Greetings,

I am aware that what I am about to ask is borderline off-topic for the list, but I ask your indulgence. I have been following the discussion in this thread (and others related to USAA), as I have accounts there and would like to be able to access the data as well.

However, my use case is a little different. Rather than accessing the accounts directly through GnuCash, I wish to download the OFX/QFX files, then import them to GnuCash. To do this, I am attempting to use the OFXTOOLS suite (specifically, the ofxget script). Things worth noting here - OS is Ubuntu 20.04.1, Python version is 3.8.5, and OFXTOOLS version is 0.9.1.

I have tried to configure an entry for USAA in my ofxget.cfg file (shown below), but every time I attempt to retrieve account information, I am getting an error back from USAA - specifically "OFX header is malformed". I haven't been able to figure what I have wrong in my configuration - the only difference I can find between my configuration and the write-up that John Ralls did on the GnuCash Wiki is that I can't find a way to specify the HTTP User Agent. Note that I did retrieve the access id and access pin from USAA, and I tried both the UUID from the URL where I received this information, and the UUID posted below - neither is working for me.

For reference, the command I am using, that fails, is:

ofxget acctinfo usaa1 -user <access id>

When prompted for a password, I am using the access pin.

If anyone is familiar with this tool, and can offer me pointers on how to do this, I would appreciate it. (Note, I am also planning to post a similar question on the GitHub page for OFXTOOLS - if I get a response there that works, I will post that back here, and similarly if I get it working from here, I will post back there).

Thanks for your forbearance with my borderline off-topic request.

ofxget.cfg snippet:

[usaa1]
url = https://df3cx-services.1fsapi.com/casm/usaa/access.ofx
version = 103
undisclosedelements = true
pretty = true
org = USAA Federal Savings Bank
fid = 67811
bankid = 314074269
clientuid = 39E0E763-4E1E-4918-9528-D6EBAC94EF5D
appid = QMOFX
appver = 2300


On 2/14/21 9:19 PM, Keith Bellairs wrote:
My USAA checking and credit card seem to be working. My users/00000.conf is
using this client UID: I got it from quicken's OFXlog.txt file.

     char clientUid="39E0E763-4E1E-4918-9528-D6EBAC94EF5D"

Notably when the online action in GNC challenges for the account password
the required response is now the "Access PIN". No longer the web site
account password. Yet another password to track.

I cannot believe its working again. Thanks everyone.

Keith

_________________

Date: Sun, 14 Feb 2021 11:12:26 -0800
From: John Ralls <jra...@ceridwen.us>
To: Randy Johnson <rsjdev...@gmail.com>
Cc: gnucash-de...@gnucash.org, gnucash-user@gnucash.org
Subject: Re: [GNC] [GNC-dev]  USAA FSB requires newer QWIN support
Message-ID: <cb5e6f20-a9a6-4493-89e9-9451b4826...@ceridwen.us>
Content-Type: text/plain;       charset=us-ascii

Well, there's a UUID in that URL, but I just tried using it for the
ClientUUID and got "The user cannot signon because he or she entered an
invalid user ID or password." Using the one scraped from Quicken for MacOS
and reported in
https://lists.gnucash.org/pipermail/gnucash-devel/2021-February/045690.html
  works.

That leads me to believe that USAA is using the ClientUUID as an API key.
Quicken may have registered one or many. I think the only way to find that
out is for more users to set up MITMs with different versions of Quicken
and retrieve the ClientUUIDs for comparison.

This makes me a bit leery of publishing it on the wiki, because if Quicken
or USAA catch on that it's been compromised they might change it and lock
us out again.

Regards,
John Ralls
_______________________________________________
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-----
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.

_______________________________________________
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-----
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.

Reply via email to