Michiel Schouten

I have recently tried to use a proxy to analyse the data requests made. However the SOMToday app and website, at least on iOS, do not allow custom certificates, which...

How would the refresh token look like? Because it might be that the SSO login just returns a refresh token, from which the somtoday fetches the acces token for example....

Well, at least on iOS, in the app, it opens a safari webview in which the entire login process takes place. From this webview the somtodayleerling:// request is made.

Wow great to see all these updates! Good work!

Right, i see. Btw wjat exactly do you mean with “idpcluster”? Secondly, can’t we let the admin, who will use these api to log users in, specify some of the...

Btw, decrypting any string starting with "eyJ6aXAiOiJERUYiLCJjdHkiOiJKV1QiLCJlbmMiOiJBMjU2R0NNIiwiYWxnIjoiZGlyIn0" or something like this is just a base64 encode of `{"zip":"DEF","cty":"JWT","enc":"A256GCM","alg":"dir"}`. JWT is apparently a Json Web Token. And this: `Authorization: Basic RDUwRTBDMDYtMzJEMS00QjQxLUExMzctQTlBODUwQzg5MkMyOnZEZFdkS3dQTmFQQ3loQ0RoYUNuTmV5ZHlMeFNHTkpY`...

Aight, well, when I run the following command I get `{"error_description":"Invalid grant: Token has expired","error":"invalid_grant"}` I even tried getting a new key by going here: `https://somtoday.nl/oauth2/authorize?response_type=code&client_id=D50E0C06-32D1-4B41-A137-A9A850C892C2&redirect_uri=somtodayleerling://oauth/callback&scope=openid&tenant_uuid=cbeab658-c9e6-4a54-b419-8f682f82ea54&prompt=login&session=no_session&code_challenge=uLYUyUVgId8zjbxN4oLNCMa-DzcF_5nRnFOkZensf_w&code_challenge_method=S256` Which is the webpage...

I have tried to login with an extensive curl php script. However after login at my schools login system it would just create a loop of login screens, strange. In...

Hi, not actively anymore as I have just graduated. However, if you could find a way to automate the SSO authentication flow it would be a Great Leap Forward!

Strange, whenever i put it in learning mode (pull the outlet out of the wall socket and put it, after 10 seconds, back in) and send a command like the...