inexogy · power monitor

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",21,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","19b29a4a-1e3e-11f1-9404-42dde27851f2","name","fileType","http","content","// ╔══════════════════════════════════════════════════════════════╗\n// ║ INEXOGY POWER MONITOR v3 — val.town HTTP Val ║\n// ║ ║\n// ║ ALL OAuth signing happens server-side (no proxy needed). ║\n// ║ Browser just POSTs credentials once → gets back an ║\n// ║ access token, then polls /readings with it. ║\n// ║ ║\n// ║ 1. val.town → New Val → HTTP → paste this → Run ║\n// ║ 2. Open preview URL → enter inexogy credentials → done ║\n// ╚══════════════════════════════════════════════════════════════╝\n\n// ── HMAC-SHA1 (Deno / val.town runtime) ──────────────────────────────────\nasync function hmacSha1(key: string, message: string): Promise {\n const enc = new TextEncoder();\n const cryptoKey = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(key),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", cryptoKey, enc.encode(message));\n return btoa(String.fromCharCode(...new Uint8Array(sig)));\n}\n\nfunction pe(s: string): string {\n return encodeURIComponent(s)\n .replace(\n /[!'()*]/g,\n (c) => \"%\" + c.charCodeAt(0).toString(16).toUpperCase(),\n );\n}\n\nfunction nonce(): string {\n return [...crypto.getRandomValues(new Uint8Array(12))]\n .map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// ── Build OAuth 1.0 Authorization header (server-side) ───────────────────\nasync function oauthHeader(\n method: string,\n url: string,\n consumerKey: string,\n consumerSecret: string,\n tokenKey = \"\",\n tokenSecret = \"\",\n extras: Record = {},\n): Promise {\n const ts = String(Math.floor(Date.now() / 1000));\n const nc = nonce();\n const oauthParams: Record = {\n oauth_consumer_key: consumerKey,\n oauth_nonce: nc,\n oauth_signature_method: \"HMAC-SHA1\",\n oauth_timestamp: ts,\n oauth_version: \"1.0\",\n ...(tokenKey ? { oauth_token: tokenKey } : {}),\n };\n // oauth_* extras (e.g. oauth_callback) go in the header; others (e.g. meterId) do not\n for (const [k, v] of Object.entries(extras)) {\n if (k.startsWith(\"oauth_\")) oauthParams[k] = v;\n }\n // Sign everything: oauth params + all extras (including non-oauth query params)\n const forSig = { ...oauthParams, ...extras };\n const paramStr = Object.keys(forSig).sort()\n .map((k) => pe(k) + \"=\" + pe(forSig[k])).join(\"&\");\n const baseStr = method.toUpperCase() + \"&\" + pe(url) + \"&\" + pe(paramStr);\n const sigKey = pe(consumerSecret) + \"&\" + pe(tokenSecret);\n oauthParams.oauth_signature = await hmacSha1(sigKey, baseStr);\n // Only oauth_* params in the Authorization header\n const parts = Object.keys(oauthParams)\n .map((k) => pe(k) + \"=\" + JSON.stringify(pe(oauthParams[k]))).join(\", \");\n return \"OAuth \" + parts;\n}\n\n// ── Call inexogy API directly from server ─────────────────────────────────\nasync function inexogyCall(\n path: string,\n method: string,\n ck: string,\n cs: string,\n tk = \"\",\n ts = \"\",\n bodyStr = \"\",\n): Promise<{ status: number; text: string }> {\n const API = \"https://api.inexogy.com/public/v1\";\n // Split path from query string\n const qi = path.indexOf(\"?\");\n const pathOnly = qi >= 0 ? path.slice(0, qi) : path;\n const qs = qi >= 0 ? path.slice(qi + 1) : \"\";\n // Query params MUST be included in OAuth signature base string\n const qsParams: Record = {};\n if (qs) {\n for (const [k, v] of new URLSearchParams(qs).entries()) {\n qsParams[k] = v;\n }\n }\n const baseUrl = API + pathOnly;\n const auth = await oauthHeader(method, baseUrl, ck, cs, tk, ts, qsParams);\n const fullUrl = qs ? baseUrl + \"?