[GNC] [GNC-dev] USAA FSB requires newer QWIN support

Tracy gnulist at vbot.org
Tue Feb 16 13:18:40 EST 2021


Greetings,

I am aware that what I am about to ask is borderline off-topic for the 
list, but I ask your indulgence. I have been following the discussion in 
this thread (and others related to USAA), as I have accounts there and 
would like to be able to access the data as well.

However, my use case is a little different. Rather than accessing the 
accounts directly through GnuCash, I wish to download the OFX/QFX files, 
then import them to GnuCash. To do this, I am attempting to use the 
OFXTOOLS suite (specifically, the ofxget script). Things worth noting 
here - OS is Ubuntu 20.04.1, Python version is 3.8.5, and OFXTOOLS 
version is 0.9.1.

I have tried to configure an entry for USAA in my ofxget.cfg file (shown 
below), but every time I attempt to retrieve account information, I am 
getting an error back from USAA - specifically "OFX header is 
malformed". I haven't been able to figure what I have wrong in my 
configuration - the only difference I can find between my configuration 
and the write-up that John Ralls did on the GnuCash Wiki is that I can't 
find a way to specify the HTTP User Agent. Note that I did retrieve the 
access id and access pin from USAA, and I tried both the UUID from the 
URL where I received this information, and the UUID posted below - 
neither is working for me.

For reference, the command I am using, that fails, is:

ofxget acctinfo usaa1 -user <access id>

When prompted for a password, I am using the access pin.

If anyone is familiar with this tool, and can offer me pointers on how 
to do this, I would appreciate it. (Note, I am also planning to post a 
similar question on the GitHub page for OFXTOOLS - if I get a response 
there that works, I will post that back here, and similarly if I get it 
working from here, I will post back there).

Thanks for your forbearance with my borderline off-topic request.

ofxget.cfg snippet:

[usaa1]
url = https://df3cx-services.1fsapi.com/casm/usaa/access.ofx
version = 103
undisclosedelements = true
pretty = true
org = USAA Federal Savings Bank
fid = 67811
bankid = 314074269
clientuid = 39E0E763-4E1E-4918-9528-D6EBAC94EF5D
appid = QMOFX
appver = 2300


On 2/14/21 9:19 PM, Keith Bellairs wrote:
> My USAA checking and credit card seem to be working. My users/00000.conf is
> using this client UID: I got it from quicken's OFXlog.txt file.
> 
>      char clientUid="39E0E763-4E1E-4918-9528-D6EBAC94EF5D"
> 
> Notably when the online action in GNC challenges for the account password
> the required response is now the "Access PIN". No longer the web site
> account password. Yet another password to track.
> 
> I cannot believe its working again. Thanks everyone.
> 
> Keith
> 
> _________________
> 
> Date: Sun, 14 Feb 2021 11:12:26 -0800
> From: John Ralls <jralls at ceridwen.us>
> To: Randy Johnson <rsjdev314 at gmail.com>
> Cc: gnucash-devel at gnucash.org, gnucash-user at gnucash.org
> Subject: Re: [GNC] [GNC-dev]  USAA FSB requires newer QWIN support
> Message-ID: <CB5E6F20-A9A6-4493-89E9-9451B4826DB1 at ceridwen.us>
> Content-Type: text/plain;       charset=us-ascii
> 
> Well, there's a UUID in that URL, but I just tried using it for the
> ClientUUID and got "The user cannot signon because he or she entered an
> invalid user ID or password." Using the one scraped from Quicken for MacOS
> and reported in
> https://lists.gnucash.org/pipermail/gnucash-devel/2021-February/045690.html
>   works.
> 
> That leads me to believe that USAA is using the ClientUUID as an API key.
> Quicken may have registered one or many. I think the only way to find that
> out is for more users to set up MITMs with different versions of Quicken
> and retrieve the ClientUUIDs for comparison.
> 
> This makes me a bit leery of publishing it on the wiki, because if Quicken
> or USAA catch on that it's been compromised they might change it and lock
> us out again.
> 
> Regards,
> John Ralls
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> If you are using Nabble or Gmane, please see https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.
> 


More information about the gnucash-user mailing list