/
- https://api.skagen.linkplatforms.com/v2/users/me/devices
- https://api.skagen.linkplatforms.com/v2/users/me/devices/%s/secret-key
Clicking on a scan result should result in a successfull Key negotiaion and the key in the clipboard, ready to be pasted in apps like GB. For this, only the first two endpoints need to be configured.
If the device is paired with the manufacturer you can use the "Fetch key from server" button to download the key from the server.