New Topic

Zipato support center Topic Question Uncategorized

This object is in archive!

Cant get api for login to work in c#

Andrej shared this question ago

Need Answer

I am trying login with api from my c3 project.

First i call

WebClient client = new WebClient();
string url = "https://my.zipato.com:443/zipato-web/v2/user/init";
var result = JsonConvert.DeserializeObject<init>(client.DownloadString(url));

from here i get valid response with jsessionid and nonce.

Then i make a token from it:

var token = tools.CalculateSha1(nonce + tools.CalculateSha1(password, Encoding.Default), Encoding.Default);

pasword is my password for login and nonce i get from init api.

Ok now i have a token and then i try this:

var url22 = "https://my.zipato.com:443/zipato-web/v2/user/login";
string username = "username";
WebClient client2 = new WebClient();
string url2 = url22 + "?username=" + username + "&token=" + token.ToString();
var result2 = JsonConvert.DeserializeObject(client.DownloadString(url2));

But i am always getting success:false, user not found or wrong password.

I read that i need to send cookie with session id but i dont know how :).

Anyone has an ideo on hot to login with c#?

The same question

Replies (9)

Felix ●

Hi Andrej,

Have you solved your problem? Because i'm facing the same.

-Felix

Reply URL

Pål Andreassen ●

Either you are hashing wrong, or you are missing an argument on the authenticate call. I pass &method=SHA1 as well.

using System;
using System.IO;
using System.Net.Http;
using System.Net.Http.Headers;
using System.Security.Cryptography;
using System.Text;
using Newtonsoft.Json;
namespace ZipaSharp
{
public class ZipaSharpAPI
{
private string _apiEndpoint = string.Empty;
private string _nonce = string.Empty;
private string _jsessionid = string.Empty;
public ZipaSharpAPI(string apiEndpoint, string username, string password)
{
_apiEndpoint = apiEndpoint;
if (!_apiEndpoint.EndsWith("/"))
_apiEndpoint += "/";
var session = JsonGet("user/init");
if (session["success"] == "true")
{
_nonce = session["nonce"];
_jsessionid = session["jsessionid"];
AuthenticateUser(username, password);
}
}
#region API calls
public void GetDevices()
{
}
#endregion
#region "Private methods"
private void AuthenticateUser(string username, string password)
{
var token = SHA1(_nonce + SHA1(password));
var loginResponse = JsonGet(string.Format("user/login?username={0}&token={1}&method=SHA1", username, token));
if (loginResponse["success"] != "true")
throw new ArgumentException("Unable to authenticate with Zipabox API. Wrong username and/or password.");
}
private string SHA1(string text)
{
// convert string to stream
var byteArray = Encoding.ASCII.GetBytes(text);
var stream = new MemoryStream(byteArray);
using (var bs = new BufferedStream(stream))
{
using (var sha1 = new SHA1Managed())
{
var hash = sha1.ComputeHash(bs);
var formatted = new StringBuilder(2*hash.Length);
foreach (byte b in hash)
{
formatted.AppendFormat("{0:X2}", b);
}
return formatted.ToString().ToLower();
}
}
}
public dynamic JsonGet(string methodAndArguments)
{
var strJson = MakeGetRequest(_apiEndpoint + methodAndArguments);
dynamic jObj = JsonConvert.DeserializeObject(strJson);
return jObj;
}
private string MakeGetRequest(string requestUrl)
{
using (var handler = new HttpClientHandler() { UseCookies = false})
{
using (var client = new HttpClient(handler))
{
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
var message = new HttpRequestMessage(HttpMethod.Get, requestUrl);
if (!string.IsNullOrEmpty(_jsessionid))
{
message.Headers.Add("Cookie", "JSESSIONID=" + _jsessionid);
}
var response = client.SendAsync(message).Result;
return response.Content.ReadAsStringAsync().Result;
}
}
}
#endregion
}
}

Either you are hashing wrong, or you are missing an argument on the authenticate call. I pass &method=SHA1 as well.

