HMAC-SHA256

[Bodyart 231]

Hi all!

I would like to use

Please login or register to see this link.

which requires HMAC-SHA256 hashing.
 

Please login or register to see this code.

Since Fibaro LUA doesn't allow the use of libraries, this function needs programming. Unfortunately I don't understand that mechanism so I'm not able to code this. I've tried ChatGPT to help me, but that didn't work out.
Ie here any LUA guru who could help me with this function? Any help is very much appreciated.

[SmartHomeEddy 878]

There are some lua examples on GitHub, are they of any use?

 

Please login or register to see this link.

 

[Bodyart 231]

44 minutes ago, SmartHomeEddy said:

There are some lua examples on GitHub, are they of any use?

 

Please login or register to see this link.

 

Thnx Eddy 🙏 I will investigate

[SmartHomeEddy 878]

Don’t know if it works on the Fibaro version of Lua. 

[marczu_83 22]

 

[tinman 1,028]

On 2/15/2024 at 7:55 PM, SmartHomeEddy said:

Don’t know if it works on the Fibaro version of Lua. 

 

amen 

 

[marczu_83 22]

HI using Tinmans libs i make this

Please login or register to see this code.

Unfortunately, I get a 401 error. The same data that I generate thanks to the libraries from Tinman work in Powershell.

Please login or register to see this code.

 

[tinman 1,028]

16 hours ago, marczu_83 said:

Unfortunately, I get a 401 error. The same data that I generate thanks to the libraries from Tinman work in Powershell.

Please login or register to see this code.

 

 

can you compare message and hmac from both?

 

how the token and secretkey looks like?

 

Edited February 20 by tinman

[marczu_83 22]

21 minut temu, tinman napisał:

 

can you compare message and hmac from both?

 

how the token and secretkey looks like?

 

to test, I generated hmac, time and pasted this data together with secretkey and token into the query in Powershell and it worked, i.e. the data itself is created correctly, it seems to me that the http query from fibaro is somehow incorrect

 

Please login or register to see this code.

 

I changed one character so as not to paste the real on

More info about SwitchBot API

 

Please login or register to see this link.

[tinman 1,028]

6 minutes ago, marczu_83 said:

it seems to me that the http query from fibaro is somehow incorrect

 

did you tried already checkCertificate = false ?

[marczu_83 22]

2 minuty temu, tinman napisał:

 

did you tried already checkCertificate = false ?

Yes i;ve alreade tried this.

When i paste same time stamp, token, secret in lua and powershell and then made hmac i get the same result.

So olny difference is web request.

If you want to test something i can send you dm with token and secret

 

[tinman 1,028]

1 hour ago, marczu_83 said:

If you want to test something i can send you dm with token and secret

 

sure, i can take a look today evening

[tinman 1,028]

6 hours ago, marczu_83 said:

When i paste same time stamp

 

it was actually timestamp

 

Please login or register to see this code.

 

gives me 200, so it works properly.

 

Please login or register to see this attachment.

Edited February 20 by tinman

[Christophe van vossel 5]

would you be so kind to tell us how you installed the HMAC256 library in fibaro HC3 ? i am currently working on a project for a neato vacuum that uses a simular thing

[marczu_83 22]

my way of doing it: download QA from this post

 

 

upload QA to your HC3, copy everything from sha2 tab (if you dont see it click on file icon - circle)

Please login or register to see this attachment.

 

open your QA click on file icon then click plus sign

on the new file paste everything and save QA

now you can use it like this

Please login or register to see this code.

[Christophe van vossel 5]

thnx  i will give this one a try this evening  

[Christophe van vossel 5]

On 11/5/2024 at 2:37 PM, marczu_83 said:

my way of doing it: download QA from this post

 

 

upload QA to your HC3, copy everything from sha2 tab (if you dont see it click on file icon - circle)

Please login or register to see this attachment.

 

open your QA click on file icon then click plus sign

on the new file paste everything and save QA

now you can use it like this

Please login or register to see this code.

SO if i am correct i need all that data copied for example in a scene or quickapp i am designing ?

[marczu_83 22]

no, but I copy and paste everything to make it easier.

you can only copy the functions you will use.

[Christophe van vossel 5]

6 hours ago, marczu_83 said:

no, but I copy and paste everything to make it easier.

you can only copy the functions you will use.

could you help me with the code and a button ? i am kind of stuck for the moment 😛

[Christophe van vossel 5]

trying todo the same i am geting some errors in the quickapp script

 

 

[07.11.2024] [19:53:43] [TRACE] [QUICKAPP53]: UIEvent: {"eventType":"onReleased","elementName":"button_ID_2_1","deviceId":53,"values":[]}[07.11.2024] [19:53:43] [DEBUG] [QUICKAPP53]: ./include/Neato_Robot_Info.lua:6: attempt to concatenate a nil value (global 'requestbody')[07.11.2024] [19:53:43] [ERROR] [QUICKAPP53]: QuickApp crashed[07.11.2024] [19:53:43] [ERROR] [QUICKAPP53]: Unknown error occurred: handleJsonRpc

 

 

code used:

function QuickApp:getrobotinfo()

    local robotserial = "XXXXXXXXX"

    local robotseriallow = string.lower(robotserial)

    local robotsecret = "XXXXXXXX"

    local date = tostring(os.date("!%a, %d %b %Y %X GMT"))

    local string_to_sign = robotseriallow .. "\n".. date .. "\n" .. requestbody

    local requestbody = '{"reqId": "77", "cmd": "getRobotState"}'

    local signature = sha.hmac(sha.sha256, robotsecret, string_to_sign)

    local binary_hash = sha.hex2bin(hmac)

    local base64_hash = sha.bin2base64(binary_hash)

    self.http = net.HTTPClient({timeout=5000})

   

 

    self.http:request("https://nucleo.neatocloud.com:4443/vendors/neato/robots/OPS02217-985DADC5A1BA/messages", {

          options = {

              data = json.encode(requestbody),

              method = "POST",

              checkCertificate = false,

              headers = {

                ["Accept"] = "application/vnd.neato.nucleo.v1",

                ["Content-Type"] = "application/json",

                ["Date"] = os.date("!%a, %d %b %Y %X GMT"),

                ["Authorization"] = "NEATOAPP" + " " + signature,

              }

          },

          success = function(response)

              self:debug(response.status)

              self:debug(response.data)

          end,

          error = function(message)

              self:debug("error:", message)

          end

      })

end