Garmin Connect login broken

[dlotton]

Hey Braiden,

Looks like Garmin Connect has changed their login authentication. Upload to GC is not working.

This has affected my own GcpUploader project as well.

I've been looking at the new login, but haven't gotten it figured out yet.

[dlotton]

Don't know if you've seen this, but it looks like there's tidal wave of changes coming. I think the change in login authentication is just the beginning...

http://garmin.blogs.com/my_weblog/2014/01/ces-announcement-garmin-connect-redesign-.html#.UwWMEdvJOJd

[ransomweaver]

If you look at this page http://connect.garmin.com/proxy/upload-service-1.1/
It has placeholder text: INSERT LINK TO ACQUIRING AN AUTH KEY. ;)
I think there are now a hundred little projects out of business until they give us a pathway to getting the proper credentials. Mine's an iPhone app, using the workout and calendar api as well.

Considering they just put a bunch of work into the calendar stuff, we should be hopeful that it will happen. But its certainly indicative of where we are in their priorities.

Considering issue 51, this doesn't inspire much confidence in the competence of the programmers at the other end of the wire...

[dlotton]

I've used Firebug plugin for Firefox to capture the login process on the new GC login page. I've done some fiddling, but it is beyond my ability at the moment to figure out.

Here's the URL that gets posted during login (minus the form data i.e. user, password, etc)...

https://sso.garmin.com/sso/login?service=http%3A%2F%2Fconnect.garmin.com%2Fpost-auth%2Flogin&webhost=olaxpw-connect08.garmin.com&source=http%3A%2F%2Fconnect.garmin.com%2Fen-US%2Fsignin&redirectAfterAccountLoginUrl=http%3A%2F%2Fconnect.garmin.com%2Fpost-auth%2Flogin&redirectAfterAccountCreationUrl=http%3A%2F%2Fconnect.garmin.com%2Fpost-auth%2Flogin&gauthHost=https%3A%2F%2Fsso.garmin.com%2Fsso&locale=en&id=gauth-widget&cssUrl=https%3A%2F%2Fstatic.garmincdn.com%2Fcom.garmin.connect%2Fui%2Fsrc-css%2Fgauth-custom.css&clientId=GarminConnect&rememberMeShown=true&rememberMeChecked=false&createAccountShown=true&openCreateAccount=false&usernameShown=true&displayNameShown=false&consumeServiceTicket=false&initialFocus=true&embedWidget=false

You can enter that URL into a URL parser (http://www.freeformatter.com/url-parser-query-string-splitter.html) to more easily see the components.

[ransomweaver]

It seems to me that GC is going to be like Twitter and Dropbox, where the 3rd party app doesn't actually have access to the user login, it presents a secure page from the OAuth provider (e.g. Dropbox) and when that has done its business it hands back an auth key that the app can use in the future. Probably the sso.garmin.com stuff is the presentation of that OAuth widget.

[dlotton]

This is all beyond me. I was doing good to get my own project going in the first place. Luckily I found some info online that lead me in the right direction. I don't really fully inderstand all of the mechanics of the authentication service and such.

In my probing I did come across some information suggesting they're using Jasig CAS (Central Authentication Service), which I believe is open source.

http://www.jasig.org/cas

Not sure if that's a helpful tidbit.

[ransomweaver]

I have been told to email [email protected] for developer assistance.

[braiden]

Sorry I haven't looked at this yet. I want to get an okay from my employer
before investing time.

Please do let me know if you find Garmin helpful or if you have code to a
share.

I should be better able to help in a week or so.
On Feb 21, 2014 6:39 PM, "ransomweaver" [email protected] wrote:

I have been told to email [email protected] for developer
assistance.

Reply to this email directly or view it on GitHubhttps://github.com//issues/52#issuecomment-35785346
.

[dlotton]

Thanks, Braiden. No worries.

As a way to teach myself Python, I cobbled together my own GcpUploader script based on bits and pieces I found on the Internet. I later I discovered your python-ant-downloader and that's what I use day-to-day. I've got users of my script that are broken due to this change, also, so I've been poking around at it, but this is beyond my expertise.

As for Garmin, I've not found anything helpful on the Garmin forums yet. Only that other third party programs and phone apps are broken due to the recent changes. Garmin has not replied to any of these complaints in the forums.

I came across the Garmin Authentication API js widget, which may be helpful. There's some documentation for the API at the following link...

https://sso.garmin.com/sso/js/gauth-widget.js?20130313

Dave

[dlotton]

Hey Braiden,

Looks like someone may have figured out the new Garmin Connect authentication. I got a tip on my GcpUploader forum. Haven't looked into it yet, but here's a link they passed on to me...

cpfair/tapiriik@1604a1c

[mehrar]

It seems Braiden has fixed the login issue. From my comment in #51 ;

Just to confirm the tip of repo works for me. I was able to upload TCXs previously collected using an old version of ant-downloader to Garmin Connect using the tip of the tree build.