altstoreio / AltStore

AltStore is an alternative app store for non-jailbroken iOS devices.
https://altstore.io
GNU Affero General Public License v3.0
11.68k stars 885 forks source link

[Feature Request] Recognize Enterprise Accounts from Orgs as Paid Dev Accounts #199

Open zhangyoufu opened 4 years ago

zhangyoufu commented 4 years ago

Describe the bug My enterprise developer account is recognized as "Free Developer Account", and AltStore shows only 10 App IDs available w/ 7 days expiration.

delfer commented 1 year ago

@lonkelle it would be very good! Any updates on ETA?

lonkelle commented 1 year ago

@lonkelle it would be very good! Any updates on ETA?

ETA: January 18 is when I'll message back here with a solve! Putting that in my TODO list rn.

sohel2020 commented 1 year ago

Looking forward to seeing the changes.

shanegillio commented 1 year ago

hi there! popping in here to say that we have seen this issue occurring and we will certainly be looking at implementing a fix for those still experiencing issues

sohel2020 commented 1 year ago

hi there! popping in here to say that we have seen this issue occurring and we will certainly be looking at implementing a fix for those still experiencing issues

Thanks, man. It's been 2 years 8 months

sohel2020 commented 1 year ago

@shanegillio is there any timeline regarding the feature out to user?

shanegillio commented 1 year ago

We are currently working on development in other areas, so I will provide an update on this once we have more to say. For now, the difficulty is implementing a fix that solves the issue correctly. Opening up a team selector can unfortunately be exploited, and so we need another way for AltStore to recognize the desired account type.

lonkelle commented 1 year ago

Enterprise / organization team support is actually already in the community edition fork of AltStore called SideStore which I and about 20 members of the AltCommunity maintain (meaning it's very actively developed).

We've been using enterprise / organization accounts for two months now with no problems and there has been no security issues. Riley appears to have other priorities than to focus on paid devs (given free accounts are the primary user accounts that use AltStore) - but we want to give Paid Devs as much love as possible in the future (as well as free devs ofc, in fact, we just added MacDirtyCow support for free Apple ID's to install AS MANY APPS as they want on our latest nightly).

Anyway, we're still in the prerelease phase since there are a few important stability issues before finalizing and officially releasing. But I thought I'd let you guys know you can try it out. For some users, it actually works perfectly (me included) and we're figuring out the pattern of when it's buggy and when it's stable. #WorkInProgress

Right now we only have a macOS version of SideServer - but we're also building it out for Windows and Linux currently.

Check it out if any of you are on macOS: https://sidestore.io - and I'll update this issue when we have Windows / Linux support in the coming months.

Cool Tidbit: SideStore doesn't need SideServer to function, it's only needed for the initial installation. After that, SideStore can refresh, install, etc without needing to be on the same network. Caveat is that you still need to be on WiFi (or a personal hotspot) for it to work. We're currently putting cellular data support on hold while we focus on stability since we're buggier than AltStore at the moment. But we'll fix that + add a Windows version v soon. Wish us luck!

shanegillio commented 1 year ago

Can anyone here tell me if the org they are a part of is being shared with multiple people. Like are most people here because they happen to get an Org account through work or are people trying to share an Org account with others who also want to sideload

lonkelle commented 1 year ago

This is a very important question because of the way AltStore, by default, handles certificates. Organizations have a limit of 12.

So the certification process needs a revamp so it revokes and adds new ones intelligently - and further than that, the ideal solution, AltStore should only use ONE cert for ALL users in the Org (which is possible but AltStore never had to worry about this before).

You don't have to think about this with Individual or Free accounts for obvious reasons. But shared Org Teams share the 12 cert limit across all users so considerations need to be made.

But all users of SideStore that reside in an Org can share a SINGLE cert thru a process I personally developed but this specific feature is only in the proof of concept stage so it's recommended to check your certificate page on Apple Developer every time you ha e to reinstall SideStore (which is rare but we're in the pre-release / alpha stage so that's still needed sometjmes).

imReker commented 1 year ago

I use Org account with modified AltServer-Windows, the ipa can be keep up to 365 days, so I removed SideStore and AltStore from phone because they are useless now.

lonkelle commented 1 year ago

@imReker NO WAY! We can't get AltServer-Windows to run actually. That's why we don't have a AideServer alternative.

Because at that point AltStore / SideStore is only useful for refreshing once a year but more importantly installing new apps or updating existing apps.

So I wouldn't recommend you delete them for that reason.

But the crazy thing is that you got AltServer-Windows to RUN. We can only get it to compile.

