[GNC-dev] [GNC] USAA FSB requires newer QWIN support

John Ralls jralls at ceridwen.us
Sun Feb 14 19:47:58 EST 2021

I tried again with a second visit to accessid so I'd get a fresh UUID. It worked to get the accounts but failed when I tried to retrieve transactions.

I've summarized the setup process in https://wiki.gnucash.org/wiki/OFX_Direct_Connect_Bank_Settings#USAA, though for my experience the Client UID instructions, which reflect getting them from the URL, are not correct.

John Ralls

> On Feb 14, 2021, at 3:59 PM, John Ralls <jralls at ceridwen.us> wrote:
> I tried it both ways, capitalized and not.
> Regards,
> John Ralls
>> On Feb 14, 2021, at 11:31 AM, Randy Johnson <rsjdev314 at gmail.com> wrote:
>> I ended up with two during my experimentation - I ended up requesting access twice, I got the same access is and password both times but different client uuids. Both client uuids I got as well as the published one worked for me.
>> Quick check, did you capitalize the letters in the uuid? Someone mentioned it earlier and I just confirmed with my own, lower case uuids will return an error.
>> -Randy
>> On Sun, Feb 14, 2021, 2:12 PM John Ralls <jralls at ceridwen.us> wrote:
>> Well, there's a UUID in that URL, but I just tried using it for the ClientUUID and got "The user cannot signon because he or she entered an invalid user ID or password." Using the one scraped from Quicken for MacOS and reported in https://lists.gnucash.org/pipermail/gnucash-devel/2021-February/045690.html works.
>> That leads me to believe that USAA is using the ClientUUID as an API key. Quicken may have registered one or many. I think the only way to find that out is for more users to set up MITMs with different versions of Quicken and retrieve the ClientUUIDs for comparison.
>> This makes me a bit leery of publishing it on the wiki, because if Quicken or USAA catch on that it's been compromised they might change it and lock us out again.
>> Regards,
>> John Ralls
>>> On Feb 13, 2021, at 9:06 PM, Randy Johnson <rsjdev314 at gmail.com> wrote:
>>> The CLIENTUID is also part of the URL that you get sent to after completing
>>> https://df3cx-services.1fsapi.com/casm/usaa/enroll (or usaa.com/accessid ,
>>> not sure which is preferred), hopefully avoiding the need to install
>>> Quicken.
>>> -Randy
>>> On Fri, Feb 12, 2021, 5:29 PM Bob White via gnucash-devel <
>>> gnucash-devel at gnucash.org> wrote:
>>>> I got new USAA OFX download working with GNC 4.4.1.
>>>> It's mainly a configuration task.
>>>> ------ User config ------
>>>> int uniqueId="<leave as is>"
>>>> char backendName="aqofxconnect"
>>>> char userName="<your name>"
>>>> char userId="<your new USAA access id>"
>>>> char customerId="<your new USAA access id>"
>>>> char country="us"
>>>> char bankCode="314074269"
>>>> int lastSessionId="0"
>>>> data {
>>>> backend {
>>>>   char bankName="USAA Federal Savings Bank"
>>>>   char org="USAA Federal Savings Bank"
>>>>   char fid="67811"
>>>>   char serverAddr="https%3A%2F%2Fdf3cx-services.1fsapi.com
>>>> %2Fcasm%2Fusaa%2Faccess.ofx"
>>>>   char appId="QMOFX"
>>>>   char appVer="2300"
>>>>   char headerVer="103"
>>>>   char clientUid="<CLIENTUID>"
>>>>   int httpVMajor="0"
>>>>   int httpVMinor="0"
>>>>   char httpUserAgent="InetClntApp%2F3.0"
>>>> } #backend
>>>> } #data
>>>> -------------------------
>>>> Notes:
>>>> -- 'httpUserAgent' is currently not configurable through GNC v4.4.1, but
>>>> it works when included in the file.  It has been added in newer AqBanking,
>>>> look for support in next GNC release.
>>>> -- 'CLIENTUID' can be found in OFXLog.txt generated by Quicken.  Signup
>>>> for trial and cancel within 30 days no charge.
>>>> -- 'your new USAA access id' can be found at
>>>> https://www.usaa.com/accessid
>>>> You will need to disconnect accounts from within the AqBanking Wizard,
>>>> download accounts with new user configuration, then reconnect accounts.  In
>>>> my case, the new credit card account numbers in the accounts list are not a
>>>> 100% match to the number found on your credit card.  There were enough
>>>> common digits to know which was which, just be aware.  I was able to
>>>> successfully download and update 2 checking accounts, a savings account,
>>>> and a credit card account.
>>>> I hope this helps.
>>>> Regards,
>>>> Bob
>>>> PS.  I did clone the AqBanking repo and build and install the latest
>>>> libraries on the same machine I am running GNC.  I am not sure if the
>>>> GNC used the libraries distributed with it or the ones I built so YMMV.
>>>> _______________________________________________
>>>> gnucash-devel mailing list
>>>> gnucash-devel at gnucash.org
>>>> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
>>> _______________________________________________
>>> gnucash-devel mailing list
>>> gnucash-devel at gnucash.org
>>> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> If you are using Nabble or Gmane, please see https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.

More information about the gnucash-devel mailing list