Closed LioBoul closed 2 weeks ago
@Ghawken
I’m not sure where the itc_service_key (str): The Apple ITC service key
comes from. Is it the same as the token_key
? Or just a long made up string like the one you are using that can be the same for everyone.
I just dug through the SRP info to get an understanding of what is going on and now see what the Fastline and your code is doing. I’ll check out your code with my modded Pyicloud later and compare it with the Fastline code I converted from Ruby later today. It’s 4:24am and I should really be in bed.
@gcobb321
Sorry - removed itc_service_key - was a widgetKey equivalent - but old WidgetKey seems to be expired.
Updated gist - removing the CustomUser - although not sure this is won't be needed.
Trying to see if can maximise use of library without changes before giving up on it
Issue is Ruby SRP Library allows sending hex for everything and encrypting password. This Python library does not that I can easily see.
There is a good summary here of the issues attempting SRP between 2 systems. Multiple variables. https://crypto.stackexchange.com/questions/18528/implementation-and-testing-of-srp-6a
The GIST code can be run in start alone python IDLE (just copy and paste) - and see if works - DOES not for me, which I presume comes down to the m1 m2 calculation... (needs srp library pip installed..) Believe I have added all the correct headers etc.
Edit: Not sure what this below picture is supposed to show/help.
same problem here
+1
the Same Problem here.
Core 2024.10.1 Supervisor 2024.10.2 Operating System 13.2 Frontend 20241002.2
is there any Solution in this community?
is there any Solution in this community?
If you read the posts before yours, you'll see there is a (volunteer!) team working on it. It looks like a non-trivial fix, so lets give them time and space.
is there any Solution in this community?
If you read the posts before yours, you'll see there is a (volunteer!) team working on it. It looks like a non-trivial fix, so lets give them time and space.
And let's stop tagging with new replies, please. Just Subscribe
to this issue and you'll receive updates without bumping every single other person watching it.
THANKS FOR LETTING ME KNOW THAT YOU ARE ALSO SEEING THE PROBLEM BUT THAT IS NOT NECESSARY. Everyone is having this problem, including the HA iCloud integration, people that use the Python Pyicloud interface and many other apps all around the world.
Apple changed to a new protocol to verify an account password where a secure hash key is passed from the client (iCloud3) to the Apple servers instead of the password. It is called Secure Remote Password. It is a complicated handshake involving a lot of back-and-forth between the client and Apple. It is working on one Ruby program we know of and we are working to port that to Python. Until it is complete, tested and implemented, you are going to have to use the Mobile App to locate your devices.
I’ll let you know when it is ready. Stay tuned.
@Ghawken A wasted day for me. Xfinity finally restored internet service at 3:30pm. They are still working on repairs after Hurricane Milton went through the area last week and tore things up.
Post any changes/progress you have made and I will be able to get into it tomorrow. I did get the last posted code running with a 401. But, as I understand it, you are looking for a 409 or 200
@gcobb321 Thats no good.
I've rewritten a SRP library as I believe it is the library introducing aspects don't really want bytes/int/hex encoding differences. Have that internally verifying hashs and m1,m2 etc.
Working on testing with apple results with it - hopefully not a dead end...
I'll update the GIST when done. So far I have created a rapid apple account locking code set...
@gcobb321 Thats no good.
I've rewritten a SRP library as I believe it is the library introducing aspects don't really want bytes/int/hex encoding differences. Have that internally verifying hashs and m1,m2 etc.
Working on testing with apple results with it - hopefully not a dead end...
I'll update the GIST when done. So far I have created a rapid apple account locking code set...
Yes, according to what I read on fastlane, Apple uses some custom implementation of SRP - from my understanding snatchev modified a standard ruby SRP library to match Apple's spec in his 4 commits here: https://github.com/snatchev/sirp/commits/master/ So that might be a useful reference for checking which parts of Apple's SRP are non-standard.
Take a break, nobody dies :)
I have managed to fix the authentication in another project that forks pyicloud. See commit https://github.com/icloud-photos-downloader/icloud_photos_downloader/commit/4bcb2ac46a585205cbf3886b3df78179b34b18b1
I took @Ghawken 's commit as a reference while working on this. Huge thanks to the work!
The trick is to call
srp.rfc5054_enable()
srp.no_username_in_x()
so that the algorithm meets what fastlane
is using, and it is not necessary to rewrite the SRP library.
Hope this helps :>
@iowk Thank you very much for posting this! I think the credit is all yours!
Yah! Can confirm that works in python!
@iowk Thank you. I really appreciate your efforts in getting this solved.
@iowk Thank you very much for posting this! I think the credit is all yours!
Yah! Can confirm that works in python!
Hello, Can you explain what you change and where you change to fix this issue in icloud v3 integration? Thanks
@Rulles06 I will be updating iCloud3 v3 today and issuing a new release when it is ready.
Thanks for the hard work
for me it's working again without a new release?!
It's ok for me. I restarted my HA and upon restart, apple sent me a new verification code. Code inserted and everything is ok. No need to update iCloud v3. Big thanks to those who worked on this bug!! 🤗
Das gleiche bei mir, läuft wieder alles !! Danke
Working again here also, did restart integration from event log drop down menu, got a new verification code, submitted code and worked.
