Added support for Vaillant Thermostat, how to integrate in official release

Hi. I am trying to use your app but I habe problems to find the following informations:
Client ID
Client Secret
User prefix

Can someone help me?

hi, i know it’s 8 years later but can you maybe still share the client secret to me please? ^^

the secret is 929a9f6253babbee1a6e8d4bd51745f
for version 2.4.4.0
There is one number missing at the end and it is lower than 1…

1 Like

however I have a feeling I cant do anything anymore except reading the temperature???

I have recently installed the integration, and to me it seems to work just fine, with version number 1.0.4.0 (even if the iPhone client version is much newer, 2.4.2). Also I wanted to share a little guide here how can you find the ominous client_secret and client_id yourself if you are curious enough. I am a Mac and iPhone user myself, so I detail steps for these platforms, but it can easily be adopted.

  1. Install Proxyman
  2. Put your Mac and iPhone on the same Wi-Fi
    • Find out your Mac’s IP by going to System Settings → Network → Wifi → Details → IP Address <MAC_IP>
    • Make sure no VPN is active on your Mac and iPhone
  3. Configure the iPhone to use your Mac as a proxy
    • Settings → Wi-Fi → (your network) → Configure Proxy → Manual
      • Server: your Mac’s IP <MAC_IP>
      • Port: 9090
  4. Install the trust certificate
    • Open Safari on the iPhone and browse to: http://proxy.man/ssl
      • Allow → Chose a Device → iPhone
    • Install it by going to: Settings → VPN & Device Management → Install Profile
    • Trust the certificate: Settings → About → Certificate Trust Settings → Enable full trust
  5. Open proxyman and select remote device on the left sidebar
    1. You will see your phone show up as a remote device with it’s IP address.
    2. On your phone open the eRelax/vSmart Vaillant app
      1. Perform a some actions, so that some traffic is registered within Proxyman.
    3. Look for app.netatmo.net URL (indeed the vaillant app is just a wrapper around netatmo :shushing_face:) → Click on it
    4. Select one of the requests in the middle top panel. At this point you cannot see the traffic as it is encrypted with TLS. You need to enable HTTPS introspection to be able to use the installed Proxyman certificate. Click on Enable for this domain in the lower left corner
    5. Log out and log back in from the eRelax app on your phone.
    6. You will see a request sent to https://app.netatmo.net/oauth2/token. Select it, and click on Body to get the content.
    7. In the token you will find the client_id, and client_secret we have been looking for :slightly_smiling_face:
      • And to our horror you will also see your password unencrypted :scream:. This is the exact reason why you should not trust any public wifi, because a bad actor can do what we did with some tricks (called man in the middle attacks). Be safe!

Any chance to get access somehow to the flow temperatures of the boilers, maybe the return temperatures, heat curve?

Hi. I am trying to use your app but I habe pr the informations:
Client ID
Client Secret
User prefix

Can someone help me?
I’m on iphone et je suis français :face_with_hand_over_mouth:

Thank’s