Tronity Won’t Sync

Aahhcc11

Well-Known Member
First Name
Y
Joined
Apr 21, 2024
Threads
25
Messages
190
Reaction score
73
Location
Maryland
Vehicles
Mach E Premium Nite Pony
Country flag
Heard about TRONITY on the forum this morning and was intrigued. Did the following steps but there has never been a data sync:
  1. created a brand new fordpass account
  2. linked to my vehicle to new fordpass account
  3. Verified in fordpass that the new account can access details from the vehicle.
    created Tronity account
  4. Added my vehicle to Tronity by entering newly created fordpass credentials.
  5. View vehicle in garage and it shows that It has never synced.
Even after waiting an hour this remains the same.

Any guidance is appreciated.

Ford Mustang Mach-E Tronity Won’t Sync IMG_3036
Sponsored

 

Mach-Lee

Well-Known Member
First Name
Lee
Joined
Jul 16, 2021
Threads
262
Messages
11,344
Reaction score
24,965
Location
Wisconsin
Vehicles
2022 Mach-E Premium AWD
Occupation
Sci/Eng
Country flag
Ford blocks these sort of apps from accessing your info. You shouldn’t give your login to 3rd party apps because they can access everything in your Ford account including your location, address, and loan info.
 

danielcb

Well-Known Member
First Name
Daniel
Joined
May 9, 2022
Threads
5
Messages
168
Reaction score
98
Location
British Columbia
Vehicles
Mustang Mach-E 2022 ER AWD
Occupation
Software Engineer
Country flag
Ford blocks these sort of apps from accessing your info. You shouldn’t give your login to 3rd party apps because they can access everything in your Ford account including your location, address, and loan info.
There was a new OIDC connection method that was implemented by Ford that allowed syncing data properly, so you logged in in your Ford Account (I checked the URL, and it was Ford’s) and the 3rd party got a token that allowed them to make API calls against Ford endpoint.

TRONITY worked with Ford in that matter, to get the proper authentication and access to API (with proper scoping of APIs) implemented, as far as I know.

But, either Ford or TRONITY dropped the ball here. Either way, I don’t trust any of the two in regards to properly providing and consuming public APIs correctly. I tried the App for a while (with some free credit they gave me) and data sync was half broken to the point I didn’t see any value in the App so I canceled it.

What I hate in this situation is that Ford was so slow and stupid, that they thought that the best way to deal with their initial lack of proper OIDC implementation was to block anyone that attempted to just impersonate their Ford App, simply because they were extremely dumb and careless to implement API segmentation and just put everything in the same bucket. Exposing telemetry and sensitive data under the same API.

Ford has a ton to learn about developing software and APIs…
Sponsored

 
 







Top