A Node.js API that handles Tesla's OAuth 2.0 authentication flow with PKCE (Proof Key for Code Exchange) support. This API provides endpoints to generate authentication URLs, handle login callbacks, and refresh access tokens for Tesla's authentication system.

• OAuth 2.0 authentication flow with PKCE
• Secure token generation and handling
• Access token refresh functionality
• Type-safe implementation using TypeScript

1. Clone the repository
2. Install dependencies:

npm install

The API uses environment variables for configuration. Create a .env file in the root directory with the following variables:

PORT=3000

GET /auth/url

Generates a Tesla authentication URL with PKCE challenge.

Response

{
  "success": true,
  "url": "https://auth.tesla.com/oauth2/v3/authorize?...",
  "code_verifier": "random_string",
  "code_challenge": "hashed_challenge",
  "state": "random_state"
}

POST /auth/login

Request Body

{
  "webUrl": "https://auth.tesla.com/void/callback?code=...",
  "codeVerifier": "previously_generated_code_verifier"
}

Response

{
  "success": true,
  "message": {
    "access_token": "tesla_access_token",
    "refresh_token": "tesla_refresh_token",
    "expires_in": 28800,
    "created_at": 1640995200
  }
}

POST /auth/refresh

Request Body

{
  "refreshToken": "tesla_refresh_token"
}

Response

{
  "success": true,
  "message": {
    "access_token": "new_tesla_access_token",
    "refresh_token": "new_tesla_refresh_token",
    "expires_in": 28800,
    "created_at": 1640995200
  }
}

1. Generate Authentication URL

   • Call /auth/url to get a Tesla authentication URL
   • Store the returned code_verifier securely
   • Redirect user to the returned url

2. Handle Login

   • After user authenticates, Tesla redirects to callback URL
   • Send the callback URL and stored code_verifier to /auth/login
   • Store the returned tokens securely

3. Token Refresh

   • When access token expires, use /auth/refresh with refresh token
   • Update stored tokens with new values

The API returns consistent error responses:

{
  "success": false,
  "message": "Error description"
}

MIT