Skip to content

fix login broken because of apple new auth endpoint#82

Open
void-eth wants to merge 1 commit into
Lakr233:mainfrom
void-eth:fix-auth-fast-endpoint
Open

fix login broken because of apple new auth endpoint#82
void-eth wants to merge 1 commit into
Lakr233:mainfrom
void-eth:fix-auth-fast-endpoint

Conversation

@void-eth

@void-eth void-eth commented Jun 7, 2026

Copy link
Copy Markdown

hey, so login was failing for me since few days and i found out apple changed the auth endpoint. the bag now points auth to auth.itunes.apple.com and it needs the /fast subpath at the end otherwise it just doesnt work.

i saw ipatool also fixed the same thing in their PR #486 (majd/ipatool#486) so i did the same logic here in the web version.

what i changed:

  • in frontend/src/apple/bag.ts it now reads authenticateAccount from top level first and then falls back to urlBag (before it was checking urlBag first)
  • if the endpoint has auth.itunes.apple.com and doesnt already end with /fast then we add /fast to it
  • changed the default fallback url to the new native fast one https://auth.itunes.apple.com/auth/v1/native/fast

also updated the bag tests to cover the top level case and the /fast appending, and fixed the note in AGENTS.md.

the backend wisp whitelist already allows auth.itunes.apple.com so no change needed there. i didnt touch the cookie jar lock part from ipatool because that one is for their file based cookie storage and we use indexeddb in browser so its not relevant.

tested on my own server with docker and login works again now. lemme know if you want me to change anything thanks

Adapt ipatool PR #486 to AssppWeb:
- Prefer top-level authenticateAccount over urlBag entry
- Append /fast sub-path to auth.itunes.apple.com endpoints
- Change default auth fallback to native fast endpoint
@2PoL

2PoL commented Jun 8, 2026

Copy link
Copy Markdown

I also encountered "Authentication failed: the server returned HTTP 200 with an empty response body."

qq148376839 added a commit to qq148376839/AssppWeb that referenced this pull request Jun 8, 2026
Apple moved authentication to auth.itunes.apple.com/auth/v1/native/fast.
The old MZFinance endpoint returns 403, and /auth/v1/native without /fast
returns 200 empty body. The /fast suffix is required.

Ref: upstream issue Lakr233#82, ipatool PR #486

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mymolasses

mymolasses commented Jun 10, 2026

Copy link
Copy Markdown

苹果又更新了验证链接和返回,我自己根据majd/ipatool#490
提交了一个commit,可以参考,目前我自己验证登录正常

a37b7a6

更新我也提交了一个PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants