Fixed: Error 403 on person

[ik2wxx]

Is anyone experiencing error 403 ?
Today I'm getting this error:
aiohttp.client_exceptions.ClientResponseError: 403, message='Forbidden', url=URL('https://api-wired-prod-1-euw1.wrd-aws.com/commerce/v1/persons/86523cf5-aa91-4bfd-b76e-0f744e1ccf31?country=IT') Thank you
Roberto

[epenet]

Hi,

It was reported on hacf-fr/hassRenaultZE#120, but I don't have a root cause for it yet.
I suspect something changed on the Renault servers, but the app seems to still work OK.

Also, it affects all endpoints, not just persons endpoint

[db-EV]

According to @dehsgr is a new Kamereon API key needed: Ae9FDWugRxZQAGm3Sxgk7uJn6Q4CGEA2

[epenet]

Thanks @db-EV
The new key works for me - I've created corresponding PR #182

@ik2wxx does that branch work for you?
@dehsgr how did you discover the new key? (you can email me at dev_at_zeflip_com if you do not want to share the method in public)

[PysX]

PR works for me too, thanks!

[epenet]

Before I merge, I would like to know how to make it work for @db-EV
Is it specific to countries? to models?
Is it possible to "request" the new API key from a server?
etc.

[db-EV]

It's working for me now as well. You can go ahead.
I don't know why it didn't work at the first try.

[mfonville]

When I decompiled the app it still has the old values in it. So I am quite sure they deploy the new values using Firebase remote-config: https://firebase.google.com/docs/remote-config

A test to check this would be to install the official app on an android device without Google Play Services (e.g. a LineageOS custom ROM and not installing any GApps) and to see if the app gets the updated key or not (I suspect not: because Firebase depends on Google Play Services).

Afaik there is no method (yet) to eavesdrop on the Firebase/Google connection. Though you could try to check the contents of the local configuration SQLite database of the app.

[epenet]

Yes, I was able to retrieve a sample from Firebase here: #184