Authorization for not 2fa account failed with error 'Invalid authentication token.' about icloud_photos_downloader HOT 2 OPEN

Can you try version prior to 1.17.0, pls? Prior to 1.17.0 icloudpd used old Apple auth protocol that stopped working recently for 2FA accounts, but it may still work for account without 2FA. For all new accounts Apple requires 2FA, so it will be very hard to reproduce your setup.

@scaraebeus does any of the payloads above ring any bells for you since you were looking at that area recently?

from icloud_photos_downloader.

It's possible the X-Apple-Repair-Session-Token could be passed in as the dsWebAuthToken. The call to /signin appears to always return a 200 success now from what I can tell - the actual response or error code seems to be held within X-Apple-I-Rscd or X-Apple-I-Ercd, respectively. I haven't seen the 412 code yet, so likely something about the account being in a certain state (not HSA2 enabled?)

I noticed there is also a Location header pointing to repair - it looks like the 412 code would likely cause the flow to go to the account repair with the Repair-Session-Token and do some magic (i.e - likely attempt to enable HSA2 on the account).

The OAuth-Context may not really be needed or relevant in this case.

I can try catching the X-Apple-Repair-Session-Token and passing it to dsWebAuthToken and see if that helps - unfortunately, I likely won't have time until next week sometime to look at this.

EDIT:
@kkaretnyk - If you log into iCloud directly with this account, do you get any messages to upgrade, or any errors, or does it just work?

from icloud_photos_downloader.