inexogy · power monitor

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_25":122,"_24":-5,"_123":-5,"_124":-5,"_125":53,"_126":127,"_128":44,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","simonasbuda","name","untitled-6175","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","aa303cba-1e54-11f1-a654-42dde27851f2","main.ts","fileId","8670d0f4-1e41-11f1-9b6f-42dde27851f2","parentId","branchId","86660336-1e41-11f1-9b6f-42dde27851f2","branchVersion",14,"latest",true,"createdAt",["D",1773348440638],13,"fileType","http","content","// ╔══════════════════════════════════════════════════════════════╗\n// ║ INEXOGY POWER MONITOR v3 — val.town HTTP Val ║\n// ║ ║\n// ║ ALL OAuth signing happens server-side (no proxy needed). ║\n// ║ Browser just POSTs credentials once → gets back an ║\n// ║ access token, then polls /readings with it. ║\n// ║ ║\n// ║ 1. val.town → New Val → HTTP → paste this → Run ║\n// ║ 2. Open preview URL → enter inexogy credentials → done ║\n// ╚══════════════════════════════════════════════════════════════╝\n\n// ── HMAC-SHA1 (Deno / val.town runtime) ──────────────────────────────────\nasync function hmacSha1(key: string, message: string): Promise {\n const enc = new TextEncoder();\n const cryptoKey = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(key),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", cryptoKey, enc.encode(message));\n return btoa(String.fromCharCode(...new Uint8Array(sig)));\n}\n\nfunction pe(s: string): string {\n return encodeURIComponent(s)\n .replace(\n /[!'()*]/g,\n (c) => \"%\" + c.charCodeAt(0).toString(16).toUpperCase(),\n );\n}\n\nfunction nonce(): string {\n return [...crypto.getRandomValues(new Uint8Array(12))]\n .map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// ── Build OAuth 1.0 Authorization header (server-side) ───────────────────\nasync function oauthHeader(\n method: string,\n url: string,\n consumerKey: string,\n consumerSecret: string,\n tokenKey = \"\",\n tokenSecret = \"\",\n extras: Record = {},\n): Promise {\n const ts = String(Math.floor(Date.now() / 1000));\n const nc = nonce();\n const params: Record = {\n oauth_consumer_key: consumerKey,\n oauth_nonce: nc,\n oauth_signature_method: \"HMAC-SHA1\",\n oauth_timestamp: ts,\n oauth_version: \"1.0\",\n ...(tokenKey ? { oauth_token: tokenKey } : {}),\n ...extras,\n };\n const all = { ...params };\n const base = Object.keys(all).sort()\n .map((k) => pe(k) + \"=\" + pe(all[k])).join(\"&\");\n const sigBase = method.toUpperCase() + \"&\" + pe(url) + \"&\" + pe(base);\n const sigKey = pe(consumerSecret) + \"&\" + pe(tokenSecret);\n params.oauth_signature = await hmacSha1(sigKey, sigBase);\n return \"OAuth \" + Object.keys(params)\n .map((k) => pe(k) + '=\"' + pe(params[k]) + '\"').join(\", \");\n}\n\n// ── Call inexogy API directly from server ─────────────────────────────────\nasync function inexogyCall(\n path: string,\n method: string,\n ck: string,\n cs: string,\n tk = \"\",\n ts = \"\",\n bodyStr = \"\",\n): Promise<{ status: number; text: string }> {\n const API = \"https://api.inexogy.com/public/v1\";\n // Split path from query string\n const qi = path.indexOf(\"?\");\n const pathOnly = qi >= 0 ? path.slice(0, qi) : path;\n const qs = qi >= 0 ? path.slice(qi + 1) : \"\";\n // Query params MUST be included in OAuth signature base string\n const qsParams: Record = {};\n if (qs) {\n for (const [k, v] of new URLSearchParams(qs).entries()) {\n qsParams[k] = v;\n }\n }\n const baseUrl = API + pathOnly;\n const auth = await oauthHeader(method, baseUrl, ck, cs, tk, ts, qsParams);\n const fullUrl = qs ? baseUrl + \"?\" + qs : baseUrl;\n const res = await fetch(fullUrl, {\n method,\n headers: {\n \"Accept\": \"application/json, text/plain, */*\",\n \"Authorization\": auth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"User-Agent\": \"InexogyValMonitor/1.0\",\n },\n ...