Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Subcommand purchase is broken #284

Open
spargelz opened this issue Jul 19, 2024 · 43 comments
Open

Subcommand purchase is broken #284

spargelz opened this issue Jul 19, 2024 · 43 comments
Labels
bug Something isn't working

Comments

@spargelz
Copy link

spargelz commented Jul 19, 2024

What happened?

Hey,
when I try to use the command ipatool download 672904239 -b com.thehungrywasp.iamsober --purchase I get the error from the title. When I use it without the --purchase it tells me ERR error="license is required" success=false

Version

2.1.4

Relevant log output

ERR error="failed to purchase item with param 'STDQ': failed to purchase app" success=false
@spargelz spargelz added the bug Something isn't working label Jul 19, 2024
@cuiyonghua
Copy link

You need to use the --purchase flag in the download command to acquire a license.

@isaac960623
Copy link

same here, did you solve this problem?

@spargelz
Copy link
Author

spargelz commented Aug 21, 2024 via email

@Coderus-Robin
Copy link

Started seeing this issue occur across multiple accounts as of today

@und3fined
Copy link

@majd can you check this? Problem in today

@nikmoon
Copy link

nikmoon commented Aug 21, 2024

I have this problem too.

@panderman
Copy link

+1

1 similar comment
@fengyunyongjie
Copy link

+1

@haozi5205
Copy link

I have this problem too.

@ivanhjel
Copy link

Same, worked fine yesterday.

@VladislavTitov
Copy link

samee

@crowbait
Copy link

Same, tried up to 4 versions downgrade, didn't help

@iteroji
Copy link

iteroji commented Aug 22, 2024

This is not a bug in the ipatool I experience the same failure in a tool that I develop, looks like something changed in the purchase endpoint of the app store. I didn't have the time to look into it. If anyone figures out don't be shy to share 😀

@crowbait
Copy link

crowbait commented Aug 22, 2024

This is not a bug in the ipatool I experience the same failure in a tool that I develop, looks like something changed in the purchase endpoint of the app store. I didn't have the time to look into it. If anyone figures out don't be shy to share 😀

Still it necessitates an update to ipatool's codebase.

@hzlzh
Copy link

hzlzh commented Aug 23, 2024

+1 It still isn't working here.
Have you found the reason?

@crowbait
Copy link

I implore you, please look into this. Ipatool seems to be the only way to get apps on very old devices (apparently, if you already have an app on your account, AppStore will allow you to download the last version of that app compatible with your iOS version).
So, without ipatool to at least get some apps onto this device, the only thing I have is a safari version so terribly old it won’t even display reddit.

@Jackie11911
Copy link

+1 can anybody solve this problem?

@0x090909
Copy link

doesnt work

@iteroji
Copy link

iteroji commented Aug 26, 2024

+1 can anybody solve this problem?

I fear the issue is that Apple restricted purchasing via the API to Business Manager accounts. I don't currently have one of those accounts, if anyone does, it would be great to test it

@Lakr233
Copy link

Lakr233 commented Aug 27, 2024

This situation is likely caused by the population of Asspp, a tool I developed to support multiple App Store accounts for non-jailbroken iOS users. It comes with an on-device installer that perfectly replaces the App Store for free apps. I had stopped further maintenance on this project, but the fork Asspp-Bingo from CyPwn and Asspp-Pro from someone else is still making great use of it.

As a result, the app’s installation numbers have exceeded my expectations, and Apple is probably working on migrations to prevent such apps from existing.

I have doubts about whether anyone will publicly release a reverse-engineered API from iTunes. If they do, Apple may ban it again, making it not worth the effort.

The current solution may be to use the iTunes header from @[NyaMisty]. He/she wrote a frida server for reading the security header from iTunes. One of the developers has reported that if the KeyBag header exists, the MZBuy endpoint will work with it. Have a look at https://github.com/NyaMisty/action-ipadown.

  • This may be an ending game. :(

@dimitrovdv
Copy link

will there be a fix or will the project no longer be supported?

@coderjingluo
Copy link

No, had my father get the ipa since he has a developer account (didnt know that he has one) IsaacKaKit @.> schrieb am Mi., 21. Aug. 2024, 09:31:

same here, did you solve this problem? — Reply to this email directly, view it on GitHub <#284 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZFAYIFMF4ITVGNKK4SQYJTZSQ663AVCNFSM6AAAAABLFMLFCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMBRGM2DANRRG4 . You are receiving this because you authored the thread.Message ID: @.
>

Can you help download the ipa file of Apple Wallet above ios17.6.1? If you can download it, contact by email: [email protected]

@itstalon
Copy link

itstalon commented Sep 3, 2024

Hello all,
This issue persists on my end as well. I've spent a good 3-4 hours todays trying to manipulate the commands, as well as find others with the same issue. This seems to be the best place that others have stated the issue. Hoping there is a light at the end of the tunnel.

Is this something that Apple has blocked or made it harder for third-party tools to obtain the licenses? My main issues is, not being able to obtain the license in order to proceed with the download.

MacOS 13.6.9
IPATool v2.1.4

@Sicksyg
Copy link

Sicksyg commented Sep 4, 2024

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

@coderjingluo
Copy link

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

@Sicksyg
Copy link

Sicksyg commented Sep 4, 2024

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

Depends on why you are using the tool for. If you have access to a device with a working App Store, connected to your AppleID, you can download the app from there to have the licence. After obtaining the licence you can download it with the tool as many times as you want.

I am not sure how it works, but if the app is available in the MacOS App Store, i have had success with obtaining the licence there (by downloading the app), however this only works if you are using the same AppleID.

