NUKI Smart Lock 3.0 Pro https webhook to open/close the door

Nuki APIs Web API
1

Hi Dev’s,
i own the NUKI Smart Lock 3.0 Pro and connect it with wlan to the internet. I can open/close the door via the Nuki Web. I create already a api token.
How it is possible to use a https call with the token for open the door?

Cheers Ingo

2

Sections 3&4 of the API documentation contain detailed instructions on how to create calls that can be executed with a command line tool (e.g. curl) to open/close a Smart Lock.

https://developer.nuki.io/page/nuki-web-api-1-4/3#heading--swagger-interface

1 Like
3

For example, to unlock the lock you use this web request

url: https://api.nuki.io/smartlock/<LOCK_ID>/action/unlock
headers:
   Content-Type: application/json
    Authorization: Bearer <YOUR TOKEN>
1 Like
4

Thanks for your help, i’ve check the commands on Swagger UI but i can’t find a info how to get the LOCK_ID. Do you have a suggestion how i can find out?

5

Use GET https://api.nuki.io/smartlock to get a list of all your smarlocks with smartlockId

1 Like
6

Thanks for your help, i can open and close the door now with Swagger UI and Swagger UI

But i don’t understand how it works with https… I would like send the https as a action from doorbird device.

For example, 123456789 is my lock id and xyz my API token
Action in the web interface of doorbird:

“https://api.nuki.io/smartlock/123456789/action/unlock headers: Content-Type: application/json Authorization: Bearer xyz”

This is not working. How to decode the headers in the https call?

7

Does regular curl work?

curl -X POST --header 'Content-Type: application/json' --header  'Authorization: Bearer xyz' 'https://api.nuki.io/smartlock/123456789/action/unlock'
8

No, it’s not working.
I’ve a second option using a webhook from doorbird to homee and from homee to nuki. I post some pictures of this configuration, maybe you have an idea, because that doesn’t work either…

IMG_2460
IMG_24601170×1277 161 KB

IMG_2461
IMG_24611169×846 88.6 KB

IMG_2462
IMG_24621170×593 64.1 KB

IMG_2463
IMG_24631170×820 73.6 KB

IMG_2458
IMG_24581170×772 115 KB

9

I’m sorry but I don’t know either doorbird or homee so I can’t really comment on them.
Can you try to run the curl command in a command line / terminal window and paste it’s output?

10

Hi! Do i need the Bridge to do so? Or only the Nuki 3.0 Pro (WiFi)?

Thank you.

11

The bridge will allow local HTTP API calls.
The SL 3 Pro and bridge both work with the remote API, so if you have a SL3P you can use the cloud based API without a bridge

12

Thank you! And what if someone knows the URL of me, then he can open the door?

13

You need to generate an API key in advance at Nuki Web and pass it in a header in all API calls. This acts as a password to block unauthorized API calls.
More details here: Nuki Web API

1 Like
14

Hi there, this is my first post.
Thanks to this thread, I was able to setup my http request for my Smartlock 3 Pro.
My use case: As the homekit integration does not support to open (=unlatch) the door while already unlocked, I defined a switch that is doing this.
My feedback: The smartlock ID was the most challenging part as Nuki Web shows “a” Smartlock ID for my device (within administration) that is a totally different one I got (and finally need) from the GET

15

It is the same ID, but in the administration and on the device it is shown in hexadecimal format and the WebAPI needs it in decimal format. You can use an online converter like this one for the conversion.

16

Thanks for this important remark. It makes sense to either add this to the documentation or change it at least in the administration.

19

I’ve create a forwarding server with Flask on a raspberry pi now.

import json
import requests
from flask import Flask, request, abort

app = Flask(__name__)

@app.route('/homeetest', methods=['POST'])
def homeetest():
    if request.method == 'POST':
        webhook_url_close = 'https://api.nuki.io/smartlock/12345/action/lock'
        data = { 'authorization': 'Bearer xyz' }
        r = requests.post(webhook_url_close, data=json.dumps(data), headers={'Content-Type': 'application/json'})
        print(r)
        print(request.json)
        return 'success', 200
    else:
        abort(400)

if __name__ == '__main__':
    app.run(host='192.168.192.2')

I get the return value r

<Response [415]>

What it mean? I read something about the -d option is missing. But i don’t unterstand this.

BTW: If i’m using the curl command, it works fine.

20

I’m using the curl command now.

import os
import sys
import json
import requests
from flask import Flask, request, abort

app = Flask(__name__)


@app.route('/doorclose', methods=['POST'])
def doorclose():
    if request.method == 'POST':
        os.system("curl -X 'POST' 'https://api.nuki.io/smartlock/123456789/action/lock' -H 'accept: application/json' -H 'authorization: Bearer xyz'")
        return 'success', 200
    else:
        abort(400)

@app.route('/dooropen', methods=['POST'])
def dooropen():
    if request.method == 'POST':
        os.system("curl -X 'POST' 'https://api.nuki.io/smartlock/123456789/action/unlock' -H 'accept: application/json' -H 'authorization: Bearer xyz'")
        return 'success', 200
    else:
        abort(400)

if __name__ == '__main__':
    app.run(host='192.168.192.2')
21

I believe that the issue may be with this line:
data = { ‘authorization’: ‘Bearer xyz’ }
The later requests.post line sends it as data to the endpoint, but Authorization should be passed as a header like in your curl code

1 Like
22

Okay, you mean it’s needed to be in the headers like this

data = { }
r = requests.post(webhook_url_close, data=json.dumps(data), headers={'Content-Type': 'application/json', 'authorization': 'Bearer xyz' })

I would give it a try…
… Still <Response [415]>