Greetings. Is there a known way to get the control history of a Palgate device?

[Klakk18]

This resource is not correct https://api1.pal-es.com/v1/bt/device/{DEVICE_ID}/get_history"

[DonutByte]

Hi,

1. Where did you get that url from?
2. Can you share a bit more context, like the error you receive?
3. Are you an admin of the device (gate) ?

[Klakk18]

1. I was going through the possible endings of the link: /history, /get_history, /logs, /get_logs, etc.;
2. The token has expired and I can't repeat the mistake. See point 4;
3. Yes, I'm the admin in the app on my phone.
4. Today, when trying to generate a token, I received an error:
   Traceback (most recent call last):
   File "j:\ML\Palgate\generate_linked_device_session_token.py", line 33, in main
   phone_number, session_token, token_type = login_via_device_linking()
   File "j:\ML\Palgate\generate_linked_device_session_token.py", line 51, in login_via_device_linking
   check_status(phone_number, session_token, token_type)
   File "j:\ML\Palgate\generate_linked_device_session_token.py", line 97, in check_status
   _ = _validate_response(status_response)
   File "j:\ML\Palgate\generate_linked_device_session_token.py", line 132, in _validate_response
   raise RuntimeError(f"Step failed. full response: {response_data}")
   RuntimeError: Step failed. full response: {'errId': 7101, 'status': '401', 'msg': 'Invalid Token or Key'}

[DonutByte]

1. Trying to guess the endpoints is like trying to find a needle in a haystack. Your best bet is either reverse engineering the app and/or inspecting the app's traffic via proxy/wireshark/etc.

   I have plans on releasing documentation on how I did this, but I don't seem to find any time for it...

2. Your session token shouldn't expire...

3. Good. I asked because it would probably not work if you are not an admin

4. That's weird. I have tried to generate a token myself and it works... Have you tried again? Does it persist?

[Klakk18]

We managed to generate the token today. I am trying to do reverse engineering, but so far without success. I'm doing this for the first time. I use the Pixel 4 Emulator and frida server

[DonutByte]

Does the token generation code have a bug, or have you re-tried and it succeed?

I think Frida is overkill for this. Jadx and a proxy like the one in Burp Suite would suffice.

[Klakk18]

1. I didn't look for the cause of the error in Win11, I went to Ubuntu and everything works more stable there. Apparently this is my local problem.
2. Using Jadx, it turned out to understand how the link is collected to get the history of the gate opening. Thanks for the advice.

[DonutByte]

Cool, glad you worked it out.
Would you be willing to share your findings?

[Klakk18]

history: based_url/v1/bt/user/log?id={DEVICE_ID}
users: based_url//v1/bt/device/{DEVICE_ID}/users?skip=0&limit=10&filter=