SwedeSpeed - Volvo Performance Forum banner

21 - 40 of 86 Posts

·
Registered
Joined
·
6,181 Posts
Hey all you tech smart Volvo owners: Got a T8 which essentially requires the VOC app on smart phone to "precondition"/- remotely before driving. App allows me to perform necessary communication with the car I own. Volvo is gonna charge me to use this App after the initial free period (I think around $200/year). Can one of you Create a "simple" app that I can purchase once and download and use without paying $200/year? I don't need the other features (like remotely checking tire pressure and other diagnostics-- I can do that in my car). Wider market if you can make the app succeed with remote start. Then (almost) all Volvo owners will purchase your app after initial free VOC ends. You could charge a lot (but only once please!) to purchase and download your app. VOC App Needs competition!
This means circumventing the SSL certificates, Ok for garage project but would not be legal to sell... And that certificate can expire in 4 years...
 

·
Registered
Joined
·
77 Posts
Can one of you Create a "simple" app that I can purchase once and download and use without paying $200/year?
This would not be possible. The Volvo on Call app doesn't actually connect to the car directly, but instead asks the Volvo servers to relay a message to the car on its behalf.

Any third party Volvo On Call app would ultimately require a Volvo On Call subscription in order to establish a connection to the vehicle.

You might be able to install an aftermarket alarm system that includes remote start, but any solution that works with an app would most likely require a cellular connection and monthly fee.
 

·
Registered
Joined
·
86 Posts
Discussion Starter #24 (Edited)
I couldn't get honk_blink working either. I've only been using preclimatization start/stop and lock/unlock in a rather basic SmartThings device handler for a few weeks. I think honk_blink needs a location passed with it - need to take a closer look.
Hmm... so I was just about to take a look, then I noticed that the honk/flash feature is missing from the VOC app on my iPhone. Am I nuts - is it gone? Perhaps this is why it isn't working... they must have disabled the feature.

For reference, if anyone wants to intercept the traffic from the app, it's a piece of cake with Fiddler. iOS is able to globally trust the self-signed proxy certs.

http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/ConfigureForiOS


Edit: Nevermind - see posts below.
 

·
Registered
Joined
·
63 Posts
The honk/flash option is under the Map tab. Also have the ability to just flash the lights.


Sent from my iPhone using Tapatalk
 

·
Registered
Joined
·
86 Posts
Discussion Starter #26
The honk/flash option is under the Map tab. Also have the ability to just flash the lights.


Sent from my iPhone using Tapatalk
Thanks!!

Here's how to get it working:

POST https://vocapi-na.wirelesscar.net/customerapi/rest/vehicles/<VIN>/honk_blink/lights HTTP/1.1
Host: vocapi-na.wirelesscar.net
Accept: application/vnd.wirelesscar.com.voc.Service.v4+json; charset=utf-8
X-Client-Version: 4.3.0.31075
Accept-Language: en-us
Accept-Encoding: br, gzip, deflate
Content-Type: application/vnd.wirelesscar.com.voc.ClientPosition.v4+json; charset=utf-8
X-Os-Version: 11.3
Connection: keep-alive
X-Originator-Type: app

{"clientAccuracy":0,"clientLatitude":00.0000,"clientLongitude":00.0000}


The latitude and longitude values have to be within a 100 meter radius of the vehicle's location (http://volvo.custhelp.com/app/answers/detail/a_id/9089/~/honk-and-flash). So, we can just get the current coordinates of the vehicle, and send those back as the clientLatitude and clientLongitude values to get around the location requirement. :)
 

·
Registered
Joined
·
86 Posts
Discussion Starter #29 (Edited)
How do we do that?
To get the vehicle's location,

GET https://vocapi-na.wirelesscar.net/customerapi/rest/v3.0/vehicles/<VIN>/position?client_longitude=-00.00&client_precision=5.000000&client_latitude=00.000

Response:
{
"position": {
"longitude": 00.000,
"latitude": 00.000,
"timestamp": "2018-02-24T15:32:08+0000",
"speed": null,
"heading": null
},
"calculatedPosition": {
"longitude": null,
"latitude": null,
"timestamp": null,
"speed": null,
"heading": null
}
}

It's interesting that the vehicle location is more accurate than any of the clients I've tested (iPhone X, Pixel 2, Surface Pro). I'm thinking it would be cool to trigger a home entry scene when the vehicle is within 10 feet of the final location (coordinates of a garage parking spot, for example).

