icloud3 icon indicating copy to clipboard operation
icloud3 copied to clipboard

Changed Login behaviour with YubiKeys

Open eopo opened this issue 2 months ago • 4 comments

I added YubiKeys to my apple account last week. Today, I received the usual "A device is trying to log in" notification and a "Apple Account Authentication needed" message in HA.

However, when confirming the Apple Notification, no 2FA code is shown. I can only choose between "OK" and "That wasn't me". After confirming OK the modal disappears.

Manually requesting a code from HA does not work either.

eopo avatar Oct 22 '25 06:10 eopo

The current version of iCloud3 does not support Yubikey authentication. They will have to be removed from your account and icy will need to be restarted to authenticate your account.

I am getting ready to start implementing their support and should begin the code changes within the next day or two. I’ll let you know when it is ready to test.

gcobb321 avatar Oct 22 '25 20:10 gcobb321

Happy to help testing! Possibly might work using the „scan some code with your phone to use a passkey“ way?

eopo avatar Oct 23 '25 14:10 eopo

The original PyiCloud Python-to-iCloud is not maintained by another group. They has implemented the support of Fido2 hardware keys. I have their code and will be using it to provide YubiKey support. It is a little complicated for me because of the differences in implementing it. I need to take long term login into consideration and tying into the Configure support screens and configuration file so iCloud3 knows if you are using a hardware key or the 6-digit authentication code and act accordingly.

I will get you code when ready.

gcobb321 avatar Oct 23 '25 15:10 gcobb321

Happy to test as well!

marceloaf avatar Oct 23 '25 17:10 marceloaf