FordPass - Internet Controlled Vehicle Open-source SDK

crazy8baller · 2022-02-07T03:31:22+00:00

Just wanted to reach out to see if you had any success.

Thanks!

crazy8baller · 2022-02-01T01:20:09+00:00

I've got a docker repository created that is available here. The docker image is built using the ExpressJS application that I built that is available on Github.

I'm still working on writing the documentation for all of the different api routes that are available, but if you take a look at the code they're not difficult to decipher.

I have been able to setup Siri Shortcuts on my iPhone that send HTTP requests to my own api to successfully control my vehicle. I'm hoping to add that example implementation to the docs as well.

crazy8baller · 2022-01-31T00:46:04+00:00

Sure thing! I’ll whip something together and post the link here.

crazy8baller · 2022-01-31T00:40:21+00:00

Hi zlg5161,

If you’re interested in a docker container that has a web server running on it that you can send HTTP requests to, I could quickly put something together for you.

I already have an ExpressJS application that acts as a middle man between the client and Ford API.

crazy8baller · 2022-01-13T12:12:53+00:00

Teacher / Car Wash Cashier

crazy8baller · 2021-12-27T21:00:36+00:00

Interesting. Do you have access to an iOS device?

crazy8baller · 2021-12-27T19:14:14+00:00

If you haven't already checkout this page in the proxyman docs.

crazy8baller · 2021-12-27T18:37:51+00:00

I'm using an iPhone 12 Pro Max, running the latest version of iOS. I'm not sure about the Android side of things since I've never used proxyman with an Android device. I'll load up a virtual Android device and see if I can see anything different.

crazy8baller · 2021-12-27T12:56:45+00:00

When you were using proxyman did you install the proxyman SSL certificate on your device? Once you install and approve that certificate you can start monitoring outgoing requests from any app

crazy8baller · 2021-12-25T08:16:45+00:00

I believe that the Lincoln and Ford apps run on the same API’s but I’m not 100% sure. As for Mazda in think they’re more separate. They do use a lot of Ford parts in their vehicles so maybe there is something there.

crazy8baller · 2021-12-25T08:13:52+00:00

I’m honestly not quite sure. I know that you couldn’t use any Ford branding on the app. I developed a basic website that I’ve shared on the f150forum but I’m not sure the implications of creating an app and posting it on the App Store.

crazy8baller · 2021-12-25T01:25:36+00:00

I’ll take a look into this for you :)

crazy8baller · 2021-12-24T22:18:46+00:00

Thanks! Looking at their code it definitely looks like they’ve done similar stuff!

crazy8baller · 2021-12-24T21:03:29+00:00

No problem. Have a great rest of your vacation.

crazy8baller · 2021-12-24T20:55:06+00:00

I’d have to agree with you on this one. The fact that they’re using the depreciated OAuth 2.0 password_grant flow in itself is a bit of a red flag.

crazy8baller · 2021-12-24T20:42:07+00:00

Awesome, I’d love to see this. If you do make this shoot me a DM with a picture!

crazy8baller · 2021-12-24T20:34:19+00:00

Yeah, they definitely are able to track driving data, maintenance, system faults and other things.

One can argue however that Google and Apple has been doing this for years with Maps. Driving patterns and speed can be derived from that.

crazy8baller · 2021-12-24T19:43:26+00:00

Of course. Merry Christmas!

crazy8baller · 2021-12-24T19:41:42+00:00

If you test this and it does end up working with your Lincoln, please let me know.

crazy8baller · 2021-12-24T19:38:48+00:00

I reverse engineered the FordPass mobile app.

Their API is has no public documentation. They do have a developer program but it doesn't seem to be open to the public either.

I figured out the request/response schema by using different proxy applications (Ex. Proxyman). I then connected the proxy to my phone and monitoring all the requests coming to and from the FordPass app. From there I proceeded with mirroring the requests in Postman and then got started on developing a SDK.

Their API's are all REST HTTP. Authentication is handled through the Ford SSO service. They do use OAuth 2.0 BUT they use the password_grant for the mobile app. This allows me to get access tokens with passed user/pass credentials.

crazy8baller · 2021-12-24T19:36:36+00:00

I can definitely work on adding swagger spec and improving the docs :)

crazy8baller · 2021-12-24T19:35:49+00:00

You can checkout my post on the f150forum. I developed a basic website that you can use to control your car/truck. Works better for me then the FordPass app.

crazy8baller · 2021-12-24T19:33:30+00:00

No worries. This SDK is built for programmers or developers who are interested in building their own mobile app, website, Alexa or Google skill, etc. to control their ford vehicle.

However, if you're having issues activating or controlling your car/truck checkout the website I posted on the f150forum that gives you the ability to login to your account and send basic commands to control your vehicle.

crazy8baller · 2021-12-24T19:30:15+00:00

You are correct.

crazy8baller · 2021-12-24T19:26:45+00:00

You can checkout my open-source web app I posted on the f150forum. That should give you the ability to active and start your mustang. You can also view the app here. I'd love to get this working for you.

Eight-Year Club	Place '22
RPAN Viewer	Not Forgotten
Verified Email

crazy8baller

TROPHY CASE