gcobb321 / icloud3_v3

iCloud3 v3, Development Version - This Repo/Version is used for development and testing of new and updated features. It is not the official release of iCloud3 v3, .
MIT License
169 stars 13 forks source link

Problem Signing into Apple Account #341

Closed LioBoul closed 2 weeks ago

LioBoul commented 1 month ago

Since update HA core-2024.10.3, I have a error message : "Warning: iCloud Account is not Logged Into" or "Login Error, Other Error or iCloud is not Available" If I request a new 6 digits code verification, nothing happens :-( Any idea ???

gcobb321 commented 1 month ago

@Ghawken I’m not sure where the itc_service_key (str): The Apple ITC service key comes from. Is it the same as the token_key? Or just a long made up string like the one you are using that can be the same for everyone.

I just dug through the SRP info to get an understanding of what is going on and now see what the Fastline and your code is doing. I’ll check out your code with my modded Pyicloud later and compare it with the Fastline code I converted from Ruby later today. It’s 4:24am and I should really be in bed.

Ghawken commented 1 month ago

@gcobb321

Sorry - removed itc_service_key - was a widgetKey equivalent - but old WidgetKey seems to be expired. Updated gist - removing the CustomUser - although not sure this is won't be needed.
Trying to see if can maximise use of library without changes before giving up on it

Issue is Ruby SRP Library allows sending hex for everything and encrypting password. This Python library does not that I can easily see.

There is a good summary here of the issues attempting SRP between 2 systems. Multiple variables. https://crypto.stackexchange.com/questions/18528/implementation-and-testing-of-srp-6a

The GIST code can be run in start alone python IDLE (just copy and paste) - and see if works - DOES not for me, which I presume comes down to the m1 m2 calculation... (needs srp library pip installed..) Believe I have added all the correct headers etc.

Edit: Not sure what this below picture is supposed to show/help.

cedricdelecole commented 1 month ago

image

xsasx commented 1 month ago

same problem here

maxm77-RC commented 1 month ago

+1

Olsenoli commented 1 month ago

the Same Problem here.

Core 2024.10.1 Supervisor 2024.10.2 Operating System 13.2 Frontend 20241002.2

is there any Solution in this community?

gcor71 commented 1 month ago

is there any Solution in this community?

If you read the posts before yours, you'll see there is a (volunteer!) team working on it. It looks like a non-trivial fix, so lets give them time and space.

JtwoA commented 1 month ago

is there any Solution in this community?

If you read the posts before yours, you'll see there is a (volunteer!) team working on it. It looks like a non-trivial fix, so lets give them time and space.

And let's stop tagging with new replies, please. Just Subscribe to this issue and you'll receive updates without bumping every single other person watching it.

gcobb321 commented 1 month ago

THANKS FOR LETTING ME KNOW THAT YOU ARE ALSO SEEING THE PROBLEM BUT THAT IS NOT NECESSARY. Everyone is having this problem, including the HA iCloud integration, people that use the Python Pyicloud interface and many other apps all around the world.

Apple changed to a new protocol to verify an account password where a secure hash key is passed from the client (iCloud3) to the Apple servers instead of the password. It is called Secure Remote Password. It is a complicated handshake involving a lot of back-and-forth between the client and Apple. It is working on one Ruby program we know of and we are working to port that to Python. Until it is complete, tested and implemented, you are going to have to use the Mobile App to locate your devices.

I’ll let you know when it is ready. Stay tuned.

gcobb321 commented 1 month ago

@Ghawken A wasted day for me. Xfinity finally restored internet service at 3:30pm. They are still working on repairs after Hurricane Milton went through the area last week and tore things up.

Post any changes/progress you have made and I will be able to get into it tomorrow. I did get the last posted code running with a 401. But, as I understand it, you are looking for a 409 or 200

Ghawken commented 1 month ago

@gcobb321 Thats no good.

I've rewritten a SRP library as I believe it is the library introducing aspects don't really want bytes/int/hex encoding differences. Have that internally verifying hashs and m1,m2 etc.

Working on testing with apple results with it - hopefully not a dead end...

I'll update the GIST when done. So far I have created a rapid apple account locking code set...

