forked from thijooree/android
MIB v2 login works
This commit is contained in:
+35
-22
@@ -18,13 +18,13 @@ This document tracks all MIB API calls used by thijooree and their upgrade statu
|
||||
|
||||
| API Code | Endpoint | Purpose | Used By | Status |
|
||||
|----------|----------|---------|---------|--------|
|
||||
| `sfunc=r` + `S40` | Key Exchange (Init) | First-time device registration | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=i` + `S40` | Key Exchange (Login) | Regular login session setup | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=n` + `C41` | Registration Init | Initialize device registration flow | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=n` + `C42` | OTP Verification | Verify one-time password after registration | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=n` + `A41` | Main Login | Submit username/password credentials | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=n` + `A44` | Get User Salt | Retrieve user salt for password hashing | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=n` + `P47` | Switch Profile | Activate different user profile | `MibLoginFlow.kt` | ☐ |
|
||||
| `sfunc=r` + `S40` | Key Exchange (Init) | First-time device registration | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=i` + `S40` | Key Exchange (Login) | Regular login session setup | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=n` + `C41` | Registration Init | Initialize device registration flow | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=n` + `C42` | OTP Verification | Verify one-time password after registration | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=n` + `A41` | Main Login | Submit username/password credentials | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=n` + `A44` | Get User Salt | Retrieve user salt for password hashing | `MibLoginFlow.kt` | ✅ |
|
||||
| `sfunc=n` + `P47` | Switch Profile | Activate different user profile | `MibLoginFlow.kt` | ✅ |
|
||||
|
||||
---
|
||||
|
||||
@@ -132,7 +132,7 @@ This document tracks all MIB API calls used by thijooree and their upgrade statu
|
||||
|
||||
| Type | URL |
|
||||
|------|-----|
|
||||
| **Encrypted API** | `https://faisanet.mib.com.mv/faisamobilex_smvc/` |
|
||||
| **Encrypted API** | `https://faisamobilex-smvc-v2.mib.com.mv/index/` |
|
||||
| **WebView/Data** | `https://faisamobilex-wv.mib.com.mv` |
|
||||
|
||||
---
|
||||
@@ -162,20 +162,33 @@ pgf03 = SHA256(clientSalt + SHA256(SHA256(password) + userSalt))
|
||||
|
||||
## Upgrade Checklist
|
||||
|
||||
- [ ] Review all 28+ endpoints for v1 compatibility
|
||||
- [ ] Update authentication flow (encryption/key exchange)
|
||||
- [ ] Update beneficiary management endpoints
|
||||
- [ ] Update transfer endpoints (internal, local, account lookup)
|
||||
- [ ] Update debit card endpoints
|
||||
- [ ] Update transaction history endpoint
|
||||
- [ ] Update activity history endpoint
|
||||
- [ ] Update profile scraping (if API available in v1)
|
||||
- [ ] Update financing endpoint (if API available in v1)
|
||||
- [ ] Test session management & keep-alive
|
||||
- [ ] Verify all error handling & session recovery
|
||||
- [ ] Test all 8 categories end-to-end
|
||||
### Core Implementation
|
||||
- [x] Update encrypted API endpoint URL
|
||||
- [x] Update User-Agent header
|
||||
- [x] Add X-Request-ID header
|
||||
- [x] Verify Blowfish encryption compatibility
|
||||
- [x] Test device registration flow
|
||||
- [x] Test regular login flow
|
||||
- [x] Test OTP verification
|
||||
- [x] Test profile switching
|
||||
|
||||
### WebView Endpoints (Pending)
|
||||
- [ ] Test beneficiary management (`/ajaxBeneficiary/*`)
|
||||
- [ ] Test transfer endpoints (`/ajaxTransfer/*`, `/AjaxAlias/*`)
|
||||
- [ ] Test debit card endpoints (`/ajaxDebitCard/*`)
|
||||
- [ ] Test transaction history (`/ajaxAccounts/trxHistory`)
|
||||
- [ ] Test activity history (`/aProfile/getPagedActivityHistory`)
|
||||
- [ ] Test user profile scraping (`/personalProfile`)
|
||||
- [ ] Test financing (`/financing?dashurl=1`)
|
||||
- [ ] Test session keep-alive (`/aProfile/keepAlive`)
|
||||
|
||||
### Validation
|
||||
- [ ] Verify all account balances display correctly
|
||||
- [ ] Verify error handling (419, 505) and auto-recovery
|
||||
- [ ] Verify all data formats match expectations
|
||||
- [ ] Full end-to-end user flow test
|
||||
|
||||
---
|
||||
|
||||
**Started:** 2026-10-22
|
||||
**Target Completion:** TBD
|
||||
**Implementation:** 2026-10-22 ✅
|
||||
**WebView Testing:** In progress
|
||||
|
||||
Reference in New Issue
Block a user