If you wouldn't mind helping us by sharing how you did that, here's our private Discord server: https://discord.gg/vCTUk2w2

Because I'm pretty excited about maybe finally finding a solve to creating SideServer for Windows - literally anyone on this thread, for 7 days, can join our "team only" Discord server (where we talk about the good stuff 😉).

https://discord.gg/vCTUk2w2

Some insight for you guys about the server. We are currently discussing the upcoming format "IPASource" spec for SideStore or for you Delta fans, we just recently forked that and created Deltroid and we are finalizing new features in the brand new named ".emuskin" spec which Provenance has adopted (given Joe from Prov also cofounded SideStore) - and will be a universal format across as many platforms as we PR the support (including Android).

Anyway, hope you can help us @imReker - it tools us weeks and lotsa data to compile it ourselves since we lack Windows experience and I'm just astounded by your ability to build it LET ALONE run it without runtime errors. Really hope you join.

PS. If you got to this late and missed out on joining our internal team's private Discord. Comment on this and I might generate another one if the server doesn't get too crowded from me allowing anyone to join for 7 days this time around.

kanyeceejayA commented 1 year ago

@lonkelle I am assuming @imReker simply patched the official release of altserver with one of the patchers, like AltServerPatcher. It allows you to supply a link for an IPA that altserver then installs on your phone instead of AltStore. It is what I used when trying to figure out this issue back in 2020, when I installed a modified version of Altserver with a fix

I hope that tool can be helpful in figuring out a windows version though! Your project seems really promising and I look forward to trying it out.

imReker commented 1 year ago

@lonkelle Agreed, new Apps and update is important. But currently, AltStore default use Free account, which means only 3 Apps is allowed, that means the users of AltStore don't care about install new Apps. That's why I removed it from phone. AltServer-Windows is much more useful for users in an Org but do not have a Mac like me. And I can accept the inconvenience when I want to update something.

@kanyeceejayA AltServer can install any IPA, just shift+click the icon. The only extra thing I do is make a binary patch, which makes AltServer choose Org account not the Free one.

-------Edit--------- @lonkelle I'll put some time into the SideStore fork of AltServer-Windows.

lonkelle commented 1 year ago

@imReker You are amazing. Our team has tried and failed at it for such a long time now. I even asked Riley for his entire environment log and that only got us building it but we ran into runtime errors after it called the Xcode API. It would login but those calls threw runtime errors.

Feel free to join our Discord in the link above. Or even just make a PR for better build instructions on our fork, SideServer for Windows linked here: https://github.com/SideStore/SideServer-for-Windows

If you have any questions. My Twitter and Mastodon is on my GitHub profile. 💜

ahmed0315 commented 1 year ago

anyone else having issues with sidestore, where when u try to log in on the sidestore app with ur apple id and password, it prompts a message saying unable to log in, and then your apple id gets locked for security reasons, an you have to reset ur apple id password?

cmonteiro128 commented 1 year ago

anyone else having issues with sidestore, where when u try to log in on the sidestore app with ur apple id and password, it prompts a message saying unable to log in, and then your apple id gets locked for security reasons, an you have to reset ur apple id password?

Yep happened to me. Super annoying too getting locked like that

maxnowack commented 1 year ago

@ahmed0315 @cmonteiro128 see SideStore/SideStore#135

lonkelle commented 1 year ago

@ahmed0315 @cmonteiro128 This is the exact reason why we haven't released SideStore officially yet.

We've been working on fixing this issue since Jan 4 and there are multiple solutions that are currently in different branches on our GitHub (one definitive solution does exist but it causes the installation of SideStore to take 10 minutes as a side effect...altho I think I just thought of a solution to that, gonna go tell the team 😅).

Right now, the only thing power users cando is self-host their own anisette servers which solves this problem but we plan on solving this for everyone without them having to host a server.

This is an important reason as to why SideStore is still in the alpha phase. Since SideStore is completely remote, we can't rely on desktop libraries to receive authentication data like AltStore does. That means our authentication headers need to "follow the rules" and as we get more alpha testers, we find out that Apple has "more authentication rules" than we previously realized because with more users, the more necessary it is to follow those rules to a T.

If it wasn't for anisette authentication headers causing this issue, we'd already have released officially.

dstyp commented 1 year ago

Is there a solution here? Long thread with no concrete info? Am a dev since many years but getting free account in Altstore.

lonkelle commented 1 year ago

@dstyp Our community version SideStore (think AltStore CE) has this ability.

https://sidestore.io

I know Riley plans to add support for this one day, but am unsure if that's happened yet given this issue is still open.

dstyp commented 1 year ago

@dstyp Our community version SideStore (think AltStore CE) has this ability.

https://sidestore.io

I know Riley plans to add support for this one day, but am unsure if that's happened yet given this issue is still open.

"Ability" ? Not being able to do this is clearly a bug. Not sure I would call it an "ability".

