Proper App Specific Password Support?

[rcmaehl]

Hiya, just dropping this here.

I was the one that got the iCloud App Specific Password "support" added to Home Assistant for pyicloud. It is jerry-rigged due to me not knowing how to edit pyicloud itself, and eventually broke when Apple Implemented SRP-6a. The process was as follows:

Initial Auth via Username + Password
Force Reauth
Reauth using App Specific Password

I'm not sure exactly the code path that was used but proper implementation of App Specific Passwords would be greatly appreciated!

This may be useful in regards to SRP-6a: home-assistant/core#129059

[timlaing]

If you would like to add / contribute to this repo this would be great. Thanks for the info.

[PaulCavill]

@rcmaehl How were you forcing Reauth in the past?

[rcmaehl]

@rcmaehl How were you forcing Reauth in the past?

Just reloading the integration was usually enough

[paullenhardt]

App specific passwords already work in pyicloud (see KB: https://support.apple.com/en-us/102654 where you create the app specific passcode via account.apple.com). Using an app specific passcode works just fine with the existing pyicloud. You just substitute the main account password with the app specific passcode. It works well and doesn't require 2FA.

Is the process that you were are looking for is to have pyicloud use the main account password and then generate a new app specific passcode which is then stored and used for all future authentications?

[rcmaehl]

App specific passwords already work in pyicloud (see KB: https://support.apple.com/en-us/102654 where you create the app specific passcode via account.apple.com). Using an app specific passcode works just fine with the existing pyicloud. You just substitute the main account password with the app specific passcode. It works well and doesn't require 2FA.

Is the process that you were are looking for is to have pyicloud use the main account password and then generate a new app specific passcode which is then stored and used for all future authentications?

No. For some reason app-specific passwords were not working for the initial setup of pyicloud within HomeAssistant and possibly not working on pyicloud itself (see picklepete/pyicloud github issue tracker)

[paullenhardt]

No. For some reason app-specific passwords were not working for the initial setup of pyicloud within HomeAssistant and possibly not working on pyicloud itself (see picklepete/pyicloud github issue tracker)

I tested it against the old picklepete/pyicloud and it does indeed have an issue with app specific passwords. The version here on timlaing/pyicloud works with app specific passwords. It looks like you are already aware of the request to take over the pyicloud project on PYPI (pypi/support#5377). I'm not sure what further can be done until that process is complete. Once it is, App specific passwords should immediately work under the current version of pyicloud maintained by @timlaing.

[timlaing]

Glad that this is working for you all.