Aulig commented 1 month ago

@gcobb321 Thats no good.

I've rewritten a SRP library as I believe it is the library introducing aspects don't really want bytes/int/hex encoding differences. Have that internally verifying hashs and m1,m2 etc.

Working on testing with apple results with it - hopefully not a dead end...

I'll update the GIST when done. So far I have created a rapid apple account locking code set...

Yes, according to what I read on fastlane, Apple uses some custom implementation of SRP - from my understanding snatchev modified a standard ruby SRP library to match Apple's spec in his 4 commits here: https://github.com/snatchev/sirp/commits/master/ So that might be a useful reference for checking which parts of Apple's SRP are non-standard.

hmsjel commented 1 month ago

Take a break, nobody dies :)

iowk commented 1 month ago

I have managed to fix the authentication in another project that forks pyicloud. See commit https://github.com/icloud-photos-downloader/icloud_photos_downloader/commit/4bcb2ac46a585205cbf3886b3df78179b34b18b1

I took @Ghawken 's commit as a reference while working on this. Huge thanks to the work!

The trick is to call

srp.rfc5054_enable()
srp.no_username_in_x()

so that the algorithm meets what fastlane is using, and it is not necessary to rewrite the SRP library.

Hope this helps :>

Ghawken commented 1 month ago

@iowk Thank you very much for posting this! I think the credit is all yours!

Yah! Can confirm that works in python!

gcobb321 commented 1 month ago

@iowk Thank you. I really appreciate your efforts in getting this solved.

Rulles06 commented 1 month ago

@iowk Thank you very much for posting this! I think the credit is all yours!

Yah! Can confirm that works in python!

Hello, Can you explain what you change and where you change to fix this issue in icloud v3 integration? Thanks

gcobb321 commented 1 month ago

@Rulles06 I will be updating iCloud3 v3 today and issuing a new release when it is ready.

hmsjel commented 1 month ago

Thanks for the hard work

rononline commented 1 month ago

for me it's working again without a new release?!

LioBoul commented 1 month ago

It's ok for me. I restarted my HA and upon restart, apple sent me a new verification code. Code inserted and everything is ok. No need to update iCloud v3. Big thanks to those who worked on this bug!! 🤗

frido100 commented 1 month ago

Das gleiche bei mir, läuft wieder alles !! Danke

smarthomefamilyverrips commented 1 month ago

Working again here also, did restart integration from event log drop down menu, got a new verification code, submitted code and worked.

johhiq commented 1 month ago

Same for me.

1192410 commented 1 month ago

The iCloud integration is also working again. Did Apple roll back something?

rononline commented 1 month ago

The iCloud integration is also working again. Did Apple roll back something?

Looks like it!

GLG9 commented 1 month ago

Sry, but not for me

NR3Y commented 1 month ago

Hmmm. The problems still remain for me, even after restarting both HA and reloading the Integration. (Claims Invalid username/password, but they ARE correct as I can log in with them on a web browser.) What other steps do I need to take?

Remcovf commented 1 month ago

Works for me! Netherlands BTW ☺️

happy-chap commented 1 month ago

Can confirm, still not working for me either after restart or manual request for a new verification code. I'm UK based (if Apple are rolling back/making changes by region).

GLG9 commented 1 month ago

I'm from germany and it isn't working for me

1192410 commented 1 month ago

Can confirm, still not working for me either after restart or manual request for a new verification code. I'm UK based (if Apple are rolling back/making changes by region).

I’m located in Germany. I did nothing. iCloudv3 just started working again. I have the iCloud Integration only running on my stage environment. There the the iCloud integration was disabled and I just enabled it. After that, I had to provide username and password. Then the two factor authentication window popped up and I was able to login. Just as in the past, so nothing really new or different than a week ago.

catartica76 commented 1 month ago

I'm from italy and it isn't working

kf4hxu commented 1 month ago

Neither iCloud3 or iCloud Integration are working. Although the error in iCloud Integration is different. Before I was getting an unknown error, now it’s telling me the app-specific password is incorrect even though I just created a new app-specific password. iCloud3 is acting the same telling me Login Error, Other Error or iCloud is not Available which is the same. Thanks for all your efforts.

kf4hxu commented 1 month ago

BTW, I’m in the USA.

