吐槽一下华为光伏的 API 文档

最近装了太阳能板，想用 lambda + grafana + prometheus 爬一下逆变器的各种数据做个简单的 dashboard.

然后发现华为光伏的 API 文档写的实在有点粗糙..

还有一些不能理解的地方:

• https 证书居然还是 self signed，居然连个证书都不舍得？
• 登录居然要把用户名和密码在 URL 里面传...
• 登录失败不返回 401，返回 200...

  curl -vkX POST \
    'https://au1.fusionsolar.huawei.com:27200/openApi/login?userName=FOO&password=BAR'
  
  *   Trying 54.153.220.93...
  * TCP_NODELAY set
  * Connected to au1.fusionsolar.huawei.com (54.153.220.93) port 27200 (#0)
  * ALPN, offering h2
  * ALPN, offering http/1.1
  * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
  * successfully set certificate verify locations:
  *   CAfile: /etc/ssl/cert.pem
    CApath: none
  * TLSv1.2 (OUT), TLS handshake, Client hello (1):
  * TLSv1.2 (IN), TLS handshake, Server hello (2):
  * TLSv1.2 (IN), TLS handshake, Certificate (11):
  * TLSv1.2 (IN), TLS handshake, Request CERT (13):
  * TLSv1.2 (IN), TLS handshake, Server finished (14):
  * TLSv1.2 (OUT), TLS handshake, Certificate (11):
  * TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
  * TLSv1.2 (OUT), TLS change cipher, Client hello (1):
  * TLSv1.2 (OUT), TLS handshake, Finished (20):
  * TLSv1.2 (IN), TLS change cipher, Client hello (1):
  * TLSv1.2 (IN), TLS handshake, Finished (20):
  * SSL connection using TLSv1.2 / AES128-SHA
  * ALPN, server did not agree to a protocol
  * Server certificate:
  *  subject: C=CN; ST=Guangdong; L=Shenzhen; O=Huawei; OU=Network Energy; CN=NetEcoServer
  *  start date: Mar 18 01:23:06 2015 GMT
  *  expire date: Mar 13 01:23:06 2035 GMT
  *  issuer: C=CN; O=huawei; OU=Network Energy; CN=NEPL PKI
  *  SSL certificate verify result: self signed certificate in certificate chain (19), continuing anyway.
  > POST /openApi/login?userName=FOO&password=BAR HTTP/1.1
  > Host: au1.fusionsolar.huawei.com:27200
  > User-Agent: curl/7.54.0
  > Accept: */*
  >
  < HTTP/1.1 200 OK
  < Date: Tue, 08 Oct 2019 13:02:55 GMT
  < Set-Cookie: JSESSIONID=1jsi0rnxij5mzokex34wnr7ig;Path=/;Secure;HttpOnly
  < Expires: Thu, 01 Jan 1970 00:00:00 GMT
  < Cache-Control: no-cache
  < X-Frame-Options: SAMEORIGIN
  < X-Download-Options: noopen
  < X-XSS-Protection: 1;mode=block
  < Strict-Transport-Security: max-age=31536000;includeSubdomains
  < X-Content-Type-Options: nosniff
  < Vary: Accept-Encoding, User-Agent
  < Transfer-Encoding: chunked
  <
  {"errorMsg":309}
  * Connection #0 to host au1.fusionsolar.huawei.com left intact
  

文档参考:

• https://drive.google.com/file/d/113Ulbsw8pOgWmIkGDcZxZZE09P7h6ZHf/view
• https://forum.huawei.com/enterprise/en/communicating-with-neteco-through-an-openapi-user/thread/512431-100027