VAG Connect v2.10.6

VW EU Data Act portal SPA POST 405 fix. Audi/Škoda/SEAT/CUPRA QR-Login is not affected and remains the recommended path.

What's new

Fixed

• Data Act portal SPA password POST 405 (#388 xeonixo + Arno-MA-73). v2.10.3 POSTed the SPA password to the parsed identifier-form action URL, which returned HTTP 405 Method Not Allowed. Auth0 Universal Login actually routes the SPA password submission through the SAME /u/login?state=<x> URL as the identifier step; the body's action field differentiates them. Now mirrors idk.py's SPA fallback exactly: form-encoded POST first, JSON-content-type fallback when that lands 4xx or back on the IDP host, follow the redirect chain to the portal callback.

Audi / Škoda / SEAT / CUPRA users

DAG (QR-Login) endpoint at /oidc/v1/device_authorization was verified live on 2026-06-03 and still returns 200. Your auth path is unchanged. If you are on these brands and not yet using QR-Login, switch to it in Settings → Devices & Services → VW Group Connect → Reconfigure - it bypasses the entire Azure WAF + Play Integrity stack the VW EU users are stuck behind.

Full diff vs v2.10.5

v2.10.5...v2.10.6