I was able to successfully retrieve data from the car without having to get the secret keys (which was impossible for me due to the certificate pinning in place). I ended up using the same APIs from the Connected Drive web site and using their OAuth to authenticate. Seems to work stable now for a few weeks.
Here’s how it looks on HabPanel:
