Use webcal instead of API requests

[AlexJonker]

myx supports webcal.

use

❯ curl -X PATCH "https://school.myx.nl/api/Settings" \
        -H "Authorization: Bearer eyJhbGciOiJo......" \
        --data-raw '[{"op":"add","path":"/feeds/<uiid>","value":{"name":"<name>","ids":[<classid>]}}]'

can be a generated uiid.
Is the name it shows up in the settings page. Probably best to do xrooster-
is the id of the class

using this will give you a url like this: webcal://school.myx.nl/api/InternetCalendar/feed/<some other uiid>/<uiid>

when turned into https://school.myx.nl/api/InternetCalendar/feed/<some other uiid>/<uiid> it will download a .ics file

the response for this request doesn't return the other uiid, idk yet how to get that one. Still looking into it.

[kietelmuis]

The first GUID is the UserId, this is per user and does not change. This GUID is not retrievable by any endpoint but is injected dynamically though an ASP.NET chunk JavaScript file, we could intercept those chunk files and regex though them to get our UserId (Chunk names change, we could also write them down but that would require manual work). The second GUID is very easy, it is generated per feed (class) and is retrievable though the /Settings endpoint on the MyX api.

[AlexJonker]

the GUID that is injected can also be found by decoding the jwt token.

{
  "aud": "idk what this is",
  "iss": "idk what this is",
  "user": "The GUID",
  "name": "Tis is a name or email",
  "atnId": This one doesn't always exist, only does when myx is setup to have only access to one schedule.,
  "role": "student",
  "scope": "Different for each school - kinda useless.",
  "organisation": "returns name of the school",
  "exp": string,
  "iat": string,
  "nbf": string
}