-
-
Notifications
You must be signed in to change notification settings - Fork 67
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Can't login: 403 Client Error: Forbidden for url: https://login.ford.com #488
Comments
Same issue here. Thought it was because I upgrade the Core, but it seems just bad timing. |
Same here, right after updating to 2024.5.2 (from 2024.5.1) |
Ok, so it is core related. |
I didn't change the core, I still have 2024.4.2 and I have the same error. |
Same issue on 2024.5.1 |
Hi, It is the same here, Ford must have changed something. |
Same issue here. |
Same here. I thought I got banned or something |
Same here in Germany with my Kuga. |
Since 2024.5.2 the FordPass integration cannot initalize anymore. Logfile says: "Error fetching fordpass data: Error communicating with FordPass for vin number" |
Issue isn't core, it's on Fords side for this one. Maybe it will resolve itself? Or maybe some tweaks will need to be made. |
Same issue here, started around 9:31AM eastern. |
Hi! The error I get in the log starting today is below. Thanks for any idea. [139683214187072] 403 Client Error: Forbidden for url: https://login.ford.com/GUID-REMOVED/B2C_1A_SignInSignUp_EN-GB/SelfAsserted?tx=StateProperties=eyJUSUQiOiIxY2ZkMGNhZS1iMWQ1LTQ3ZTQtYTc1Yi1jNjMwZDUyOTEyOGIifQ&p=B2C_1A_SignInSignUp_en-AU |
Same issue for me in Italy with a Ford Puma. Can't login. |
Have not updated anything HA related in a month. On Core 2024.4.3. Got this error today. Can't be HA related. |
Same here, can't login as of 5-7-2024 |
Looks like an API change to the login flow. Will try and take a look later today. In the meantime I recommend people disable the integration in HA until I can fix it :) |
Still running core 2024.1.6 and having the same issue |
Working again for me in Australia. Entities became available about 90 minutes ago without a HA restart. |
Not working here yet. |
I also noticed that the official FORDPASS app now shows some details that were previously unavailable/removed:
|
Initial looks it seems Ford have enabled Akamai Bot Manager in a fairly aggressive mode to prevent people calling the API Login from tools other than Fords own app. This probably isn't going to be a quick fix. It does look like they have officially launched their developer api that people could use but only available in Northern America and severely limited so I'm unable to test or implement that. Will keep playing and seeing if there's away round it. |
@itchannel The new FordPass Connect API in the developer program does have feature parity according to the Ford team in charge of it. The only difference is that anyone who wants to use it must register their FordPass account to use it and prevent lockouts. The Ford team has been attempting to reach out to you to get this functional / supported. |
You say only available in North America, in fact the website specifies only available in the US, so not even Canada! If the Ford team is really trying to reach out to you though, absolutely take this opportunity! That's exactly what we've been waiting for! Anything they can do to help make this official would go a very long way to helping all of us. |
^ The Ford team is. I don't speak for them, however my interactions with the team is that they do want to enable this type of functionality but also balance security concerns and legal concerns. The developer program is new, which is why it's US only right now. I am sure that will change over time. |
I signed up for a dev account, put n/a for company, and was poking around. From https://developer.ford.com/use-cases/connect-ford-to-daily-tracking-apps it says that the FordConnect API is available globally except for China. You can connect your dev account to Fordpass account and get API creds. |
Are you able to log in to the fordpass integration with those creds or does it require a different login URL? |
That's the tracking API only, that doesn't include things like unlocking or locking, remote start, etc. Scroll to the bottom of that page that you linked and will show the actual connect API separate and listed as USA only |
So this repository was last updated back in May, and the experimental 1.70 branch never was pushed to this repository. The official instructions on how to install 1.70 no longer work either as you can't get the token through that link anymore. Is this whole project simply abandonware at this point? I'm not trying to criticize the authors at all. I get it that Ford is not playing nice, and are making our lives difficult, however I'm wondering if there's even any work still happening on this, or if I just need to give up and realize that Fords can no longer be integrated into HA? |
I was able to use the method from 1.70 just last week. But Ford locked my account within 12 hours of setting it up again. |
Just now the link only gives me a 403 error when trying to log in, developer tools no longer shows a code. |
The 1.70 branch does work as it's what I am actively using and a lot of other users are as well. The issue and why I haven't pushed it to main is Ford are changing things a lot and have even dropped support for the semi working official API. We have been trying in the background to get open dialogue with Ford but it's been an uphill struggle and not expecting anything anytime soon. Unfortunately with these blockers I don't want to release the new version and then have a lot of people banned. So for now use 1.70 at your own risk. @benk016 If you are getting 403 please try a different browser or your account is banned/not setup correctly. |
I was using 1.70 until 2 days ago as well. with a secondary disposable account and then I got the "suspicious activity, reset your password" email. I reset my password, and then logged in again in my browser successfully. However today I couldn't get the new token. That said, I'm now trying to login again through the website, and it's just spinning. No error message, just never completes. Just tried my main account too on the main website, and it's not loading either, so maybe the Ford servers are having issues. I'll have to try again later. I do appreciate all you've done here, I really do! I'm just trying to gauge where we're at, the project seems at a stand still, and I get that based on Ford's actions. |
@itchannel well, I managed to get the token in firefox, but when I enter it into HA I just get "an unknown error occurred"
and
|
Yeah they recently started locking accounts and forcing you to verify and
change password if you're polling over a certain amount of time.
