🚨 📢 Google home endpoints returning 403

[ludeeus]

Google has pushed an update to google home devices.

All API endpoints with the exception of /setup/eureka_info not returns 403 (Unauthorized).
This change renders this library 95% useless and if not a workaround is discovered this will be deprecated and archived.

[ludeeus]

It looks like this issue started to roll out 28.06.19 around 02:24 AM (CET)
home-assistant/core#24815

[rithvikvibhu]

Hey @ludeeus, just wanted to let you know:
rithvikvibhu/GHLocalApi#39 (comment)

It's just adding another header and changing the base url. I think Home Assistant allows modules to store settings (like a token)?

[ludeeus]

Thanks for that @rithvikvibhu :)

Storing tokens in HA is not a problem.

Getting the token, on the other hand, looks like it may be too much for most users (require a rooted android device)

Currently I do not own any android devices, so I'm not able to test/dig myself.
I'll see if I can load up a VM or something to test this out :)

[rithvikvibhu]

Yeah, I'm really interested in how the app first gets the token. Maybe while signing in? Might be able to make the same requests.

[ludeeus]

I think my devices are in a limbo state, where both 8008 and 8443 are working (without auth token).

Which from what I can tell is super weird, I'll throw up a VM when it stops working for me to investigate further.

[rithvikvibhu]

Haha. That's definitely weird. Enjoy it while it lasts xD.
If you don't mind losing that "limbo state", restarting has changed for some people.

Edit: Just checked and even mine has the same behavior. Why can't they just stay on something for a while :/

[Leatherface75]

Have you found any solution yet?

[ludeeus]

No, not yet, and I doubt I will anytime soon (Unless google decides to give you the option to get this token from their dev pages.)

[Leatherface75]

Google Assistant already does that and works in Home Assistant so isn't it possible to get that information with that integration?
Both uses this API what i can see https://developers.google.com/actions/smarthome/reference/rest/

[ludeeus]

I don't see a token in any of the responses there.

[Leatherface75]

Ok i am no expert but there is a lot of commands you can use there and if there is too hard to get local api working maybe it's possible to get informations over that API instead.
Atleast better than not working at all.

https://developers.google.com/actions/smarthome/reference/rpc/google.home.graph.v1

What i think it does is running something like this when starting the google home app or similar command to get information of all devices.

https://developers.google.com/actions/smarthome/reference/rest/v1/devices/sync

[Leatherface75]

Here i found something too

https://developers.google.com/actions/smarthome/concepts/local

[tyjtyj]

Since GoogleLocalApi is now working
https://github.com/rithvikvibhu/GHLocalApi

Anyway to bring this integration working ?

[eliseomartelli]

That's a great news! @tyjtyj
I don't have a Google Home on hand now so I can't test it.
But if I've some time I'd love to help!

[ludeeus]

I have a few around @eliseomartelli I'll see if I can do some restructuring here this week to change the port and add an authorization header to the requests.