Error 403 when getting lock-status endpoint (Zoe50)

[LeclercqG]

Hello,

I'm having an issue, with the API for the lock-status endpoint.
I first noticed this issue using the renault integration for Home Assistant (not the custom one) where all the entities regarding status of doors or hatch are unavailable.
I tried debugging by trying to directly using this API in Python and in CLI and I'm getting an error 403 : Forbidden.

Trace got in CLI:
PS C:\Users\gleclercq> renault-api --debug http get /commerce/v1/accounts/{accountID}/kamereon/kca/car-adapter/v1/cars/{VIN}/lock-status

DEBUG:renault_api.kamereon:Received Kamereon response 502 on GET to https://api-wired-prod-1-euw1.wrd-aws.com/commerce/v1/accounts/{accountID}/kamereon/kca/car-adapter/v1/cars/{VIN}/lock-status?country=FR: {"type":"TECHNICAL","messages":[{"code":"err.tech.502","message":"{\"errors\":[{\"status\":\"502\",\"code\":\"gateway.processing\",\"title\":\"VNEXT\",\"detail\":\"an internal error occured while processing request : 403 FORBIDDEN\"}]}"}],"errors":[{"errorCode":"err.tech.502","errorMessage":"{\"errors\":[{\"status\":\"502\",\"code\":\"gateway.processing\",\"title\":\"VNEXT\",\"detail\":\"an internal error occured while processing request : 403 FORBIDDEN\"}]}"}],"error_reference":"TECHNICAL"}

Error: ('err.tech.502', 'VNEXT an internal error occured while processing request : 403 FORBIDDEN')

All other endpoints are working correctly, only this one seems to reply with an 403 forbidden.
I saw in another issue that it may be an endpoint for the Nissan car but as nothing is written about that on the docs (neither here or on the HomeAssistant integration page) I still wanted to open an issue to see if some other owner of Renault Zoé 50 has the same issue or not.

All services contracts are valid and I'm on the latest update in my car.

Thanks for your help.

-Gauthier

[jumpjack]

This is not the only one "forbidden endpoint", there are also HVAC-SESSIONS, TRIPS, TRIP-HISTORY, and others about horns, lights, windows,....
Somebody is investigating about "SRP authentication" which could be behind this "locks":

https://gitlab.com/tobiaswkjeldsen/dartnissanconnect/-/issues/1#note_893392557

[epenet]

Currently there is no "official" way to know which endpoints are supported by which vehicles.
#508 added support for the lock_status endpoint, and it works on @FRSTR on his Duster

Technically you didn't receive a 403 error, but a 502 error Received Kamereon response 502 on GET:

• 403 errors can indicate temporary failures, invalid permissions, invalid Renault contrat etc.
• 502 errors indicate to me that it is unsupported by the car

Since you have received a 502 error, I suggest that you open a PR to adjust VEHICLE_SPECIFICATIONS and set "support-endpoint-lock-status": False for X102VE

renault-api/src/renault_api/kamereon/models.py

Lines 48 to 57 in 0a4c224

	VEHICLE_SPECIFICATIONS: Dict[str, Dict[str, Any]] = {
	"X101VE": { # ZOE phase 1
	"reports-charge-session-durations-in-minutes": True,
	"reports-in-watts": True,
	"support-endpoint-location": False,
	"support-endpoint-lock-status": False,
	},
	"X102VE": { # ZOE phase 2
	"warns-on-method-set_ac_stop": "Action `cancel` on endpoint `hvac-start` may not be supported on this model.", # noqa
	},

[oliv3r]

Not wanting to necro this thread, but on my Zoe40, I'm getting in home-assistant:

WARNING (MainThread) [homeassistant.components.renault.renault_vehicle] Ignoring endpoint xxxx res_state as it is denied: This endpoint is denied: ('err.func.403', 'Access is denied for this resource')

But no idea what res_state is :)