I was successfully able to get the hub to give me it’s secret! As i suspected when you’re in setup mode you can perform API calls unauthenticated. Through packet capture I found the end point which is… wait for it… /secret/. But you’ll get a 401 back if you’re not in setup mode. The steps are (based mainly on the guide’s step for connecting to a new wifi access point):
Log out of the app. Make sure you’re at the login screen
Tap Setup / Create Account (even though your system has already been set up).
Select the HubR type
Press the Setup button on the hub
This will start the WiserHeatXXX access point.
Connect to WiserHeatXXX with a real computer. You should get an IP in the 192.168.8.0/24 range.
Perform a GET to the /secret/ endpoint at 192.168.8.1. You might be able to use a browser, I didn’t try. If you prefer powershell like me…
Invoke-RestMethod -Method Get -UseBasicParsing -Uri http://192.168.8.1/secret/
You’ll get the secret back as a string.
Now finish the setup…
Follow the on-screen instructions to connect your smartphone to WiserHeatXXX
Tap Skip when prompted to set up your heating system.
Follow the on-screen instructions to connect your Heat HubR to the
Internet by selecting your new Wi-Fi network.
Tap Skip when prompted to register an account.
You have now changed to a new Wi-Fi network. You will see the home
screen and can proceed to control your heating as normal
Next steps are to look at the API calls the app makes for each command.