Feature Request - Yubikey support

[thenoid]

When you enable yubikeys on your icloud account it disables the 6 digit code.

The integration keeps asking to be reconfigured with a new 6 digit code but i am unable to supply it with one.

Tried putting in the code generated by the yubikey, but the integration kicks back an error about the code not being correct.

Any help would be appreciated.

[gcobb321]

iCloud Web Services does not support hardware keys so they will not work with iCloud3

[thenoid]

When you say "icloud web services" do you mean just icloud.com?

[gcobb321]

Partially. iCloud3 uses a heavily modified version of the Python program pyicloud.py to get device, location and authentication data from iCloud issuing https get and post transactions to the following endpoints:
- self.HOME_ENDPOINT = f"https://www.icloud.com"
- self.SETUP_ENDPOINT = f"https://setup.icloud.com/setup/ws/1"
- self.AUTH_ENDPOINT = f"https://idmsa.apple.com/appleauth/auth"

You can see the requests and response traffic between iCloud3 and iCloud by selecting Configure Settings > Page 2 > Format Parameters screen, set Log Level = Rawdata-Auto Reset and restarting iCloud3.

[thenoid]

Okay, cause icloud.com does fully support webauthn/FIDO/yubikey - I'll file a bug upstream with pyicloud.

[gcobb321]

Good luck with that- pyicloud isn’t really supported. I’m not really a network guy and would welcome any assistance in providing support for it. My version of that code is in icloud3/support/pyicloud_ic3.py.

[thenoid]

haha, like every other opensource project these days :(

I'm pretty busy at the moment, but sounds like a good winter project.

[gcobb321]

Let me know when you are ready.