Same for me.
The iCloud integration is also working again. Did Apple roll back something?
The iCloud integration is also working again. Did Apple roll back something?
Looks like it!
Sry, but not for me
Hmmm. The problems still remain for me, even after restarting both HA and reloading the Integration. (Claims Invalid username/password, but they ARE correct as I can log in with them on a web browser.) What other steps do I need to take?
Works for me! Netherlands BTW ☺️
Can confirm, still not working for me either after restart or manual request for a new verification code. I'm UK based (if Apple are rolling back/making changes by region).
I'm from germany and it isn't working for me
Can confirm, still not working for me either after restart or manual request for a new verification code. I'm UK based (if Apple are rolling back/making changes by region).
I’m located in Germany. I did nothing. iCloudv3 just started working again. I have the iCloud Integration only running on my stage environment. There the the iCloud integration was disabled and I just enabled it. After that, I had to provide username and password. Then the two factor authentication window popped up and I was able to login. Just as in the past, so nothing really new or different than a week ago.
I'm from italy and it isn't working
Neither iCloud3 or iCloud Integration are working. Although the error in iCloud Integration is different. Before I was getting an unknown error, now it’s telling me the app-specific password is incorrect even though I just created a new app-specific password. iCloud3 is acting the same telling me Login Error, Other Error or iCloud is not Available which is the same. Thanks for all your efforts.
BTW, I’m in the USA.
Germany ... after re-install with version v3.0.5.9 no problem, no error
While tracking started working for me, if I go to the iCloud3 logs I still see that it's failing to login and if I try to force a login or ask for a new verification code it doesn't work (I never get a code). For those that think it's working I still think it's somewhat broken. Let's wait for a fixed release.
i can see the login in the iCloud3-Log
I'm in NZ and it does report I've logged in... but I can't go past that point as I'm not at home and only have limited access where I am, currently.
HOWEVER: I FOREVER have issues with Apples stupid system and trying to login (Not with this integration - with pretty well everything).
We may just have to wait a bit more, while they sort their crap out in the background, while not communicating anything.
On the other hand: THANKS SO MUCH for you guys here, putting in all the effort to overcome the AppleCrap :-)
not working for me. still getting this
Reproducible on v3.0.5.8 Country: Germany Config Wizard Error: Login Error, Other Error or iCloud is not Available Log: AUTHENTICATING iCloud Account Access, (de..........@gm.......), config Authenticating account (de..........@gm.......) with token AUTHENTICTION NEEDED, Status Code -- 421 iCloud Account Verification Code may be needed (421) PyiCloudAPIResponseException.authenticate_with_password > Password is not valid, Error-Could not connect to iCloud Location Servers (Error Code 503), 2fa Needed-False Error logging into iCloud service:
I'm from the netherlands and it isn't working for me😔
Since there has been no changes to iCloud3 and Apple operates servers everywhere, some either have not been updated or Apple rolled them back. Until I get the new code integrated into iCloud3, the problem still exists.
I spent yesterday working on it and have not been successful. I can log into my account stand alone but not under HA. Maybe today will be successful.
I confirm from Belgium also not ok (just in case) :
Thanks for you efforts to resolve, it can’t be easy 👍🏽.Sent from my iPhoneOn Oct 23, 2024, at 1:22 AM, Gary Cobb @.***> wrote: Since there has been no changes to iCloud3 and Apple operates servers everywhere, some either have not been updated or Apple rolled them back. Until I get the new code integrated into iCloud3, the problem still exists. I spent yesterday working on it and have not been successful. I can log into my account stand alone but not under HA. Maybe today will be successful.
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>
Like others here the integration mysteriously started working again at some point yesterday. I am in the US. This morning though after a restart of the server the login issue has returned.
Seems to be working again for me too - in the UK.
Max Mlinaric 07931 505 330
On Wed, Oct 23, 2024 at 12:34:18, billraff < @.*** > wrote:
Like others here the integration mysteriously started working again at some point yesterday. I am in the US. This morning though after a restart of the server the login issue has returned.
— Reply to this email directly, view it on GitHub ( https://github.com/gcobb321/icloud3_v3/issues/341#issuecomment-2431818284 ) , or unsubscribe ( https://github.com/notifications/unsubscribe-auth/BLCVEZJTUYG7YUXZRT7S5U3Z46CTVAVCNFSM6AAAAABQGYQPE6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMZRHAYTQMRYGQ ). You are receiving this because you commented. Message ID: <gcobb321/icloud3_v3/issues/341/2431818284 @ github. com>
OK ... today the login into my apple account from the integration is broken again
Reinstall didn't do the trick:
Login Error, Other Error or iCloud is not Available
Netherlands here
OK. OK. We understand you are having a problem. As I said, a while back, the cause is Apple switched to Secure Remote Password and it broke everything. Until I update iCloud3, you are going to have problems logging in. If it works once, that doesn't mean it will work the next time.
Since update HA core-2024.10.3, I have a error message : "Warning: iCloud Account is not Logged Into" or "Login Error, Other Error or iCloud is not Available" If I request a new 6 digits code verification, nothing happens :-( Any idea ???