@itstalon
Copy link

itstalon commented Sep 4, 2024

I hate to ask, are there any other tools like IPATool that do the same thing? I personally utilize IPATool to download IPA files and assess them on MobSF. I really do not want to go the jailbreak, bootleg, or webstores route for files as I'm not looking to voluntarily download malware right now. Open to any suggestions.

@itstalon
Copy link

itstalon commented Sep 4, 2024

+1 not working here either. Only seem to affect the purchase not the download. Only workaround i found is to manually download (and grab a license) from the App Store.

Can I download it directly to an ipa file?

Depends on why you are using the tool for. If you have access to a device with a working App Store, connected to your AppleID, you can download the app from there to have the licence. After obtaining the licence you can download it with the tool as many times as you want.

I am not sure how it works, but if the app is available in the MacOS App Store, i have had success with obtaining the licence there (by downloading the app), however this only works if you are using the same AppleID.

@Sicksyg I verified your finding. With the problem of not being able to purchase directly from IPATool (assuming an API is broken or something), if you're able to sign in with your iCloud / AppleID account that is used on an iPad/iPhone, you're able to download the app on your phone and obtain the license. I confirmed this by signing into IPATool with my iCloud/AppleID.

Using this mitigation, hoping temporarily, you're able to successfully search > "purchase" > download the files you need from Apple App Store.

@dimitrovdv
Copy link

will the project no longer work?

@pizzas4uce
Copy link

does there exist any other possible way to purchase iPad apps to my Apple ID? i want to purchase iPad apps to my Apple ID because of the recent Nugget exploit that allows iPad apps in iPhones, but i don't own any iPads.

@MikePendo
Copy link

same here unfortunately

@crowbait
Copy link

does there exist any other possible way to purchase iPad apps to my Apple ID? i want to purchase iPad apps to my Apple ID because of the recent Nugget exploit that allows iPad apps in iPhones, but i don't own any iPads.

If you're on Windows, search for and install iTunes 12.6.5.3 . It's the last version that had an App Store built in and you can use it to purchase iPhone and iPad apps.

@DargonLee
Copy link

I have this problem too.

@ilgrandeanonimo
Copy link

Same problem :(

@crowbait
Copy link

Please read the thread before commenting.

If @Lakr233 is right, everyone will have this problem. No one can fix it.
If Apple really removed the option to purchase app via the API, then ipatool is gone.

If your specific use case was using IPA tool to purchase apps so you can download them on old devices, use this approach:

If you're on Windows, search for and install iTunes 12.6.5.3 . It's the last version that had an App Store built in and you can use it to purchase iPhone and iPad apps.

Spamming "Same problem" isn't going to change anything except drown out any potential messages which might actually be helpful.

@AegeanYan
Copy link

AegeanYan commented Sep 16, 2024

No, had my father get the ipa since he has a developer account (didnt know that he has one) IsaacKaKit @.> schrieb am Mi., 21. Aug. 2024, 09:31:

same here, did you solve this problem? — Reply to this email directly, view it on GitHub <#284 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZFAYIFMF4ITVGNKK4SQYJTZSQ663AVCNFSM6AAAAABLFMLFCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMBRGM2DANRRG4 . You are receiving this because you authored the thread.Message ID: @.
>

I registered a Developer Account for this today, but it does not help. Seems Developer Account is not a solution. Please check that, maybe I left out sth. This tool seems cannot download not purchased apps for anyone any more.

@majd majd changed the title ERR error="failed to purchase item with param 'STDQ': failed to purchase app" success=false Subcommand purchase is broken Sep 23, 2024
@jshchnz
Copy link

jshchnz commented Sep 25, 2024

Based on reading the comments I'm a bit unsure if this is a fixable problem, but I'd love to donate to try to find a solution here. @majd tried to find a way to support you on Github but couldn't 😬

@majd
Copy link
Owner

majd commented Sep 25, 2024

Unfortunately, I am not aware of what might have broken the purchase command nor of any alternatives at the moment. I will post an update to this issue in case I find any workaround.

@tovkal
Copy link

tovkal commented Oct 23, 2024

What is the underlying error with the purchase command? Could it be related to the recent deployment by Apple of changes related to Auth with SRP?

Here are other projects affected and their solutions:

XcodesOrg/XcodesApp#630
fastlane/fastlane#26415

@Lakr233
Copy link

Lakr233 commented Oct 23, 2024

No. Purchase endpoint is different from sign in. You have directory service ID so you can download apps, but you need something call AMSAnisette so you can purchase apps. AMSAnisette is tied to device and is provided by itunesstored on your iPhone.

@hzlzh
Copy link

hzlzh commented Dec 13, 2024

Login and download is good at present, but the purchase is still bad. What are the solutions?

@ddxv
Copy link

ddxv commented Dec 13, 2024

No. Purchase endpoint is different from sign in. You have directory service ID so you can download apps, but you need something call AMSAnisette so you can purchase apps. AMSAnisette is tied to device and is provided by itunesstored on your iPhone.

Is this something that I can get from the phone and supply to ipatool?

@Lakr233
Copy link

Lakr233 commented Dec 13, 2024

No. Purchase endpoint is different from sign in. You have directory service ID so you can download apps, but you need something call AMSAnisette so you can purchase apps. AMSAnisette is tied to device and is provided by itunesstored on your iPhone.

Is this something that I can get from the phone and supply to ipatool?

YES. We have already done that. https://github.com/Lessica/KbsyncTool

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests