I can't sign in with my Apple ID

[alpennec]

Describe the bug
I try to sign in with my email address and password.

To Reproduce
Steps to reproduce the behavior: try to sign in within the app (Settings)

Expected behavior
I should receive a 2FA request on an associated device

Screenshots
If applicable, add screenshots to help explain your problem.

Version

• OS: macOS
• Xcodes: 2.3.0 (28)

[paytontech]

same issue here

[flynncupitt]

Also having the same issue with the same error

[utamori]

me too

[MattKiazyk]

Looks like the sign in URL's are getting 503's now...

https://idmsa.apple.com/appleauth/auth/signin } { Status Code: 503, Headers {
    Connection =     (
        "keep-alive"
    );
    "Content-Length" =     (
        190
    );
    "Content-Type" =     (
        "text/html"
    );
    Date =     (
        "Sat, 19 Oct 2024 02:10:35 GMT"
    );
    Server =     (
        Apple
    );
} }

[alpennec]

This is something I observed too while using another library using the same URL to sign in to an Apple account. Is it possible Apple changed something to prevent these kind of logins? Is there a new way to do that now?

[vincentzchao]

same issue

macOS Sonoma 14.7 (23H124)
Xcodes: 2.3.0 (28)

[dfed]

Welp. Same.

[SoftMochii]

Same issue here

[jingfelix]

Same. Thought I was blocked by Apple 😅

[thierryH91200]

Same issue

[stnor]

Yup same here
sudo xcodes install 12.5.1

The operation couldn’t be completed. (DecodingError.dataCorrupted(Swift.DecodingError.Context(codingPath: [], debugDescription: "The given data was not valid JSON.", underlyingError: Optional(Error Domain=NSCocoaErrorDomain Code=3840 "Unexpected character '<' around line 1, column 1." UserInfo={NSDebugDescription=Unexpected character '<' around line 1, column 1., NSJSONSerializationErrorIndex=0}))))

[vv-m]

I have tried version 2.1 and 2.2 - the issue is same.

[alpennec]

At this point, I don't think authentication within the app will work again until the new authentication method used by Apple is cracked. Some progress in the fastlane issue here.

[nolann-dev]

Same issue

[dmisav]

same here

Sonoma 14.1.1
Xcodes: 2.3.0

[MattKiazyk]

Hey everyone. Please be patient as I work through the changes to log in.

It is effecting everyone regardless of version or OS so no need for any extra comments.

Workaround is to log into developer.apple.com and download it manually. Runtimes do not require logins so those will still work.

[hzlzh]

same here

[mgreenbin]

I don't kmow if this helps, but it worked on Oct 18th on a Macbook Pro running Sequoia 15.01 but not on Oct 19th on a Macbook Pro running Sonoma 14.5.

[stnor]

I don't kmow if this helps, but it worked on Oct 18th on a Macbook Pro running Sequoia 15.01 but not on Oct 19th on a Macbook Pro running Sonoma 14.5.

It's apparently related to a change in Apple's authentication apis.

[shainmack]

Same issue, following for resolution

[Stp155906]

SAME ISSUE.

[davedelong]

For reference, Fastlane just came out with a new authentication approach to address this.

[farooqaziz20]

Same issue, Please update when this can be resolved.

[pastorin]

same issue - following

[smardine]

Is there any work around to install greater versions without needing to login?

You can go to https://developer.apple.com/download/all/?q=xcode and download manually the version, once installed, the new version will appear as downloaded in xcodes app

[glunaTractian]

Is there any work around to install greater versions without needing to login?

You can go to https://developer.apple.com/download/all/?q=xcode and download manually the version, once installed, the new version will appear as downloaded in xcodes app

Tho if you have installed the latest MacOS Sequoia and Xcode version, you'll probably stumble onto this

Now I'm stuck on Xcode 16

[smardine]

Is there any work around to install greater versions without needing to login?

You can go to https://developer.apple.com/download/all/?q=xcode and download manually the version, once installed, the new version will appear as downloaded in xcodes app

Tho if you have installed the latest MacOS Sequoia and Xcode version, you'll probably stumble onto this

Now I'm stuck on Xcode 16

I'm being able to Switch to 15.4 xcodes version, but from xcodes.app

[fiznool]

Great to hear that this is being actively worked on. Whilst I'm not able to contribute directly to this effort, I was wondering on a slightly different approach to the ones already mentioned.

There is a swift-srp package that has already implemented SRP to the spec, and is packaged up in an easy-to-use format. As I understand it, the iCloud SRP implementation deviates slightly from this spec, but the library should get us most of the way there - to make the necessary modifications, we can then draw inspiration from some other implementations in different languages, for example js-srp-gsa. I feel like leaning on an already-existing implementation is a safer way to introduce the necessary crypographic changes, as it is best practice to reuse rather than reimplement in this specific domain of crypto.

