Can't find token - Githubissues

gcorgnet commented 6 years ago

Not sure if this is due to a recent update but my Xiaomi Mi Vacuum Cleaner has stoped being seen by my Home Assistant. I tried to get the token again using MiToolkit but while the process goes through fine, I am not getting any token. Note: I manually peeked inside miio2.db and I could see that the token column was indeed empty.

Am I missing something?

LarsNorgaard commented 6 years ago

Same thing with here. The app won't get any tokens with the latest version of MiHome 5.1.1

gcorgnet commented 6 years ago

Worse... I tried downgrading to earlier version and I still can't get the app to find the token. (The DB has an empty token column)

On Thu, Feb 1, 2018, 07:32 Lars Nørgaard notifications@github.com wrote:

Same thing with here. The app won't get any tokens with the latest version of MiHome 5.1.1

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/ultrara1n/MiToolkit/issues/12#issuecomment-362026914, or mute the thread https://github.com/notifications/unsubscribe-auth/AEgzVyqWvQm4jHyawEe6X1RMfTkmevKDks5tQLHVgaJpZM4RzqNF .

LarsNorgaard commented 6 years ago

Seems like they pull the token from the servers now: https://github.com/rytilahti/python-miio/issues/185

LarsNorgaard commented 6 years ago

Downgrade the app to version 5.0.19 and you'll be able to extract the token again. I used this: https://www.apkmirror.com/apk/xiaomi-inc/mihome/mihome-5-0-19-release/mihome-5-0-19-android-apk-download/download/

gcorgnet commented 6 years ago

Ok will try thanks. Although I am pretty sure I did that last night and was surprised not too have to pair my device (vacuum) again. Once I logged in, it just showed up... And no token...

On Thu, Feb 1, 2018, 08:17 Lars Nørgaard notifications@github.com wrote:

Downgrade the app to version 5.0.19 and you'll be able to extract the token again. I used this:

https://www.apkmirror.com/apk/xiaomi-inc/mihome/mihome-5-0-19-release/mihome-5-0-19-android-apk-download/download/

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/ultrara1n/MiToolkit/issues/12#issuecomment-362039920, or mute the thread https://github.com/notifications/unsubscribe-auth/AEgzV_9cfi_UpnSnmKnEcZjuH-MvWv7lks5tQLwugaJpZM4RzqNF .

thekoma commented 6 years ago

confirm, now the only option is a rooted phone and a sniffer inside the app. YAY!

neapolis79 commented 6 years ago

same here, i tried on several device, with both Mi Home 5.0.19 and the newer but always the program didn't extrac any token

mscalone commented 6 years ago

same problem. So how do you sniff the token inside the phone? do you know any tutorial?

thanks!

thekoma commented 6 years ago

@mscalone No idea ATM. Could be done with a proxy and a fake CA installed on the device but only if the app does not check the CA of the server.

lance36 commented 6 years ago

oh god no. i just got my vacuum and was trying to get it to work in HASS...

kalenjohnson commented 6 years ago

Since it's an update and what sounds like a big change from Xiaomi in the Mi Home app, I would assume it'll take the devs some time to figure out a new way to get the token.

In the meantime, you can use your vacuum with the Mi Home app I would think.

lance36 commented 6 years ago

Yeah, the bad news is the app only seems to pair if you keep the locale on Mainland Chinese, and i'm guessing not a lot of us can read mandarin.

The good news is i was able to extract my token with the apk @LarsNorgaard linked, but i have a spotty internet connection right now so its kinda harder :|

kalenjohnson commented 6 years ago

You can connect to Mainland China and the app will be 95% in English still

lance36 commented 6 years ago

ok i got my token and i can ping\control from app just fine, but for some reason python-miio isn't able to discover the vacuum:

mirobo —ip 192.168.0.105 —token <redacted> info
ERROR:miio.device:Unable to discover a device at address 192.168.0.105
Error: Unable to discover the device 192.168.0.105

EDIT: my bad: was working with 0.3.2. token extraction confirmed working with 0.3.5, will try HASS integration and report back.

EDIT2: make sure you are running HA 0.63.0, or else `python-miio is installed as 0.3.4 as a dependency and this happens:

 mirobo --ip 192.168.1.105 --token <redacted> info
Unable to fetch info, this can happen when the vacuum is not connected to the Xiaomi cloud.

EDIT3: Confirmed working on:

HASS == 0.63.0
Python == 3.5.3
python-miio == 0.3.5
apk version == 5.0.19
vacuum fw version == 3.39_003094

lance36 commented 6 years ago

P.S. For all the people that have reported not working with 5.0.19 apk, have you tried deleting the data from the app and doing the login again? make sure to select China Mainland or else it won't pair at all.

zuberspace commented 6 years ago

clearing data and installing 5.0.19 did work for me! remember to connect to the device after the downgrade and before reading the token.

lance36 commented 6 years ago

My vacuum wants to update again. Im scare.

Patattack666 commented 6 years ago

Did this for a friend recently. No idea sniffing the traffic between the device - servers due to some of the certificates are pinned, this can be circumvented but you'll see that all traffic is encrypted inside the TLS session. Now, what made me find the token was by using a rooted android device, installing latest xiaomi app, and found a folder called rc4_cache containing clear text decrypted traffic including the token. Theres ways to get privileges within the app as well, without using a rooted device and that is by using a tool called 'objection'. This tool patches the apk, adding some code which spawns a shell within the app - thus giving you read/write on the entire installation directory

ultrara1n / MiToolkit

Can't find token #12