using auth token instead of user/password

[picklepete]

using auth token instead of user/password

[torarnv]

Which auth token are you referring to? App specific passwords can not be used, see #92.

[nirlandau]

I am refering to general apple token. for example, when native apps (e.g. contacts) are connecting the server, a token is passing.
the token looks likes this:
8274655121:AQAAAVAABnYqmtl1ZiI/TQ+YUIfR763S9Iy+/j0=

[torarnv]

How would you retrieve this token? If you can use the token on icloud.com (set a cookie perhaps?) we can also use it.

[nirlandau]

for example, refer to https://github.com/horrorho/InflatableDonkey
you can download full icloud backup with it.
or this: https://github.com/hackappcom/iloot, which is an older version of InflatableDonkey in python (see iloot.py lines 587-607)

InflatableDonkey mentioned that using tokens (DsPrsID:mmeAuthToken) is "Preferable for consecutive runs as repeated appleId/ password authentication over short periods may trip anti-flooding/ security controls."
so it gives you an option to obtain it (--token option).

these tokens work on icloud.com.
now i want to use this token with pyicloud.

[torarnv]

It seems both InflatableDonkey and iloot are using a reverse-engineered version of the CloudKit API, while we are using the APIs that the icloud.com website is using. The flow here doesn't match ours, we use a different endpoint that doesn't give us a mmeAuthToken.

these tokens work on icloud.com

Just to clarify, are you basing that on the two projects mentioned already, or have you personally interacted with the icloud.com website using something else than your username and password?

[ifnull]

@torarnv does pyicloud save any token for later use or does it completely re-authenticate each time?

[nirlandau]

I am basing my answer on these two projects.
However, before iOS 9, I was able to use pyicloud with mmeAuthToken (witch I got from iloot)
has something changed?

[torarnv]

@ifnull A token is saved in the cookie file

@nirlandau Unless you can use the same mmeAuthToken to log into the current icloud.com, then pyicloud will not be able to use it either. Let me know if you can get it to work using icloud.com

[aress31]

This would be a super nice feature, up vote for me!

[Quentame]

It is not possible since we use iCloud.com authentication.

Same for App-specific password (see #161, #92 and #36), but we may implement 2FA (see #102).