It seems that the folks at fastlane have done something similar and wrapped this into a gem fastlane-srp. Perhaps the same approach could be taken here, so a reusable library could be produced for both the Xcodes app and CLI?

[itsthejb]

Is there any work around to install greater versions without needing to login?

You can go to https://developer.apple.com/download/all/?q=xcode and download manually the version, once installed, the new version will appear as downloaded in xcodes app

Tho if you have installed the latest MacOS Sequoia and Xcode version, you'll probably stumble onto this

Now I'm stuck on Xcode 16

It's just a soft block. You can get it to run by setting the CFBundleVersion in 15.4's Info.plist to that of a supported version, e.g. Xcode 16. Very annoying aggressive upgrade push from Apple

This is unrelated to the issue with Xcode.app sign-in, though

[abiligiri]

Update: I cleaned up a bunch of the code and have a simple SRP client, but something still doesn't work. If anybody else wants to look. https://github.com/XcodesOrg/XcodesApp/tree/matt/SRPLogin

Should the PBKDF2 be on SHA256 hash of the password ?
See
private async derivePassword(protocol: "s2k" | "s2k_fo", password: string, salt: Uint8Array, iterations: number) { let passHash = new Uint8Array(await util.hash(srp.h, stringToU8Array(password)));
here https://github.com/foxt/js-srp-gsa/blob/main/README.md

and

https://github.com/fastlane/fastlane/blob/ec78d7d81a6a66e9e89fd29f6e0616d5ba09840a/spaceship/lib/spaceship/client.rb#L529

[rhysm94]

Is there any work around to install greater versions without needing to login?

You can go to https://developer.apple.com/download/all/?q=xcode and download manually the version, once installed, the new version will appear as downloaded in xcodes app

Tho if you have installed the latest MacOS Sequoia and Xcode version, you'll probably stumble onto this

Now I'm stuck on Xcode 16

If you launch the actual executable in Xcode using Terminal, you can (at least for the time being) run Xcode 15.4 on Sequoia.

[abiligiri]

I have two options to fix this

1. Add support for SRP Login #638 that switches to a different package for SRP login with some modifications
2. Fix SRP Login #639 keeps the swift-srp

I would prefer to merge the first one as that also has some test with sample username/password

[MattKiazyk]

I have two options to fix this

1. SRP Login works now #638 that switches to a different package for SRP login with some modifications
2. Fix SRP Login #639 keeps the swift-srp

I would prefer to merge the first one as that also has some test with sample username/password

AMAZING! Thank you!

I did a quick test and I can log in. I prefer as well #638 too and like #638 (comment) indicated, I can fork those changes into the XcodesOrg repo to reuse it.

The download still seems to be missing something, as it doesn't work, but this amazingly gets passed the SRP shenanigans.

I am eternally grateful. I'll be back later on tonight to hopefully figure the rest out!

[abiligiri]

Sounds good. Happy to help.

[MattKiazyk]

Before releasing to the masses - here is a zip of Xcodes with the changes from #638

If I could get some testers to give this a whirl and double check they can log in again and respond here that would be phenomenal

Note: This is the same version number as current release.

Xcodes.zip

[davedelong]

@MattKiazyk that build worked for me

[RiceGTSTW]

@MattKiazyk it worked!

[jsorge]

@MattKiazyk Worked for me too!

[abiligiri]

Works!

[MattKiazyk]

Thank you to everybody for quick testing and especially to @abiligiri for getting this over the finish line!

v2.4.0 has been released which includes this fix.

[ygee07]

Hi, I tried logging in using v2.4.0 but I'm getting this error:
"Invalid username and password combination."

Has anybody tested this macOS 15.2 ?

[Lakr233]

You probably need to logout and sign in inside settings.

[MattKiazyk]

From following along on fastlane issue for the SRP changes, a few people have had it not work. So there's a few things to try:

1. Make sure your email is all lowercase - some say that fixed it.
2. Actually log into developer.apple.com to make sure it works and Apple caches some things.

[ygee07]

I did try the following options with no avail:

1. Make sure email is all lowercase and no whitespace
2. Actually log into developer.apple.com in browser to make sure it works (works on browser).
3. Login through Xcodes Settings
4. Uninstall and Reinstall Xcodes
5. Use App-Specific Password

[smardine]

Installation of the new version on MacOS Sequoia 15.0.1 ok
authentication ok
Thanks sooo much

[KSemenenko]

it works perfect now! thanks a lot!

[MattKiazyk]

For those users still getting the invalid username/password on Xcodes 2.4.0 - could you please try updating to 2.4.1 and let me know if that fixes your issue?

[ygee07]

Changing the password worked for me, thank you