(bodyStr ? { body: bodyStr } : {}),\n });\n return { status: res.status, text: await res.text() };\n}\n\n// ── JSON response helper ──────────────────────────────────────────────────\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}\n\n// ── Main handler ──────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n },\n });\n }\n\n // ── POST /auth → full OAuth dance, returns {accessToken, accessSecret} ──\n if (path === \"/auth\" && req.method === \"POST\") {\n try {\n const body = await req.text();\n const p = new URLSearchParams(body);\n const email = p.get(\"email\") || \"\";\n const pass = p.get(\"password\") || \"\";\n if (!email || !pass) {\n return json({ error: \"email and password required\" }, 400);\n }\n\n // 1. Register consumer\n const regRes = await fetch(\n \"https://api.inexogy.com/public/v1/oauth1/consumer_token\",\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Accept\": \"application/json\",\n },\n body: \"client=InexogyValMonitor\",\n },\n );\n if (!regRes.ok) {\n return json({\n error: \"Consumer registration failed: HTTP \" + regRes.status,\n }, 502);\n }\n const reg = await regRes.json() as { key: string; secret: string };\n const ck = reg.key;\n const cs = reg.secret;\n\n // 2. Request token\n const rtUrl = \"https://api.inexogy.com/public/v1/oauth1/request_token\";\n const rtAuth = await oauthHeader(\"POST\", rtUrl, ck, cs, \"\", \"\", {\n oauth_callback: \"oob\",\n });\n const rtRes = await fetch(rtUrl, {\n method: \"POST\",\n headers: {\n \"Accept\": \"text/plain,*/*\",\n \"Authorization\": rtAuth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n });\n const rtText = await rtRes.text();\n const rt = Object.fromEntries(new URLSearchParams(rtText));\n if (!rt.oauth_token) {\n return json({\n error: \"No request token. Response: \" + rtText.slice(0, 200),\n }, 502);\n }\n\n // 3. Authorize\n const authUrl = \"https://api.inexogy.com/public/v1/oauth1/authorize\" +\n \"?oauth_token=\" + encodeURIComponent(rt.oauth_token) +\n \"&email=\" + encodeURIComponent(email) +\n \"&password=\" + encodeURIComponent(pass);\n const authRes = await fetch(authUrl, {\n headers: { \"Accept\": \"text/plain,*/*\" },\n });\n const authText = await authRes.text();\n const authP = Object.fromEntries(new URLSearchParams(authText));\n if (!authP.oauth_verifier) {\n return json({\n error: \"Authorization failed — wrong credentials? Response: \" +\n authText.slice(0, 200),\n }, 401);\n }\n\n // 4. Access token\n const atUrl = \"https://api.inexogy.com/public/v1/oauth1/access_token\";\n const atAuth = await oauthHeader(\n \"POST\",\n atUrl,\n ck,\n cs,\n rt.oauth_token,\n rt.oauth_token_secret,\n { oauth_verifier: authP.oauth_verifier },\n );\n const atRes = await fetch(atUrl, {\n method: \"POST\",\n headers: {\n \"Accept\": \"text/plain,*/*\",\n \"Authorization\": atAuth,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n });\n const atText = await atRes.text();\n const atp = Object.fromEntries(new URLSearchParams(atText));\n if (!atp.oauth_token) {\n return json({\n error: \"Token exchange failed. Response: \" + atText.slice(0, 200),\n }, 502);\n }\n\n return json({\n ck,\n cs,\n accessToken: atp.oauth_token,\n accessSecret: atp.oauth_token_secret,\n });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /meters?ck=&cs=&at=&as= ──────────────────────────────────────────\n if (path === \"/meters\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as = url.searchParams.get(\"as\") || \"\";\n const { status, text } = await inexogyCall(\n \"/meters\",\n \"GET\",\n ck,\n cs,\n at,\n as,\n );\n if (status !== 200) {\n return json({ error: \"Meters failed: \" + text.slice(0, 200) }, status);\n }\n return json(JSON.parse(text));\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /readings?ck=&cs=&at=&as=&meterId= ───────────────────────────────\n if (path === \"/readings\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n const meterId = url.searchParams.get(\"meterId\") || \"\";\n\n const endpoints = [\n \"/last_reading?meterId=\" + meterId,\n \"/readings?meterId=\" + meterId,\n \"/devices?meterId=\" + meterId,\n \"/last-reading?meterId=\" + meterId,\n \"/readings/last?meterId=\" + meterId,\n \"/meters/\" + meterId + \"/last_reading\",\n \"/meters/\" + meterId + \"/last-reading\",\n ];\n\n const results: { ep: string; status: number; preview: string }[] = [];\n\n for (const ep of endpoints) {\n try {\n const { status, text } = await inexogyCall(\n ep,\n \"GET\",\n ck,\n cs,\n at,\n as_,\n );\n results.push({ ep, status, preview: text.slice(0, 300) });\n if (status === 200) {\n let parsed: unknown;\n try {\n parsed = JSON.parse(text);\n } catch {\n parsed = text;\n }\n return json({\n ok: true,\n endpoint: ep,\n data: parsed,\n allResults: results,\n });\n }\n } catch (e: any) {\n results.push({ ep, status: 0, preview: \"threw: \" + e.message });\n }\n }\n\n // Nothing returned 200 — return full diagnostics so we can see what happened\n return json({\n error: \"No endpoint returned 200\",\n meterId,\n allResults: results,\n }, 404);\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── GET /discover?ck=&cs=&at=&as= — probe all top-level endpoints ────────\n if (path === \"/discover\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n\n const probes = [\n \"/meters\",\n \"/readings\",\n \"/last-reading\",\n \"/measurements\",\n \"/meter-data\",\n \"/devices\",\n \"/installations\",\n \"/contracts\",\n ];\n const results = [];\n for (const ep of probes) {\n try {\n const { status, text } = await inexogyCall(\n ep,\n \"GET\",\n ck,\n cs,\n at,\n as_,\n );\n results.push({ ep, status, preview: text.slice(0, 200) });\n } catch (e: any) {\n results.push({ ep, status: 0, preview: \"threw: \" + e.message });\n }\n }\n return json({ results });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n // ── Serve dashboard ───────────────────────────────────────────────────────\n\n // GET /debug - dump exact OAuth signature components\n if (path === \"/debug\" && req.method === \"GET\") {\n try {\n const ck = url.searchParams.get(\"ck\") || \"\";\n const cs = url.searchParams.get(\"cs\") || \"\";\n const at = url.searchParams.get(\"at\") || \"\";\n const as_ = url.searchParams.get(\"as\") || \"\";\n const meterId = url.searchParams.get(\"meterId\") || \"\";\n\n const API = \"https://api.inexogy.com/public/v1\";\n const pathOnly = \"/last_reading\";\n const qs = \"meterId=\" + meterId;\n const baseUrl = API + pathOnly;\n const ts = String(Math.floor(Date.now() / 1000));\n const nc = \"debugnonce00000000001\";\n\n const params: Record = {\n meterId,\n oauth_consumer_key: ck,\n oauth_nonce: nc,\n oauth_signature_method: \"HMAC-SHA1\",\n oauth_timestamp: ts,\n oauth_token: at,\n oauth_version: \"1.0\",\n };\n\n const sortedKeys = Object.keys(params).sort();\n const paramStr = sortedKeys.map((k) => pe(k) + \"=\" + pe(params[k])).join(\n \"&\",\n );\n const baseStr = \"GET&\" + pe(baseUrl) + \"&\" + pe(paramStr);\n const sigKey = pe(cs) + \"&\" + pe(as_);\n const sig = await hmacSha1(sigKey, baseStr);\n\n return json({\n baseUrl,\n qs,\n sortedParams: sortedKeys.map((k) =>\n k + \"=\" +\n ([\"ck\", \"cs\", \"at\", \"as\"].includes(k) ? \"[redacted]\" : params[k])\n ),\n paramStr: paramStr.replace(ck, \"[CK]\").replace(at, \"[AT]\"),\n baseStr: baseStr.replace(ck, \"[CK]\").replace(at, \"[AT]\"),\n sigKey: \"[CS]&[AS]\",\n signature: sig,\n note:\n \"meterId IS included in signature. If readings still 401, the consumer key lacks readings permission from inexogy.\",\n });\n } catch (err: any) {\n return json({ error: err.message }, 500);\n }\n }\n\n return new Response(DASHBOARD, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\n\n// ─────────────────────────────────────────────────────────────────────────\nconst DASHBOARD = `\n\n\n\n\ninexogy · power monitor\n\n\n\n

inexogy · monitor

server-side oauth · val.town

VAL.TOWN

\n\n

meter

live

\n\n \n

portal.inexogy.com credentials

EMAIL\n

PASSWORD\n

\n \n

Ready · enter credentials above

\n\n \n

select meter

\n \n

\n\n \n

live consumption ·

—

WATTS · CURRENT DEMAND

Phase L1

—

Phase L2

—

Phase L3

—

Total kWh

—

Voltage

—

Meter ID

—

\n \n \n \n \n

—

\n \n

\n\n