majd / ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
MIT License
5.93k stars 498 forks source link

Subcommand `purchase` is broken #284

Open spargelz opened 4 months ago

spargelz commented 4 months ago

What happened?

Hey, when I try to use the command ipatool download 672904239 -b com.thehungrywasp.iamsober --purchase I get the error from the title. When I use it without the --purchase it tells me ERR error="license is required" success=false

Version

2.1.4

Relevant log output

ERR error="failed to purchase item with param 'STDQ': failed to purchase app" success=false
cuiyonghua commented 4 months ago

You need to use the --purchase flag in the download command to acquire a license.

isaac960623 commented 3 months ago

same here, did you solve this problem?

spargelz commented 3 months ago

No, had my father get the ipa since he has a developer account (didnt know that he has one)

IsaacKaKit @.***> schrieb am Mi., 21. Aug. 2024, 09:31:

same here, did you solve this problem?

β€” Reply to this email directly, view it on GitHub https://github.com/majd/ipatool/issues/284#issuecomment-2301340617, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZFAYIFMF4ITVGNKK4SQYJTZSQ663AVCNFSM6AAAAABLFMLFCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMBRGM2DANRRG4 . You are receiving this because you authored the thread.Message ID: @.***>

Coderus-Robin commented 3 months ago

Started seeing this issue occur across multiple accounts as of today

und3fined commented 3 months ago

@majd can you check this? Problem in today

nikmoon commented 3 months ago

I have this problem too.

panderman commented 3 months ago

+1

fengyunyongjie commented 3 months ago

+1

haozi5205 commented 3 months ago

I have this problem too.

ivanhjel commented 3 months ago

Same, worked fine yesterday.

VladislavTitov commented 3 months ago

samee

crowbait commented 3 months ago

Same, tried up to 4 versions downgrade, didn't help

iteroji commented 3 months ago

This is not a bug in the ipatool I experience the same failure in a tool that I develop, looks like something changed in the purchase endpoint of the app store. I didn't have the time to look into it. If anyone figures out don't be shy to share πŸ˜€

crowbait commented 3 months ago

This is not a bug in the ipatool I experience the same failure in a tool that I develop, looks like something changed in the purchase endpoint of the app store. I didn't have the time to look into it. If anyone figures out don't be shy to share πŸ˜€

Still it necessitates an update to ipatool's codebase.

hzlzh commented 3 months ago

+1 It still isn't working here. Have you found the reason?

crowbait commented 3 months ago

I implore you, please look into this. Ipatool seems to be the only way to get apps on very old devices (apparently, if you already have an app on your account, AppStore will allow you to download the last version of that app compatible with your iOS version). So, without ipatool to at least get some apps onto this device, the only thing I have is a safari version so terribly old it won’t even display reddit.

Jackie11911 commented 3 months ago

+1 can anybody solve this problem?

0x090909 commented 3 months ago

doesnt work

iteroji commented 2 months ago

+1 can anybody solve this problem?

I fear the issue is that Apple restricted purchasing via the API to Business Manager accounts. I don't currently have one of those accounts, if anyone does, it would be great to test it

Lakr233 commented 2 months ago

This situation is likely caused by the population of Asspp, a tool I developed to support multiple App Store accounts for non-jailbroken iOS users. It comes with an on-device installer that perfectly replaces the App Store for free apps. I had stopped further maintenance on this project, but the fork Asspp-Bingo from CyPwn and Asspp-Pro from someone else is still making great use of it.

As a result, the app’s installation numbers have exceeded my expectations, and Apple is probably working on migrations to prevent such apps from existing.

I have doubts about whether anyone will publicly release a reverse-engineered API from iTunes. If they do, Apple may ban it again, making it not worth the effort.

The current solution may be to use the iTunes header from @[NyaMisty]. He/she wrote a frida server for reading the security header from iTunes. One of the developers has reported that if the KeyBag header exists, the MZBuy endpoint will work with it. Have a look at https://github.com/NyaMisty/action-ipadown.

dimitrovdv commented 2 months ago

will there be a fix or will the project no longer be supported?

coderjingluo commented 2 months ago

No, had my father get the ipa since he has a developer account (didnt know that he has one) IsaacKaKit @.> schrieb am Mi., 21. Aug. 2024, 09:31: … same here, did you solve this problem? β€” Reply to this email directly, view it on GitHub <#284 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZFAYIFMF4ITVGNKK4SQYJTZSQ663AVCNFSM6AAAAABLFMLFCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMBRGM2DANRRG4 . You are receiving this because you authored the thread.Message ID: @.>

Can you help download the ipa file of Apple Wallet above ios17.6.1? If you can download it, contact by email: a2940486559@gmail.com

itstalon commented 2 months ago

Hello all, This issue persists on my end as well. I've spent a good 3-4 hours todays trying to manipulate the commands, as well as find others with the same issue. This seems to be the best place that others have stated the issue. Hoping there is a light at the end of the tunnel.

Is this something that Apple has blocked or made it harder for third-party tools to obtain the licenses? My main issues is, not being able to obtain the license in order to proceed with the download.

MacOS 13.6.9 IPATool v2.1.4

Sicksyg commented 2 months ago

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

coderjingluo commented 2 months ago

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

Sicksyg commented 2 months ago

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

Depends on why you are using the tool for. If you have access to a device with a working App Store, connected to your AppleID, you can download the app from there to have the licence. After obtaining the licence you can download it with the tool as many times as you want.

I am not sure how it works, but if the app is available in the MacOS App Store, i have had success with obtaining the licence there (by downloading the app), however this only works if you are using the same AppleID.

itstalon commented 2 months ago

I hate to ask, are there any other tools like IPATool that do the same thing? I personally utilize IPATool to download IPA files and assess them on MobSF. I really do not want to go the jailbreak, bootleg, or webstores route for files as I'm not looking to voluntarily download malware right now. Open to any suggestions.

itstalon commented 2 months ago

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

Depends on why you are using the tool for. If you have access to a device with a working App Store, connected to your AppleID, you can download the app from there to have the licence. After obtaining the licence you can download it with the tool as many times as you want.

I am not sure how it works, but if the app is available in the MacOS App Store, i have had success with obtaining the licence there (by downloading the app), however this only works if you are using the same AppleID.

@Sicksyg I verified your finding. With the problem of not being able to purchase directly from IPATool (assuming an API is broken or something), if you're able to sign in with your iCloud / AppleID account that is used on an iPad/iPhone, you're able to download the app on your phone and obtain the license. I confirmed this by signing into IPATool with my iCloud/AppleID.

Using this mitigation, hoping temporarily, you're able to successfully search > "purchase" > download the files you need from Apple App Store.

dimitrovdv commented 2 months ago

will the project no longer work?

pizzas4uce commented 2 months ago

does there exist any other possible way to purchase iPad apps to my Apple ID? i want to purchase iPad apps to my Apple ID because of the recent Nugget exploit that allows iPad apps in iPhones, but i don't own any iPads.

MikePendo commented 2 months ago

same here unfortunately

crowbait commented 2 months ago

does there exist any other possible way to purchase iPad apps to my Apple ID? i want to purchase iPad apps to my Apple ID because of the recent Nugget exploit that allows iPad apps in iPhones, but i don't own any iPads.

If you're on Windows, search for and install iTunes 12.6.5.3 . It's the last version that had an App Store built in and you can use it to purchase iPhone and iPad apps.

DargonLee commented 2 months ago

I have this problem too.

ilgrandeanonimo commented 2 months ago

Same problem :(

crowbait commented 2 months ago

Please read the thread before commenting.

If @Lakr233 is right, everyone will have this problem. No one can fix it. If Apple really removed the option to purchase app via the API, then ipatool is gone.

If your specific use case was using IPA tool to purchase apps so you can download them on old devices, use this approach:

If you're on Windows, search for and install iTunes 12.6.5.3 . It's the last version that had an App Store built in and you can use it to purchase iPhone and iPad apps.

Spamming "Same problem" isn't going to change anything except drown out any potential messages which might actually be helpful.

AegeanYan commented 2 months ago

No, had my father get the ipa since he has a developer account (didnt know that he has one) IsaacKaKit @.> schrieb am Mi., 21. Aug. 2024, 09:31: … same here, did you solve this problem? β€” Reply to this email directly, view it on GitHub <#284 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZFAYIFMF4ITVGNKK4SQYJTZSQ663AVCNFSM6AAAAABLFMLFCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMBRGM2DANRRG4 . You are receiving this because you authored the thread.Message ID: @.>

I registered a Developer Account for this today, but it does not help. Seems Developer Account is not a solution. Please check that, maybe I left out sth. This tool seems cannot download not purchased apps for anyone any more.

jshchnz commented 2 months ago

Based on reading the comments I'm a bit unsure if this is a fixable problem, but I'd love to donate to try to find a solution here. @majd tried to find a way to support you on Github but couldn't 😬

majd commented 1 month ago

Unfortunately, I am not aware of what might have broken the purchase command nor of any alternatives at the moment. I will post an update to this issue in case I find any workaround.

tovkal commented 1 month ago

What is the underlying error with the purchase command? Could it be related to the recent deployment by Apple of changes related to Auth with SRP?

Here are other projects affected and their solutions:

https://github.com/XcodesOrg/XcodesApp/issues/630 https://github.com/fastlane/fastlane/pull/26415

Lakr233 commented 1 month ago

No. Purchase endpoint is different from sign in. You have directory service ID so you can download apps, but you need something call AMSAnisette so you can purchase apps. AMSAnisette is tied to device and is provided by itunesstored on your iPhone.