[BUG]Login fails with 403: Missing 'Location' header in authorization response

[Mephisto090]

Before you post a new issue - you must first check the following (and check the boxes with an "X" below)

• 1.) Can you login using the smartphone app Volkswagen/Volkswagen Connect and interact with your car?
• 2.) Please make sure that you can login into https://vwid.vwgroup.io/ and make sure that any "Terms and Conditions" are all checked
• 3.) I do not have MFA enabled.

Environment

• Volkswagencarnet release with the issue: latest available version
• Last working homeassistant-volkswagencarnet release (if known): unknown
• Home Assistant Core release with the issue: TODO: fill in your Home Assistant Core version
• Operating environment (Home Assistant OS/Supervised/Container/Core/venv): TODO: fill in your Home Assistant installation type
• Car model and year: TODO: fill in car model and year
• Country where the car was bought: Germany
• Valid VW Connect subscription: TODO: yes/no
• Have you verified that the We Connect service works via VW´s portal?: Yes

Describe the bug

The Volkswagen Connect integration fails during login/reauthentication in Home Assistant.

The credentials are correct. I can log in using the official Volkswagen/Volkswagen Connect smartphone app and interact with the car. I can also log in to the Volkswagen/VW ID website. All available terms, privacy notices, EULA prompts, and required confirmations have already been accepted on the website.

Despite this, the Home Assistant integration fails during the OAuth authorization flow with HTTP 403:

Authentication error during login: Missing 'Location' header in authorization response. Status: 403

After that, token validation fails because the expected token data is missing:

Token validation failed - missing token data: 'identity'

Steps to Reproduce

1. Open Home Assistant.
2. Go to the Volkswagen Connect integration.
3. Start reauthentication or try to configure/login again.
4. Enter valid Volkswagen account credentials.
5. The login fails.
6. The integration triggers reauthentication again.

Expected behavior

The integration should complete the Volkswagen login flow successfully and connect to the Volkswagen Connect service.

Screenshots

Not applicable.

Traceback/Error logs

2026-06-22 20:53:07.885 ERROR (MainThread) [volkswagencarnet.vw_connection] Authentication error during login: Missing 'Location' header in authorization response. Status: 403
2026-06-22 20:53:12.673 ERROR (MainThread) [volkswagencarnet.vw_connection] Authentication error during login: Missing 'Location' header in authorization response. Status: 403
2026-06-22 20:53:13.149 ERROR (MainThread) [volkswagencarnet.vw_connection] Authentication error during login: Missing 'Location' header in authorization response. Status: 403
2026-06-22 20:53:13.898 WARNING (MainThread) [custom_components.volkswagencarnet] Could not login to Volkswagen Connect. Please check your credentials and verify that the service is working. You may need to accept the EULA at https://www.myvolkswagen.net/
2026-06-22 20:53:13.898 WARNING (MainThread) [custom_components.volkswagencarnet] Failed to login, triggering reauth

2026-06-22 21:10:47.278 DEBUG (MainThread) [custom_components.volkswagencarnet.config_flow] Creating connection to Volkswagen Connect for reauth
2026-06-22 21:10:47.279 DEBUG (MainThread) [volkswagencarnet.vw_connection] Initiating new login
2026-06-22 21:10:47.279 DEBUG (MainThread) [volkswagencarnet.vw_connection] Requesting openid config
2026-06-22 21:10:47.373 DEBUG (MainThread) [volkswagencarnet.vw_connection] Requesting authorization page from "https://identity.vwgroup.io/oidc/v1/authorize"
2026-06-22 21:10:47.509 ERROR (MainThread) [volkswagencarnet.vw_connection] Authentication error during login: Missing 'Location' header in authorization response. Status: 403
2026-06-22 21:10:48.675 WARNING (MainThread) [volkswagencarnet.vw_connection] Token validation failed - missing token data: 'identity'
2026-06-22 21:10:48.679 WARNING (MainThread) [custom_components.volkswagencarnet.config_flow] Unable to login to Volkswagen Connect. May need to accept a new EULA. Try logging in to the portal: https://www.myvolkswagen.net/

Debug information - all JSON responses from logfile

Debug logging was enabled. No usable JSON response was received for the failed authorization step because the request to the Volkswagen authorization endpoint returned HTTP 403 and no expected Location header.

Relevant debug line:

2026-06-22 21:10:47.373 DEBUG (MainThread) [volkswagencarnet.vw_connection] Requesting authorization page from "https://identity.vwgroup.io/oidc/v1/authorize"
2026-06-22 21:10:47.509 ERROR (MainThread) [volkswagencarnet.vw_connection] Authentication error during login: Missing 'Location' header in authorization response. Status: 403

Additional context

The credentials are valid and work outside Home Assistant.

Already checked:

• Login works in the official Volkswagen/Volkswagen Connect smartphone app.
• Login works on the Volkswagen/VW ID website.
• All available terms, privacy notices, EULA prompts, and required confirmations have been accepted on the website.
• The Volkswagen Connect integration is updated to the latest available version.
• Reauthentication in Home Assistant still fails with HTTP 403.
• The issue seems to happen before token validation, because the authorization response does not contain the expected Location header.

Note

Issues lacking sufficient details or context may be subject to closure without prior notice. Detailed bug reports are essential for effective issue resolution. Thank you for your cooperation.

[emanuelsilvapt]

Did you read the warnings?
It is broken… We need to wait for a possible solution…