I'm kinda looking at something else right now. I've started trying to understand the recent Onstar and UConnect vulnerabilities, and am experimenting with SOS. Putting the APIs aside for a bit.
 

·
Registered
Joined
·
336 Posts
To get the vehicle's location,

GET https://vocapi-na.wirelesscar.net/customerapi/rest/v3.0/vehicles/<VIN>/position?client_longitude=-00.00&client_precision=5.000000&client_latitude=00.000

Response:
{
"position": {
"longitude": 00.000,
"latitude": 00.000,
"timestamp": "2018-02-24T15:32:08+0000",
"speed": null,
"heading": null
},
"calculatedPosition": {
"longitude": null,
"latitude": null,
"timestamp": null,
"speed": null,
"heading": null
}
}
Awesome, thanks!

Do you know if this works with the vehicle in motion? "Speed" and "heading" suggest yes. I only ask because the VOC app won't show locations when the vehicle is in motion , for some strange reason.
 

·
Registered
Joined
·
607 Posts
Has anyone here built it and tested it successfully?

Looks like this might be perfect to use as a proxy between SmartThings/IFTTT or something... However, I wonder if there's a limit on the number of calls that can be made in any given time period (DoS-type prevention) to the API servers?
 

·
Registered
Joined
·
336 Posts
Has anyone here built it and tested it successfully?

Looks like this might be perfect to use as a proxy between SmartThings/IFTTT or something... However, I wonder if there's a limit on the number of calls that can be made in any given time period (DoS-type prevention) to the API servers?
Ah, Python. Now you are talking my language.

Kind of busy right now, but I will take a look at some point soon.

Thanks for the pointer.
 

·
Registered
Joined
·
123 Posts
Lol i did the same thing with MoviePass recently.
I accessed there API from fiddler and i got a notice today 🤯 hopefully volvo is okay that we are using this


Sent from my iPhone using Tapatalk
 

·
Registered
Joined
·
20 Posts
yes, as mentioned above you use basic authentication. Your credentials are sent in the header of each http get/post.

the header line is
Code:
authorization: Basic username:password
where username : password is base64 encoded

e.g.
Code:
authorization: Basic eW91d2FudDpteXBhc3N3b3JkPw==
 

·
Registered
Joined
·
519 Posts
It's interesting that the vehicle location is more accurate than any of the clients I've tested (iPhone X, Pixel 2, Surface Pro). I'm thinking it would be cool to trigger a home entry scene when the vehicle is within 10 feet of the final location (coordinates of a garage parking spot, for example).

I'm kinda looking at something else right now. I've started trying to understand the recent Onstar and UConnect vulnerabilities, and am experimenting with SOS. Putting the APIs aside for a bit.
This is essentially what Tesla is doing with the automatic open/close garage door function. This trigger also raises and lowers the vehicle for ground height clearance on driveways.



Sent from my iPhone using Tapatalk Pro
 

·
Registered
Joined
·
6,181 Posts
yes, as mentioned above you use basic authentication. Your credentials are sent in the header of each http get/post.

the header line is
Code:
authorization: Basic username:password
where username : password is base64 encoded

e.g.
Code:
authorization: Basic eW91d2FudDpteXBhc3N3b3JkPw==
Not even https:// ?

Fusion · Red · T8 · XC60
 

·
Registered
Joined
·
115 Posts
Thanks for the info!

Got the authorization header right, but when hitting https://vocapi-na.wirelesscar.net/customerapi/rest/v3.0/vehicles/<my vin>/status I'm still getting the InvalidInputCriteria error HTML back.

Is there anything else necessary other than the Authorization header?
 
21 - 40 of 86 Posts
Top