Anyone know if there is a way to do this in Altstore and/or if a fix is planned/availble in latest build?

The age of this thread and the "community" reply above seems to indicate that Altstore is a (near) dead project. Who has info on this?

lonkelle commented 1 year ago

@dstyp This is not an AltStore bug as the sole developer of AltStore, Riley, told me this was an intentional choice (free Apple ID users are his target market). He said two years ago that he plans to support all of the different types of paid accounts one day. Seems like that day hasn’t come yet tho.

Before I and my team started SideStore I used to patch AltStore to support Paid Dev accounts. It’s very easy if you don’t want to migrate to SideStore (which btw doesn’t require a server to refresh or install apps - it’s all done on the phone itself).

If you want to patch AltStore instead of switching to SideStore. I could find the only three lines of code you’d have to change to support your account on AltStore but you’d need a Mac to build it ofc.

dstyp commented 1 year ago

@lonkelle Thanks, appreciate the reply. Would still label this a bug, even if intentional there is no info about it. But doesn't matter.

What's the difference with SideStore? Pros, cons? Open to switching.

Am a dev so should be able to patch AltStore as well. Hardcode some enum to make it a dev account always or? :D

lonkelle commented 1 year ago

SideStore and AltStore have feature parity since it was originally a fork and AltStore doesn't get updated that often (we update SideStore multiple times a day with our nightly IPA).

The PROS of SideStore over AltStore: • Donation-fueled so all features are completely free to use - this includes all features locked behind AltStore's Patreon Paywall. • AltServer isn't required - runs entirely on the phone using tech we call SideServer mobile. • Continuously curated list of default apps - we vet certain apps thru an approval process and put them in our app directly; this way you don't have to go looking for sources or IPAs yourself (tho you still can). • Constant development - we have a team of around 20 people working on SideStore vs 1 person working on AltStore.

The CONS: • SideStore has almost reached Release Candidate status but there are a few edge cases we have to figure out where an install or refresh will always fail for random accounts. We have most of these figured out but we're still working to fix all of them. • You have to install SideStore from a computer and at the moment, we only forked SideServer for macOS to automate the installation. You can, of course, just sideload our IPA using AltServer (hold shift or option after opening AltServer's dropdown menu) but that requires one extra manual step of getting the "pairing file" from Jitterbug which SideStore will ask for when it first opens if not installed with SideServer.

We hope to release SideServer for macOS and Windows by September. If you have any issues, join our (much larger than AltStore since it's free to join) Discord here: https://discord.gg/sidestore

lonkelle commented 1 year ago

If you'd rather patch AltStore, lemme know, and I'll permalink the lines you need to change. ☺️

Rathna-K commented 1 year ago

Closed?

dstyp commented 1 year ago

Why was this issue closed? Makes no sense.

@lonkelle - Thanks again. Gave Sidestore a spin but it doesn't work well. Please show us all if possible how to fix this issue in Altstore 🙏

dstyp commented 1 year ago

@shanegillio why was this closed ?

@lonkelle happy to get info on how to use altstore for this. Tried Sidestore, got multiple crashes and issues. Seems like a very unfinished and premature app. Also it seems to potentially mess with your appleid and certs - something which you did not list as a con ?

dstyp commented 1 year ago

Hello?

@shanegillio why was this closed ?

@lonkelle happy to get info on how to use altstore for this. Tried Sidestore, got multiple crashes and issues. Seems like a very unfinished and premature app. Also it seems to potentially mess with your appleid and certs - something which you did not list as a con ?

shanegillio commented 1 year ago

Hey @dstyp ! Sorry for the delay, but we're just in the process of cleaning up the issues tab and we have a few different mentions of this already, so was only closing as a duplicate. Since this thread appears more active, I'll replace this one with the other instance of this question.

Please note, we are aware of this idea for enterprise accounts and I've marked it as a feature request, not a bug, since it requires proper implementation/UI due to it dealing with account information.

kanyeceejayA commented 1 year ago

Thanks @shanegillio for reopening this! If I may make a suggession, could the canonical issue be mentioned when closing duplicates? That way anyone that was following a duplicate issue would know where to check for progress.

shanegillio commented 1 year ago

@kanyeceejayA, that's a good suggestion and something I'd like to do going forward. we're hoping to get a project board up for everyone very soon to make the issues/requests easier to follow. I would love to centralize some of these repeated threads.

l0u1sg commented 4 months ago

Hey, any news/status on the project?

PlugNPush commented 2 months ago

Any updates on this? It has been over 4 years...

aaronschendel commented 1 month ago

I'm also curious if there's any updates on this :)

CodiAsFox commented 3 weeks ago

So.. this is never getting solved. Isn't it?