icloud3_v3 icon indicating copy to clipboard operation
icloud3_v3 copied to clipboard

Feature Request - Add AppleID Security Keys Support

Open christophermichaelshaw opened this issue 1 year ago • 6 comments

Pretty simple, Apple added support for hardware FIDO security keys, which means logging in using the integration is not possible, as an account configured to use security keys do not generate an MFA code. (I also attempted to use an app password but as is documented, app passwords are not supported).

Are there plans to add security key support?

Thanks for all your hard work!

christophermichaelshaw avatar May 16 '23 19:05 christophermichaelshaw

Not at the moment. My focus in on wrapping up v3 and releasing it. Maybe after that. I think part of the problem will be if HA will support security keys but I do not know. I'm changing the title to a Feature Request to keep it on the list.

gcobb321 avatar May 16 '23 19:05 gcobb321

Sounds great! I appreciate the quick reply.

I'm happy to help test/debug when/if you find time to dig into this issue.

Already have an open issue with HA Core RE: iCloud integration - https://github.com/home-assistant/core/issues/86499

christophermichaelshaw avatar May 16 '23 19:05 christophermichaelshaw

+1 to needing this.

lyonsad avatar Jun 14 '23 18:06 lyonsad

+1 to needing this.

MrTomek avatar Sep 22 '23 14:09 MrTomek

The problem is, as far as I could tell when digging into this, it’s these hardware security keys are being authenticated through an iOS app Apple interface. iCloud3 authenticates through a web interface that is handled through https calls handled by HA. They are Two completely different access methods which are not comparable with each other. Until someone else figures out how to do it and Apple provides a web access method I can follow, I do not see any progress on this.

If you guys want to diss into it and help me out, I’ll be glad to see what you come up with

gcobb321 avatar Sep 22 '23 21:09 gcobb321

I just joined the apple universe. So have a pretty new AppleID/Account. To set up a family share, I HAD to set up a hardware token. But I did not want it be my iPhone. So I used my FIDO Keys. I set this all up in Web on my Linux machine. What I could also do, was set up Application-Passwords. Which is pretty common to access services programmatically. Nothing new here technology wise what I'm writing. I just wanted to provide details to my setup, hoping that gives food for thought.

s256 avatar Sep 23 '23 10:09 s256