AuthManager

Manages the full VW identity OAuth 2.0 flow: login, token persistence, transparent refresh, and silent re-login when refresh tokens expire.

Most consumers should use the rsdev.ovh.weconnect.WeConnect facade instead of interacting with this class directly.

tokenStore

encrypted storage for OAuth tokens

Constructors

constructor(tokenStore: TokenStore)

open override val authState: StateFlow<AuthState>

Reactive stream of authentication state changes.

open override fun close()

open suspend override fun ensureValidToken(): String

Returns a valid access token, refreshing or re-authenticating if necessary.

Returns the stored security PIN (SPIN) for vin, or null if not set.

Returns true if there is an active session with stored tokens.

suspend fun login(username: String, password: String, redirectUri: String = "weconnect://authenticated")

Performs the headless OAuth authorization code flow against the VW identity service.

suspend fun logout()

Clears all stored tokens, SPINs, and transitions authState to AuthState.LoggedOut.

Stores a vehicle-specific spin for commands that require it (lock/unlock, auxiliary heating).