Adding new mandatory "device-token" header to fix auth issues (#83)

* Added device token header to auth flow and to config file

* Changed url to oauth2 without trailing slash to avoid breaking in the future

* Updated readme and config examples

* Added random uuid to test credentials

* added README section for UUID generation

Co-authored-by: Markus Ressel <mail@markusressel.de>

Author: bastiandev

README.md

@@ -42,13 +42,34 @@ If you want to use environment variables:
 
 - `N26_USER`: username
 - `N26_PASSWORD`: password
+- `N26_DEVICE_TOKEN`: random [uuid](https://de.wikipedia.org/wiki/Universally_Unique_Identifier) to identify the device
 - `N26_LOGIN_DATA_STORE_PATH`: optional **file** path to store login data (recommended for cli usage)
 - `N26_MFA_TYPE`: `app` will use the paired app as 2 factor authentication, `sms` will use SMS to the registered number.
 
 Note that **when specifying both** environment variables as well as a config file and a key is present in both locations the **enviroment variable values will be preferred**.
 
 ## Authentication
 
+### Device Token
+
+Since 17th of June 2020 N26 requires a device_token to differentiate clients. This requires you to specify the `DEVICE_TOKEN`
+config option with a UUID of your choice. To generate a UUID you can use f.ex. one of the following options:
+
+Using python:
+```python
+python -c 'import uuid; print(uuid.uuid4())'
+```
+
+Using linux built-in tools:
+```shell
+> uuidgen
+```
+
+Using a website:
+[https://www.uuidgenerator.net/](https://www.uuidgenerator.net/)
+
+### 2FA
+
 Since 14th of September 2019 N26 requires a login confirmation (2 factor authentication). 
 
 There are two options here:
@@ -70,7 +91,7 @@ If you do not specify a `login_data_store_path` this login information is only s
 Or if using environment variables:
 
 ```bash
-> N26_USER=user N26_PASSWORD=passwd N26_MFA_TYPE=app n26 balance
+> N26_USER=user N26_PASSWORD=passwd N26_DEVICE_TOKEN=00000000-0000-0000-0000-000000000000 N26_MFA_TYPE=app n26 balance
 123.45 EUR
 ```
 

n26.tml.example

@@ -1,5 +1,6 @@
 [n26]
 username = "john.doe@example.com"
 password = "$upersecret"
+device_token = "00000000-0000-0000-0000-000000000000"
 login_data_store_path = "~/.config/n26/token_data"
 mfa_type = "app"

n26.yml.example

@@ -1,5 +1,6 @@
 n26:
     username: john.doe@example.com
     password: $upersecret
+    device_token: 00000000-0000-0000-0000-000000000000
     login_data_store_path: "~/.config/n26/token_data"
     mfa_type: app

n26/api.py

@@ -48,6 +48,7 @@ def __init__(self, cfg: Config = None):
             cfg = Config()
         self.config = cfg
         self._token_data = {}
+        BASIC_AUTH_HEADERS["device-token"] = self.config.DEVICE_TOKEN.value
 
     @property
     def token_data(self) -> dict:
@@ -392,7 +393,7 @@ def _initiate_authentication_flow(username: str, password: str) -> str:
             "password": password
         }
         # TODO: Seems like the user-agent is not necessary but might be a good idea anyway
-        response = requests.post(BASE_URL_GLOBAL + "/oauth/token/", data=values_token, headers=BASIC_AUTH_HEADERS)
+        response = requests.post(BASE_URL_GLOBAL + "/oauth2/token", data=values_token, headers=BASIC_AUTH_HEADERS)
         if response.status_code != 403:
             raise ValueError("Unexpected response for initial auth request: {}".format(response.text))
 
@@ -415,7 +416,7 @@ def _refresh_token(refresh_token: str):
             'refresh_token': refresh_token,
         }
 
-        response = requests.post(BASE_URL_GLOBAL + '/oauth/token/', data=values_token, headers=BASIC_AUTH_HEADERS)
+        response = requests.post(BASE_URL_GLOBAL + '/oauth2/token', data=values_token, headers=BASIC_AUTH_HEADERS)
         response.raise_for_status()
         return response.json()
 
@@ -455,7 +456,7 @@ def _complete_authentication_flow(self, mfa_token: str) -> dict:
         else:
             mfa_response_data['grant_type'] = "mfa_oob"
 
-        response = requests.post(BASE_URL_DE + "/oauth/token/", data=mfa_response_data, headers=BASIC_AUTH_HEADERS)
+        response = requests.post(BASE_URL_DE + "/oauth2/token", data=mfa_response_data, headers=BASIC_AUTH_HEADERS)
         response.raise_for_status()
         tokens = response.json()
         return tokens

n26/config.py

@@ -47,6 +47,17 @@ def __new__(cls, *args, **kwargs):
         secret=True
     )
 
+    DEVICE_TOKEN = StringConfigEntry(
+        description="N26 device token",
+        example="00000000-0000-0000-0000-000000000000",
+        key_path=[
+            NODE_ROOT,
+            "device_token"
+        ],
+        required=True,
+        regex="[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}",
+    )
+
     LOGIN_DATA_STORE_PATH = FileConfigEntry(
         description="File path to store login data",
         example="~/.config/n26/token_data",

tests/test_creds.yml

@@ -1,4 +1,5 @@
 n26:
   username: john.doe@example.com
   password: $upersecret
+  device_token: 5a136085-abd8-4e71-9402-e0a61dd1dc81
   mfa_type: app