I got locked repeatedly a while back but mine is now set to 930 seconds and
I haven't been locked out once since.
[image: image.png]
…On Tue, Nov 26, 2024 at 6:18 PM benk016 ***@***.***> wrote:
I was able to use the method from 1.70 just last week. But Ford locked my
account within 12 hours of setting it up again.
—
Reply to this email directly, view it on GitHub
<#488 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AQAZQIXGSQSQ44TPYP5E3BL2CUFWRAVCNFSM6AAAAABHLB227CVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKMBSGMZDIOJZGI>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
I recently encountered an issue where my token was no longer accepted. This caused my account to be locked due to the reload mechanism in the Home Assistant integration, which retries more times than allowed by Ford, ultimately resulting in the lockout. I spoke with someone from the FordPass helpdesk, who mentioned that the limit is 250 calls per day. To prevent this issue from happening again, I created an automation that checks whether the FordPass integration is in error and disables the integration if needed. You need to install the Spook integration to be able to disable an integration.
In the
|
So I've confirmed my account is not locked. I have no problem logging in normally through the website. But when I try to enter my token into the fordpass integration (1.70) it just won't take it "Unknown error occurred" and the log messages as posted above. Anyone with any ideas? |
Update: DO NOT USE FIREFOX TO GET THE TOKEN. The token Firefox gave must have been invalid somehow as it gave me the "unknown error" But once I switched to chrome and got the token there I was successful. Also, Brave wouldn't get a token at all, even with all protections disabled. |
Looks like all was well here for months, and then my account got locked out as above (#488 (comment)) and I had to reset my password on the ford site, but I was indeed able to get in, but it is not accepting any token now from Firefox or Edge (same token). Edit, eventually got it working after numerous, repeated, and same attempts. Edge eventually worked, but I had to use USA, whereas my location, Canada is not working. |
Just noticed this had gone down today, and looking at the logs; it looks like the SSO URL no longer exists; https://sso.ci.ford.com. |
Still working normally for me here. |
had to remove the integration, restart HA, then reinstall the integration and then follow the procedure to get my token. |
Are we all talking about the original branch (v1.68) or the v1.70 branch? |
1.68 does not work at all. There is no way to get it working as is. The only version that somewhat works is 1.70, however the developer has decided not to publish that one officially so you have to download it manually to get it to work. |
I've installed 1.68 via HACS, deleted custom_components/fordpass/, downloaded v1.70.zip and copied its custom_components/fordpass to my config/custom_components/, restarted HA, verified
and paste:
into the config setup but it says token is invalid. I've tried both Canada and USA... |
Use a different browser. Only Chrome works to get the proper token. Any token copied from Firefox will not work. |
I first used Edge but then tried Chrome (same token). I also tried modifying the login URL (using Chrome) to |
Note: it was working a while ago but then I started getting something like invalid token (I think) so I deleted everything but am retrying it again now... |
Please do not paste this URL in public. It contains a one-time code giving unlimited access to your account without a password. You are supposed to paste the full URL, not just the code. Last time I logged in it worked on login.ford.com. |
No worries! I've been IT tech support for 35+ years and am not that naive. I modified the token characters in a couple of places before posting it!
Thanks, I'll try the full |
I've set the polling interval to 3600 (once per hour) |
So I followed the instructions, and my location header token URL doesn't start with fordapp:// it starts with https://www.account.ford.com/etc/... Anyone done this recently? Does this look familiar at all? |
Ok, that happens when instead of reading carefully, cutting the URL from the first line in the HA config dialog, and pasting that into your browser, you just navigate to fordpass.com and try to do the rest. If you do go to the URL provided by HA, as directed, then the rest is easy and works. |
2024-05-07 15:47:24.506 WARNING (MainThread) [custom_components.fordpass] 403 Client Error: Forbidden for url: https://login.ford.com/xxxxxxxxxxxxxxxxxxx/B2C_1A_SignInSignUp_EN-GB/SelfAsserted?tx=StateProperties=xxxxxxxxxxxxxxxxxxx&p=B2C_1A_SignInSignUp_en-AU
2024-05-07 15:47:24.506 WARNING (MainThread) [custom_components.fordpass] Error communicating with FordPass for xxxxxxxxxxxxxxxxxxx
2024-05-07 15:47:24.506 WARNING (MainThread) [custom_components.fordpass] Returning Stale data to prevent unavaliable status
2024-05-07 15:47:24.507 ERROR (MainThread) [custom_components.fordpass] Error fetching fordpass data: Error communicating with FordPass for xxxxxxxxxxxxxxxxxxx
Ford changed things again?
The text was updated successfully, but these errors were encountered: