python - setup.icloud.com two-step verification -



python - setup.icloud.com two-step verification -

i'm playing around iloot, open source app let's download icloud backups , wondering how possible implement 2 factor authentication it.

i have 2fa enabled on business relationship , on first request this:

first request:

auth = "basic %s" % base64.b64encode("%s:%s" % (login, password)) authenticateresponse = plist_request("setup.icloud.com", "post", "/setup/authenticate/$apple_id$", "", {"authorization": auth})

plist_request normal python (request) function request url , returns parsed xml.

first response (in xml format):

<?xml version="1.0" encoding="utf-8" standalone="yes"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/propertylist-1.0.dtd"> <plist version="1.0"> <dict> <key>protocolversion</key> <string>2</string> <key>title</key> <string>verification required</string> <key>localizederror</key> <string>mobileme_terms_of_service_update</string> <key>message</key> <string>this apple id protected two-step verification. sign in, must verify identity.</string> </dict> </plist> request /setup/authenticate/$apple_id$ returned code 409

in case knows next phone call input two-step verification code, help figure out.

i'm ios guy, not backend guy, backend team solved on side using app-specific password, instead of tokens.

this how user can generate app-specific password: generate app-specific password

then utilize email , password, instead of token formed dsprsid:mmeauthtoken. learnt teammates, don't have base64 encode, utilize new password, , url:'https://caldav.icloud.com/'

hope helps. nightmare us, no help @ on internet.

update

for more info, these steps used on side (ios):

i phone call https://setup.icloud.com/setup/authenticate/"email@email.com", setting "basic email:password" base64 string "authorization" http header field.

i check response status code. if 401, means password sending app specific password, send password (and email) straight server, via our internal api, , using phone call icloud apis, , homecoming me calendars, etc.

if response status code 409, means user tried login normal password, business relationship enabled 2fa, , display error, warning user go , retrieve app-specific-password, , utilize one, lead step 2, above.

i not saying way, worked me. also, don't know what's going on on server side, using straight app-specific-passwrod (and email), job.

python ios apple backup icloud

Comments

Post a Comment

Popular posts from this blog

php - Edges appear in image after resizing -

php - Edges appear in image after resizing - i have implemented next function: private static function generatepicture($sizekey, $src, $initialwidth, $initialheight, $imagetype) { $destination = adimage::addsizekey($sizekey, $src); if (file_exists($destination)) { return; } $finalsize = adimage::$sizes[$sizekey]; $initialratio = $initialwidth / $initialheight; $finalratio = $finalsize["w"] / $finalsize["h"]; $newimage = imagecreatetruecolor($finalsize["w"], $finalsize["h"]); imagealphablending( $newimage, false ); imagesavealpha( $newimage, true ); $oldimage = imagecreatefromstring(file_get_contents($src)); if ($initialratio >= $finalratio) { $scale = $finalsize["h"] / $initialheight; $surpluss = abs($initialwidth - ($initialheight * $finalratio)); imagecopyresized($newimage, $oldimage, 0, 0, $surpluss / 2, 0, $finalsize["w"], $finalsize[&q
Read more

ios8 - iOS custom keyboard - preserve state between appearances -

ios8 - iOS custom keyboard - preserve state between appearances - i'm having performance problems custom keyboard i'm working on. loading words in spell correction tree takes quite bit of time. seems done each time keyboard appears - there way preserve state of keyboard? apps can suspend / resume etc - can't find documentation on how extensions, or if there's mechanism doing att all. thanks! you loading dictionary net or disk? first case nsuserdefaults, encoding (nscopying) options store info. can load in background. according docs, os typically kills extension process, so, think there no way prevent keyboard objects deallocation (you may utilize nskeydarchiver). ios8 ios-app-extension custom-keyboard
Read more

Delphi change the assembly code of a running process -

Delphi change the assembly code of a running process - i'm trying alter address 00741fa5 has push test.009e721c . alter push test.009e71c8 . procedure callback; asm force $9e71c8 end; procedure tform2.btn1click(sender: tobject); var ppid :dword; pprocess : cardinal; begin getwindowthreadprocessid(findwindow(nil,pchar('test')), @ppid); pprocess := openprocess(process_all_access, false, ppid); injectasm(pprocess, $741fa5, 10, integer(@callback), 0); end; here injectasm function (with error checking) function injectasm(process: longword; injectaddress, injectsize, codeaddress, codesize : integer): pointer; var csize, rsize : integer; replaced : array of byte; jmp : array [0..4] of byte; jmpaddress : integer; nopv : byte; : integer; nbr: ulong_ptr; begin //injectsize must equal or greater 5, because need space our //(far) jmp wwxxyyzz instruction //if there's no space, inject in place of few instructions if injectsize &
Read more