This NodeJS Express application illustrates how to create an API Access SmartApp that connects to your SmartThings account with OAuth2 to control devices and subscribe to device events. The application uses the SmartThings SmartApp SDK NPM module for making the API calls to control switch devices and subscribe to switch events. The app creates a web page that displays the state of all switches in a location and allows those switches to be turned on and off.

API access tokens and web session state are stored local files. This storage mechanism is not suitable for production use. There are alternative storage mechanisms for DynamoDB and Firebase.

• public
  • images -- image assets used by the web pages
  • javascript -- javascript used by the web page for rendering and controlling devices
  • stylesheets -- stylesheets used by the web pages
• views
  • devices.ejs -- page that displays switch devices and allows them to be controlled
  • error.ejs -- error page
  • index.ejs -- initial page with link to connect to SmartThings
• server.js -- the Express server and SmartApp
• .env -- file you create with app credentials
• package.json -- The Node.js package file

• A SmartThings account
• The SmartThings CLI installed
• Node.js and npm installed
• ngrok or similar tool to create a secure tunnel to a publicly available URL

Note that as an alternative to running the app locally you can use Glitch to host your app.

Clone this GitHub repository, cd into the directory, and install the Node modules with NPM:

git clone https://github.com/SmartThingsCommunity/api-app-subscription-example-js.git
cd api-app-subscription-example-js
npm install

Create a file named .env in the project directory and set the base URL of the server to your ngrok URL, For example:

SERVER_URL=https://your-subdomain-name.ngrok.io

Start your server and make note of the information it prints out:

node server.js

Remix this Glitch project: midnight-cloudy-sceptre and wait for the server to start.

Look at the log output of your local server or Glitch app. You should see something like this:

Target URL -- Copy this value into the targetUrl field of you app creation request:
https://node-st.ngrok.io

Redirect URI -- Copy this value into redirectUris field of your app creation request:
https://node-st.ngrok.io/oauth/callback

Website URL -- Visit this URL in your browser to log into SmartThings and connect your account:
https://node-st.ngrok.io

Create a file like this one, replacing the specified information in double curly brackets {{}}. The appName needs to be some unique name with lower-case letters, numbers, and dashes and no spaces.

{
  "appName": "{{SOME UNIQUE NAME YOU CHOOSE}}",
  "appType": "API_ONLY",
  "classifications": [
    "CONNECTED_SERVICE"
  ],
  "displayName": "{{THE NAME OF YOUR APP}}",
  "description": "{{A DESCRIPTION OF YOUR APP}}",
  "singleInstance": true,
  "apiOnly": {
    "targetUrl": "{{TARGET URL FROM THE ABOVE LOG OUTPUT}}"
  },
  "oauth": {
    "clientName": "{{THE NAME OF YOUR APP ON THE OAUTH PAGE}}",
    "scope": [
      "r:locations:*",
      "r:devices:*",
      "x:devices:*"
    ],
    "redirectUris": ["{{REDIRECT URL FROM ABOVE LOG OUTPUT}}"]
  }
}

Create the app using the SmartThings CLI. For example, if your file is named app.json run this command:

smartthings apps:create -i app.json

Save the output of the create command for later use. It contains the client ID and secret of your app. You won't be able to see those values again.

After running the create command look at your server logs for a line similar to this one:

CONFIRMATION request for app f9a665e7-5a76-4b1e-bdfe-31135eccc2f3, to enable events visit 
https://api.smartthings.com/apps/f9a665e7-5a76-4b1e-bdfe-31135eccc2f3/confirm-registration?token=fd95...

Paste the URL into a browser or request it with a utility like curl to enable callbacks to your app. The response should contain the targetURL value from your app creation request, for example:

{
    targetUrl: "https://your-subdomain-name.ngrok.io"
}

Add the APP_ID, CLIENT_ID and CLIENT_SECRET properties from apps:create command response to your .env file:

APP_ID={{RESPONSE appId FIELD VALUE}}
CLIENT_ID={{RESPONSE oauthClientId FIELD VALUE}}
CLIENT_SECRET={{RESPONSE oauthClientSecret FIELD VALUE}}

Restart your server:

node server.js

Note that if you are using Glitch your server will restart automatically when you edit the .env file.

Go to Website URL from the server log in a browser, log in with your SmartThings account credentials, and choose a location. You should see a page listing all devices in that location with the switch capability. Tapping the device on the page should turn the switch on and off. You should also see the states of the switches on the page change when you turn them on and off with the SmartThings mobile app.