How to fully automate Fyers Broker API login using Python

{
  "2025-11-27": "eyJhbRZ_0"
}

# ------------------------------------------------------------------------------------
#                          FabTrader Algorithmic Trading Platform
# ------------------------------------------------------------------------------------
# Copyright (c) 2025 FabTrader
#
# LICENSE: PROPRIETARY SOFTWARE
# - This software is the exclusive property of FabTrader.
# - Unauthorized copying, modification, distribution, or use is strictly prohibited.
# - Written permission from the author is required for any use beyond personal,
#   non-commercial purposes.
#
# CONTACT:
# - Website: https://fabtrader.in
# - Email: [email protected]
#
# Usage: Internal/Personal use only. Not for commercial redistribution.
# Permissions and licensing inquiries should be directed to the contact email.

import pyotp
import requests
from urllib.parse import urlparse, parse_qs
import json
from fyers_apiv3 import fyersModel
import base64
from datetime import datetime, date
from time import sleep


"""
ConnectionManager :     Manages broker connection - Logging in and retaining Access Token
"""


def get_access_token() -> str:
    """
    Returns broker access token
    """

    try:
        with open("BrokerToken.json", "r") as f:
            data = json.load(f)
        return data

    except Exception as e:
        print(datetime.now(), " : ERROR : Unable to access Token file. Quitting...")
        print(e)
        raise FileNotFoundError()


def broker_login():
    """
    Function enables logging into broker apiD account.
    :return:
    Broker Instance, in case the login was successful
    None, if the login fails
    """

    broker_handle = None

    # Download Broker Login credentials from Broker app config file
    broker_credentials = {
          "broker": "Fyers",
          "userId":"XVXXXX",
          "apiKey": "xxxxxxx-100",
          "appSecret": "XXXXXXXXXX",
          "totpKey" : "XXXXXXXXXXXXXXXXXXXXXXXXX",
          "pin" : "9999"
        }

    # Extract token already (if) saved in the token file
    token = get_access_token()

    run_date = date.today().strftime("%Y-%m-%d")

    # Check if Access token was generated in the last 24 hrs. If so use that one.
    if run_date in token.keys():
        access_token = token[run_date]

    else:
        # Generate fresh Access Token and write to access token file (to be used through the day)

        try:

            def encode_input(string):
                string = str(string)
                base64_bytes = base64.b64encode(string.encode("ascii"))
                return base64_bytes.decode("ascii")

            url = "https://api-t2.fyers.in/vagator/v2/send_login_otp_v2"
            res = requests.post(url=url,
                                json={"fy_id": encode_input(broker_credentials["userId"]),
                                      "app_id": "2"}).json()

            if datetime.now().second % 30 > 27: sleep(5)
            url = "https://api-t2.fyers.in/vagator/v2/verify_otp"
            res2 = requests.post(url=url,
                                 json={"request_key": res["request_key"],
                                       "otp": pyotp.TOTP(broker_credentials["totpKey"]).now()}).json()

            ses = requests.Session()
            url = "https://api-t2.fyers.in/vagator/v2/verify_pin_v2"
            payload2 = {"request_key": res2["request_key"],
                        "identity_type": "pin",
                        "identifier": encode_input(broker_credentials["pin"])}
            res3 = ses.post(url=url, json=payload2).json()

            ses.headers.update({
                'authorization': f"Bearer {res3['data']['access_token']}"
            })

            url = "https://api-t1.fyers.in/api/v3/token"
            payload3 = {"fyers_id": broker_credentials["userId"],
                        "app_id": broker_credentials["apiKey"][:-4],
                        "redirect_uri": "https://127.0.0.1:5000/",
                        "appType": "100", "code_challenge": "",
                        "state": "None", "scope": "", "nonce": "",
                        "response_type": "code", "create_cookie": True}

            res3 = ses.post(url=url, json=payload3).json()

            url = res3['Url']
            parsed = urlparse(url)
            auth_code = parse_qs(parsed.query)['auth_code'][0]

            session = fyersModel.SessionModel(
                client_id=broker_credentials["apiKey"],
                secret_key=broker_credentials["appSecret"],
                redirect_uri="www.google.com",
                response_type="code",
                grant_type="authorization_code"
            )

            # Set the authorization code in the session object
            session.set_token(auth_code)

            # Generate the access token using the authorization code
            response = session.generate_token()
            access_token = response['access_token']

            # Save access token into token file
            try:
                dict = {run_date: access_token}
                with open('BrokerToken.json', 'w+') as token_file:
                    json.dump(dict, token_file)
            except Exception as e:
                print('Broker Login : Error saving broker access token to token file')
                return broker_handle

        except Exception as e:
            print('Broker Login : Login failed. Check Credentials and try again')
            return False

    # Initialize the FyersModel instance with your client_id, access_token
    broker_handle = fyersModel.FyersModel(client_id=broker_credentials["apiKey"],
                                          is_async=False,
                                          token=access_token,
                                          log_path="")

    # Everything looks ok. Return broker instance
    return broker_handle

if __name__ == "__main__":

    fyers = broker_login()
    if fyers is None:
        print("Broker Login failed")
    else:
        print("Broker Login successful")
        print(fyers.get_profile())