GerdRuetten commented 1 month ago

Germany ... after re-install with version v3.0.5.9 no problem, no error

lordexorr commented 1 month ago

While tracking started working for me, if I go to the iCloud3 logs I still see that it's failing to login and if I try to force a login or ask for a new verification code it doesn't work (I never get a code). For those that think it's working I still think it's somewhat broken. Let's wait for a fixed release.

GerdRuetten commented 1 month ago

i can see the login in the iCloud3-Log

image
AlWorms commented 1 month ago

I'm in NZ and it does report I've logged in... but I can't go past that point as I'm not at home and only have limited access where I am, currently.

HOWEVER: I FOREVER have issues with Apples stupid system and trying to login (Not with this integration - with pretty well everything).

We may just have to wait a bit more, while they sort their crap out in the background, while not communicating anything.

On the other hand: THANKS SO MUCH for you guys here, putting in all the effort to overcome the AppleCrap :-)

gaato77 commented 1 month ago

not working for me. still getting this Screenshot_1

executed commented 1 month ago

Reproducible on v3.0.5.8 Country: Germany Config Wizard Error: Login Error, Other Error or iCloud is not Available Log: AUTHENTICATING iCloud Account Access, (de..........@gm.......), config Authenticating account (de..........@gm.......) with token AUTHENTICTION NEEDED, Status Code -- 421 iCloud Account Verification Code may be needed (421) PyiCloudAPIResponseException.authenticate_with_password > Password is not valid, Error-Could not connect to iCloud Location Servers (Error Code 503), 2fa Needed-False Error logging into iCloud service:

marcel-eugel commented 1 month ago

I'm from the netherlands and it isn't working for me😔

gcobb321 commented 1 month ago

Since there has been no changes to iCloud3 and Apple operates servers everywhere, some either have not been updated or Apple rolled them back. Until I get the new code integrated into iCloud3, the problem still exists.

I spent yesterday working on it and have not been successful. I can log into my account stand alone but not under HA. Maybe today will be successful.

cedricdelecole commented 1 month ago

I confirm from Belgium also not ok (just in case) :

image

bastero commented 1 month ago

Thanks for you efforts to resolve, it can’t be easy 👍🏽.Sent from my iPhoneOn Oct 23, 2024, at 1:22 AM, Gary Cobb @.***> wrote: Since there has been no changes to iCloud3 and Apple operates servers everywhere, some either have not been updated or Apple rolled them back. Until I get the new code integrated into iCloud3, the problem still exists. I spent yesterday working on it and have not been successful. I can log into my account stand alone but not under HA. Maybe today will be successful.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

billraff commented 1 month ago

Like others here the integration mysteriously started working again at some point yesterday. I am in the US. This morning though after a restart of the server the login issue has returned.

maxm77-RC commented 1 month ago

Seems to be working again for me too - in the UK.

Max Mlinaric 07931 505 330

On Wed, Oct 23, 2024 at 12:34:18, billraff < @.*** > wrote:

Like others here the integration mysteriously started working again at some point yesterday. I am in the US. This morning though after a restart of the server the login issue has returned.

— Reply to this email directly, view it on GitHub ( https://github.com/gcobb321/icloud3_v3/issues/341#issuecomment-2431818284 ) , or unsubscribe ( https://github.com/notifications/unsubscribe-auth/BLCVEZJTUYG7YUXZRT7S5U3Z46CTVAVCNFSM6AAAAABQGYQPE6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMZRHAYTQMRYGQ ). You are receiving this because you commented. Message ID: <gcobb321/icloud3_v3/issues/341/2431818284 @ github. com>

GerdRuetten commented 1 month ago

OK ... today the login into my apple account from the integration is broken again

poudenes commented 1 month ago

Reinstall didn't do the trick:

Login Error, Other Error or iCloud is not Available

Netherlands here

gcobb321 commented 1 month ago

OK. OK. We understand you are having a problem. As I said, a while back, the cause is Apple switched to Secure Remote Password and it broke everything. Until I update iCloud3, you are going to have problems logging in. If it works once, that doesn't mean it will work the next time.