\" + qs : baseUrl;\n const res = await fetch(fullUrl, {\n method,\n headers: {\n \"Accept\": \"text/html, image/gif, image/jpeg, *; q=0.2, */*; q=0.2\",\n \"Authorization\": auth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"User-Agent\": \"InexogyValMonitor/1.0\",\n },\n ...(bodyStr ? { body: bodyStr } : {}),\n });\n return { status: res.status, text: await res.text() };\n}\n\n// ── JSON response helper ──────────────────────────────────────────────────\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}\n\n// ── Main handler ──────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n },\n });\n }\n\n // ── POST /auth → full OAuth dance, returns {accessToken, accessSecret} ──\n if (path === \"/auth\" && req.method === \"POST\") {\n try {\n const body = await req.text();\n let email = \"\", pass = \"\";\n try {\n const j = JSON.parse(body);\n email = j.email || \"\";\n pass = j.password || \"\";\n } catch {\n const p = new URLSearchParams(body);\n email = p.get(\"email\") || \"\";\n pass = p.get(\"password\") || \"\";\n }\n if (!email || !pass) {\n return json({ error: \"email and password required\" }, 400);\n }\n\n // 1. Register consumer\n const regRes = await fetch(\n \"https://api.inexogy.com/public/v1/oauth1/consumer_token\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Accept\": \"text/html, image/gif, image/jpeg, *; q=0.2, */*; q=0.2\",\n },\n body: \"client=InexogyValMonitor\",\n },\n );\n if (!regRes.ok) {\n return json({\n error: \"Consumer registration failed: HTTP \" + regRes.status,\n }, 502);\n }\n const reg = await regRes.json() as { key: string; secret: string };\n const ck = reg.key;\n const cs = reg.secret;\n\n // 2. Request token\n const rtUrl = \"https://api.inexogy.com/public/v1/oauth1/request_token\";\n const rtAuth = await oauthHeader(\"POST\", rtUrl, ck, cs, \"\", \"\", {\n oauth_callback: \"oob\",\n });\n const rtRes = await fetch(rtUrl, {\n method: \"POST\",\n headers: {\n \"Accept\": \"text/html, image/gif, image/jpeg, *; q=0.2, */*; q=0.2\",\n \"Authorization\": rtAuth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n });\n const rtText = await rtRes.text();\n const rt = Object.fromEntries(new URLSearchParams(rtText));\n if (!rt.oauth_token) {\n return json({\n error: \"No request token. Response: \" + rtText.slice(0, 200),\n }, 502);\n }\n\n // 3. Authorize\n const authUrl = \"https://api.inexogy.com/public/v1/oauth1/authorize\" +\n \"?oauth_token=\" + encodeURIComponent(rt.oauth_token) +\n \"&email=\" + encodeURIComponent(email) +\n \"&password=\" + encodeURIComponent(pass);\n const authRes = await fetch(authUrl, {\n headers: {\n \"Accept\": \"text/html, image/gif, image/jpeg, *; q=0.2, */*; q=0.2\",\n },\n });\n const authText = await authRes.text();\n const authP = Object.fromEntries(new URLSearchParams(authText));\n if (!authP.oauth_verifier) {\n return json({\n error: \"Authorization failed — wrong credentials? Response: \" +\n authText.slice(0, 200),\n }, 401);\n }\n\n // 4. Access token\n const atUrl = \"https://api.inexogy.com/public/v1/oauth1/access_token\";\n const atAuth = await oauthHeader(\n \"POST\",\n atUrl,\n ck,\n cs,\n rt.oauth_token,\n rt.oauth_token_secret,\n { oauth_verifier: authP.oauth_verifier },\n );\n const atRes = await fetch(atUrl, {\n method: \"POST\",\n headers: {\n \"Accept\": \"text/html, image/gif, image/jpeg, *; q=0.2, */*; q=0.2\",\n \"Authorization\": atAuth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n });\n const atText = await atRes.text();\n const atp = Object.fromEntries(new URLSearchParams(atText));\n if (!atp.oauth_token) {\n return json({\n error: \"Token exchange failed. Response: \" + atText.slice(0, 200),\n }, 502);\n }\n\n return json({\n ck,\n cs,\n accessToken: atp.oauth_token,\n accessSecret: atp.oauth_token_secret,\n });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /meters?ck=&cs=&at=&as= ──────────────────────────────────────────\n if (path === \"/meters\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as = url.searchParams.get(\"as\") || \"\";\n const { status, text } = await inexogyCall(\n \"/meters\",\n \"GET\",\n ck,\n cs,\n at,\n as,\n );\n if (status !== 200) {\n return json({ error: \"Meters failed: \" + text.slice(0, 200) }, status);\n }\n return json(JSON.parse(text));\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /readings?ck=&cs=&at=&as=&meterId= ───────────────────────────────\n if (path === \"/readings\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n const meterId = url.searchParams.get(\"meterId\") || \"\";\n\n // First try to get field names to understand what this meter supports\n try {\n const fnRes = await inexogyCall(\n \"/field_names?meterId=\" + meterId,\n \"GET\",\n ck,\n cs,\n at,\n as_,\n );\n if (fnRes.ok) {\n const fields = await fnRes.json();\n log.push({\n endpoint: \"/field_names\",\n status: fnRes.status,\n data: fields,\n });\n }\n } catch (_) {}\n\n const endpoints = [\n \"/last_reading?meterId=\" + meterId,\n \"/readings?meterId=\" + meterId,\n \"/devices?meterId=\" + meterId,\n \"/last-reading?meterId=\" + meterId,\n \"/readings/last?meterId=\" + meterId,\n \"/meters/\" + meterId + \"/last_reading\",\n \"/meters/\" + meterId + \"/last-reading\",\n ];\n\n const results: { ep: string; status: number; preview: string }[] = [];\n\n for (const ep of endpoints) {\n try {\n const { status, text } = await inexogyCall(\n ep,\n \"GET\",\n ck,\n cs,\n at,\n as_,\n );\n results.push({ ep, status, preview: text.slice(0, 300) });\n if (status === 200) {\n let parsed: unknown;\n try {\n parsed = JSON.parse(text);\n } catch {\n parsed = text;\n }\n return json({\n ok: true,\n endpoint: ep,\n data: parsed,\n allResults: results,\n });\n }\n } catch (e: any) {\n results.push({ ep, status: 0, preview: \"threw: \" + e.message });\n }\n }\n\n // Nothing returned 200 — return full diagnostics so we can see what happened\n return json({\n error: \"No endpoint returned 200\",\n meterId,\n allResults: results,\n }, 404);\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /discover?ck=&cs=&at=&as= — probe all top-level endpoints ────────\n if (path === \"/discover\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n\n const probes = [\n \"/meters\",\n \"/readings\",\n \"/last-reading\",\n \"/measurements\",\n \"/meter-data\",\n \"/devices\",\n \"/installations\",\n \"/contracts\",\n ];\n const results = [];\n for (const ep of probes) {\n try {\n const { status, text } = await inexogyCall(\n ep,\n \"GET\",\n ck,\n cs,\n at,\n as_,\n );\n results.push({ ep, status, preview: text.slice(0, 200) });\n } catch (e: any) {\n results.push({ ep, status: 0, preview: \"threw: \" + e.message });\n }\n }\n return json({ results });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── Serve dashboard ───────────────────────────────────────────────────────\n\n // GET /ecoflow?ak=&sk=&sn= — proxy EcoFlow PowerStream quota\n if (path === \"/ecoflow\" && req.method === \"GET\") {\n try {\n const ak = url.searchParams.get(\"ak\") || \"\";\n const sk = url.searchParams.get(\"sk\") || \"\";\n const sn = url.searchParams.get(\"sn\") || \"\";\n if (!ak || !sk || !sn) {\n return json({ error: \"ak, sk and sn required\" }, 400);\n }\n\n const timestamp = String(Date.now());\n const nonce = String(Math.floor(Math.random() * 900000) + 100000);\n const sigStr = `accessKey=${ak}&nonce=${nonce}×tamp=${timestamp}`;\n\n // HMAC-SHA256 (hex)\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(sk),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const sigBuf = await crypto.subtle.sign(\"HMAC\", key, enc.encode(sigStr));\n const sign = Array.from(new Uint8Array(sigBuf))\n .map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n const efUrl =\n `https://api-e.ecoflow.com/iot-open/sign/device/quota/all?sn=${\n encodeURIComponent(sn)\n }`;\n const efRes = await fetch(efUrl, {\n headers: {\n \"Content-Type\": \"application/json\",\n \"accessKey\": ak,\n \"nonce\": nonce,\n \"timestamp\": timestamp,\n \"sign\": sign,\n },\n });\n const efData = await efRes.json();\n return json({ status: efRes.status, data: efData });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // GET /debug - dump exact OAuth signature components\n if (path === \"/debug\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n const meterId = url.searchParams.get(\"meterId\") || \"\";\n\n const API = \"https://api.inexogy.com/public/v1\";\n const pathOnly = \"/last_reading\";\n const qs = \"meterId=\" + meterId;\n const baseUrl = API + pathOnly;\n const ts = String(Math.floor(Date.now() / 1000));\n const nc = \"debugnonce00000000001\";\n\n const params: Record = {\n meterId,\n oauth_consumer_key: ck,\n oauth_nonce: nc,\n oauth_signature_method: \"HMAC-SHA1\",\n oauth_timestamp: ts,\n oauth_token: at,\n oauth_version: \"1.0\",\n };\n\n const sortedKeys = Object.keys(params).sort();\n const paramStr = sortedKeys.map((k) => pe(k) + \"=\" + pe(params[k])).join(\n \"&\",\n );\n const baseStr = \"GET&\" + pe(baseUrl) + \"&\" + pe(paramStr);\n const sigKey = pe(cs) + \"&\" + pe(as_);\n const sig = await hmacSha1(sigKey, baseStr);\n\n return json({\n baseUrl,\n qs,\n sortedParams: sortedKeys.map((k) =>\n k + \"=\" +\n ([\"ck\", \"cs\", \"at\", \"as\"].includes(k) ? \"[redacted]\" : params[k])\n ),\n paramStr: paramStr.replace(ck, \"[CK]\").replace(at, \"[AT]\"),\n baseStr: baseStr.replace(ck, \"[CK]\").replace(at, \"[AT]\"),\n sigKey: \"[CS]&[AS]\",\n signature: sig,\n note:\n \"meterId IS included in signature. If readings still 401, the consumer key lacks readings permission from inexogy.\",\n });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n return new Response(DASHBOARD, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\n\n// ─────────────────────────────────────────────────────────────────────────\nconst DASHBOARD = `\n\n\n\n\ninexogy · power monitor\n\n\n\n

inexogy · monitor

server-side oauth · val.town

VAL.TOWN

\n\n

meter

live

\n\n \n

portal.inexogy.com credentials

EMAIL\n

PASSWORD\n

\n \n

Ready · enter credentials above

\n\n \n

select meter

\n \n

\n\n \n

live ·

\n\n \n

Grid draw

Solar

Total use

\n\n \n

kWh in

kWh out

\n\n \n

PV1

- W

PV2

- W

status

\n\n \n

\n \n \n \n \n \n \n

\n \n

EcoFlow Local Bridge

Run ecoflow-bridge.js locally, enter its URL:

\n \n \n

\n\n

Diff · v21