using System;
using System.IO;
using System.Net.Http;
using System.Net.Http.Headers;
using System.Security.Cryptography;
using System.Text;
using Newtonsoft.Json;
namespace ZipaSharp
{
public class ZipaSharpAPI
{
private string _apiEndpoint = string.Empty;
private string _nonce = string.Empty;
private string _jsessionid = string.Empty;
public ZipaSharpAPI(string apiEndpoint, string username, string password)
{
_apiEndpoint = apiEndpoint;
if (!_apiEndpoint.EndsWith("/"))
_apiEndpoint += "/";
var session = JsonGet("user/init");
if (session["success"] == "true")
{
_nonce = session["nonce"];
_jsessionid = session["jsessionid"];
AuthenticateUser(username, password);
}
}
#region API calls
public void GetDevices()
{
}
#endregion
#region "Private methods"
private void AuthenticateUser(string username, string password)
{
var token = SHA1(_nonce + SHA1(password));
var loginResponse = JsonGet(string.Format("user/login?username={0}&token={1}&method=SHA1", username, token));
if (loginResponse["success"] != "true")
throw new ArgumentException("Unable to authenticate with Zipabox API. Wrong username and/or password.");
}
private string SHA1(string text)
{
// convert string to stream
var byteArray = Encoding.ASCII.GetBytes(text);
var stream = new MemoryStream(byteArray);
using (var bs = new BufferedStream(stream))
{
using (var sha1 = new SHA1Managed())
{
var hash = sha1.ComputeHash(bs);
var formatted = new StringBuilder(2*hash.Length);
foreach (byte b in hash)
{
formatted.AppendFormat("{0:X2}", b);
}
return formatted.ToString().ToLower();
}
}
}
public dynamic JsonGet(string methodAndArguments)
{
var strJson = MakeGetRequest(_apiEndpoint + methodAndArguments);
dynamic jObj = JsonConvert.DeserializeObject(strJson);
return jObj;
}
private string MakeGetRequest(string requestUrl)
{
using (var handler = new HttpClientHandler() { UseCookies = false})
{
using (var client = new HttpClient(handler))
{
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
var message = new HttpRequestMessage(HttpMethod.Get, requestUrl);
if (!string.IsNullOrEmpty(_jsessionid))
{
message.Headers.Add("Cookie", "JSESSIONID=" + _jsessionid);
}
var response = client.SendAsync(message).Result;
return response.Content.ReadAsStringAsync().Result;
}
}
}
#endregion
}
}

Reply URL

Felix ●

Thank you so much Pål, the problem was in the hashing.

Reply URL

leonmeijer ●

Hi guys,

I made an open source C# library which is on GitHub and NuGet. Feel free to help. https://github.com/leonmeijer/Zipato.NET

Reply URL

cgHome ●

Hi!

Great job leonMeijer! Thanks you very much. I was planning a development of an application on Windows Phone. Your work is going to save me a lot of time!

Question : How get allendpoints of type Switch On/Off?

Reply URL

cgHome ●

OK, we can use endpointtype to filtre actuator.onoff (or actuator.onoff.light)

Reply URL

leonmeijer ●

Hey chHome. It's also my intention to build an Universal (Win 8.1/WinPhone 8.1) or UWP (Universal Windows Platform, Windows 10) app. It will be a hobby project, but perhaps we can join our efforts.

Regarding your question, I'm working right now on extending the library with support for retrieving devices, better attribute support and I will add a method to get all on/off switches.

Reply URL

leonmeijer ●

I checked in to Github. You can call

var onOffEndpoints = await client.GetEndpointsWithOnOffAsync();

I didn't find endpointtype reliable enough so I'm retrieving all endpoints and all attributes and I link these two together in the object model. Then I return a list of all endpoints that have an attribute with a definition of com.zipato.cluster.OnOff. By default I exclude the Zipabox on/off commands (for example for the LEDs). And by default hidden devices are returned, unless you pass hideHidden = true which makes a call for each endpoint unfortunately.

Reply URL

derHelle ww.zipabox.de ●

Hi,

try this one:

https://github.com/ggruner/Zipatoapi

Gruß Helle

Reply URL