XcodesOrg / xcodes

The best command-line tool to install and switch between multiple versions of Xcode.
MIT License
3.58k stars 119 forks source link

AppleID keeps getting locked #365

Open schwa opened 1 month ago

schwa commented 1 month ago

I keep getting the "your AppleID is locked" error when using Xcodes.

I know there have been a lot of problems with AppleID recently (the great account locking of late April…) but despite that this does seem to be more common in Xcodes and has certainly been happening before the issues AppleID had at the end of April.

For reference (and searchability) the error I get in Xcodes is:

"Unable to install Xcode This Apple ID has been locked for security reasons. Visit Forgot to reset your account (https:///forgot.apple.com)."

And if I try to log in anyways I get a red warning under the login field ("This Apple ID has been locked for security reasons. Visit Forgot to reset your account (https:///forgot.apple.com).")

Is there anything Xcodes can do to mitigate these issues?

I am running Xcodes on 3 machines so I wonder (although I only launch the app when I know there is an Xcode to download) if that is causing the problem. I am unsure if Xcodes installs a persistent helper daemon (nothing in preferences implies it is).

Is it possible to switch from using my appleid and password to using "app specific" passwords?

Thanks

Screenshots attached.

Screenshot 2024-05-08 at 09 21 48 Screenshot 2024-05-08 at 09 22 53
dfed commented 1 month ago

Same here. Happened a few times in the last few weeks. Always when utilizing Xcodes.

MattKiazyk commented 1 month ago

Is it possible to switch from using my appleid and password to using "app specific" passwords?

I would love love love if Xcodes could not be dependent on apple passwords and use app passwords, but every time I've tried, the 2 systems don't work with each other. ie The login token I get from X doesn't work with Y. They way that Xcodes, Fastlane (and others) have always worked is by faking out the login you do at apple.com and fragile(ly) setting tokens and header keys. AppStoreConnect has a very nice api that supports this, but can't use that same api for developer.apple.com.

Previously in the past, users were getting locked out, because Apple changed and added in a hashcash key https://github.com/XcodesOrg/XcodesApp/pull/361 . They may have well done something again, but I haven't seen anything widespread.

Hopefully all your machines @schwa @dfed are on the latest version? Other than that, I'm not sure what else I can do to help this situation.

dfed commented 1 month ago

Yeah all my machines are on 2.1.2. The first time this happened there was this more widespread incident, and I've been getting my account lock relatively consistently when using Xcodes since. As a casual observer, it feels like Apple may have changed something here? That said, I'm far from in this world and I trust your judgement – just reporting my experience thus far.

schwa commented 1 month ago

Yeah latest version here.

Would extra logging help at least provide any insight into what's causing it?

Are you just displaying the error string some HTTP service gives you are you interpreting something else as a lock out? The lock out message is very specific - so I'm curious.

schwa commented 1 month ago

(Anecdotally other folks have mentioned this occurred to them this morning too - maybe somewhat widespread?)

nalexn commented 1 month ago

In my case it doesn't say apple id is locked, it simply rejects the correct 2FA code I enter. Tried like 5 times, same error: "The code that was entered is incorrect"

macOS 14.5 (23F79), M2; Xcodes 2.1.2(26)

Screenshot 2024-05-14 at 15 52 57
schwa commented 1 month ago

And this morning everything locked again - while rest of account on Mac is just fine.

Are there logs I can check to see what the responses are from Apple?

incanus commented 1 month ago

Seeing this for the first time today, the first time I've tried to update a version in some weeks. Apple ID otherwise fine and able to login in other places.

dfed commented 3 weeks ago

I haven't seen this in a bit – might have been a blip?

vadimvitvickiy commented 2 weeks ago

I haven't seen this in a bit – might have been a blip?

For me, It's still an issue, cannot log in.

vadimvitvickiy commented 2 weeks ago

After trying to log in to the App Store Connect, I've got the same message, and had to unlock the account from my device.