Tado authentication

I set up an LXC with a second openHAB instance, running 5.0 snapshot, and have it send status updates. But you’ll need some computing resources available, of course…

Psst – a birdie told me that there is an OH 4.3.x patch coming soon…

1 Like

A part of me hopes it’s not THAT soon, as I spent a few hours fiddling with the extra openHAB instance :sweat_smile:

Hi Andrew,

During startup of openHAB 5.0.0 (Build #4559), I see this:

openhab> log:display | grep -i token
09:24:20.985 [ERROR] [.oauth2client.internal.OAuthConnector] - grant type refresh_token to URL https://login.tado.com/oauth2/token failed with error code invalid_grant, description The refresh_token is invalid.
openhab> log:display | grep -i auth
09:24:20.985 [ERROR] [.oauth2client.internal.OAuthConnector] - grant type refresh_token to URL https://login.tado.com/oauth2/token failed with error code invalid_grant, description The refresh_token is invalid.
09:24:21.224 [INFO ] [hab.event.ThingStatusInfoChangedEvent] - Thing 'tado:home:5551f29033' changed from INITIALIZING to OFFLINE (CONFIGURATION_PENDING): Try authenticating at http(s)://<YOUROPENHAB>:<YOURPORT>/tado
09:24:21.382 [INFO ] [hab.event.ThingStatusInfoChangedEvent] - Thing 'tado:home:5551f29033' changed from OFFLINE (CONFIGURATION_PENDING): Try authenticating at http(s)://<YOUROPENHAB>:<YOURPORT>/tado to ONLINE

In the end, everything works, but I assume that first error is not ideal?

The binding now works in 4.3.4. Nevertheless the exercise gave me some more insight in the Linux world :wink:

The bridge thing however didn’t give me a link for the authentication; it just read http://{YOURIP}/{PORT}/tado (or something similar, I’m writing this from memory, not copying it). I had to manually fabricate the URL. Any idea why that is/was?

I made a second fix a couple of days ago, which made it into v4.3.4 but perhaps not in the v5.0.x snaphot that you used; although it is probably now in the most recent ones.

It shows that if you try to initialise the thing before OH is fully running. The solution is to disable, wait, reenable.

OH 4.3.4 doesn’t solve the Problem for me. The bridge is still offline.

Reinstall the Addon, enable/disable the thing doesn’t fix it.

image
:wink:

However, I would expect there to be a link, if openHAB is running for some time, @AndrewFG?

Did you open http(s)://{YOURIP}/{PORT}/tado and followed the instructions?

That was it. :grinning_face:
Thanks a lot, Simon and the developer to make tado working again.

Probably, it could be better described in the thing definition with the next OH snapshot release. :slightly_smiling_face:

1 Like

In my instance when I open http(s)://{YOURIP}/{PORT}/tado and click the link to authenticate I get an an error of: Status: Exception while starting httpClient, tokenUrl: oauth-rfc8628

In the logs event I have an error of:

Screenshot 2025-03-31 190631

Any ideas on how this could be fixed or troubleshoot? I am not sure where to go from here, after a restart, and re-install of tado binding addon

If your IP is 192.168.12.34 try

http://192.168.12.34:8080/tado

or

https://192.168.12.34:8080/tado

Hi there,

Sorry I should have been more clear in my post, but I am aware that its simply a placeholder for my actual IP Address and port number.

I have attempted this both on 8080 using http:// and https:// using port 8443 when the link is clicked it produces the following error.

image

Did you enable Use oAuth RF-8628 in the binding settings? (As in the image here: Tado authentication - #27 by Bonsaif)

Although I wonder why it is a checkbox? If the only way to have the binding operational, is with that authentication, why would it not always be enabled?

Yes I did, I tried both toggle on and off and even disable the bridge and re-enable, the log isn’t helping me much.

I have also attempted to stop openhab service and clean the cache, after a reboot and still same error. I am running latest version of openhab 4, on debian, confirmed that I have DNS and connectivity.

What is your computer? Does it have many cores / threads?

It is.

It is automatically enabled by the binding. But you have the option to turn it off.

Me too. I am looking into this.

I see. But does that make sense? Since the binding doesn’t work if it’s turned off… :slight_smile:

(I assume that option was installed while username and password verification was still operational?)

As far as I recall, the link was automatically generated on my snapshot OH…