home-assistant / core

:house_with_garden: Open source home automation that puts local control and privacy first.
https://www.home-assistant.io
Apache License 2.0
71.13k stars 29.81k forks source link

Integrations asks app-specific password but only accepts the account password. #124191

Open Wolk9 opened 3 weeks ago

Wolk9 commented 3 weeks ago

The problem

The dialog asks for an app specific password, but in reality it only accepts the password from your iCloud account. Either the authentication should be rewritten, or the UI should ask for the right thing.

What version of Home Assistant Core has the issue?

core-2024.8.2

What was the last working version of Home Assistant Core?

No response

What type of installation are you running?

Home Assistant OS

Integration causing the issue

iCloud

Link to integration documentation on our website

No response

Diagnostics information

No response

Example YAML snippet

No response

Anything in the logs that might be useful for us?

No response

Additional information

No response

home-assistant[bot] commented 3 weeks ago

Hey there @quentame, @nzapponi, mind taking a look at this issue as it has been labeled with an integration (icloud) you are listed as a code owner for? Thanks!

Code owner commands Code owners of `icloud` can trigger bot actions by commenting: - `@home-assistant close` Closes the issue. - `@home-assistant rename Awesome new title` Renames the issue. - `@home-assistant reopen` Reopen the issue. - `@home-assistant unassign icloud` Removes the current integration label and assignees on the issue, add the integration domain after the command. - `@home-assistant add-label needs-more-information` Add a label (needs-more-information, problem in dependency, problem in custom component) to the issue. - `@home-assistant remove-label needs-more-information` Remove a label (needs-more-information, problem in dependency, problem in custom component) on the issue.

(message by CodeOwnersMention)


icloud documentation icloud source (message by IssueLinks)

gilperme commented 3 weeks ago

I can confirm that behavior described by OP is the same for me.

Here's my setup:

Core 2024.8.2 Supervisor 2024.08.0 Operating System 13.1 Frontend 20240809.0

oceanice commented 3 weeks ago

I have the same problem. If I try to set this up with an app specific password then my IOS device does not pop up the screens for generating the pin code, so you are unable to complete the registration in the HA integration GUI. If I use the account password, then I do get the pop up on the IOS device and can obtain the code to enter into the integration GUI.

Here's my setup

Core 2024.8.2 Supervisor 2024.08.0 Operating System 13.1 Frontend 20240809.0

Thanks

CarlosMunozT commented 3 weeks ago

same here, i can't login in integration

Mowgly1977 commented 2 weeks ago

Stesso problema per me, inoltre mi continuano ad arrivare sui dispositivi richieste di configurazione tramite accesso.

markus99 commented 2 weeks ago

Same issue here. Asks for app specific password, have to enter account pw.

jayjay3108 commented 2 weeks ago

same problem here

denis1994 commented 3 days ago

Same here and I receive periodically emails that my apple id is used to login by a browser which is annoying. And a security risk because a real email from another login which is not from the integration can be overlooked.

svalcken commented 3 days ago

Today I got the messages again about the regularly appearing 2-factor authorization. The app password is accepted, but the 2-factor authorization from icloud does not appear. The account password was accepted, but the 2-factor authorization was not accepted. After restarting, the integration it works again. It's getting annoying. Can this please be solved properly? Unfortunately, I'm not the only one. But I can't help with the development either, because I don't know enough about the authorization process. I've already deleted the icloud folder under .storage and that doesn't help with the actual solution, it just makes it work again as a workaround. Thank you very much.

Additional my home Assistant is the 2024.9.1

Juanpermon commented 1 day ago

App password is not accepted. Already tried deleting the .storage\icloud folder.

Core 2024.9.1 Supervisor 2024.08.0 Operating System 13.1 Frontend 20240906.0

Eniste1 commented 12 hours ago

same here

Niek commented 12 hours ago

Same issue - app-specific password not accepted, regular password accepted but doesn't show any devices/entities.

Juanpermon commented 1 hour ago

Keeps happening on HA 2024.09.1. App password not accepted.

Niek commented 1 hour ago

What seems to work is: log in with regular password, delete the integration, add it again and log in again with app-specific password. Far from ideal though (I'm also getting spammed with security emails).

Juanpermon commented 1 hour ago

I don't feel OK typing my Apple ID password outside Apple ecosystem :S

Eniste1 commented 1 hour ago

Core 2024.9.1 Supervisor 2024.09.1 Operating System 13.1 Frontend 20240906.0

rejoiced too soon...

Brief status report from my side:

After updating to 2024.9.1, app-based login (app-specific login) was initially possible. - So far so good

But then the spam flood of mails started again - (Your Apple ID was used to log in to iCloud via a web browser)

In addition, there were now constant 2-factor authentication queries on the iPhone directly (which of course could not be entered or confirmed anywhere in the Home Assistant).

I will unfortunately have to temporarily uninstall the iCloud integration