steilerDev/icloud-photos-sync

Your Apple ID was used to sign in to iCloud via a web browser.

Closed this issue · 8 comments

Checklist before opening an issue

Describe the bug

Every time the sync runs, I get an email from Apple saying:
"Your Apple ID was used to sign in to iCloud via a web browser."

I checked the docs, but didn't see any way to indicate to Apple that the "browser" should be trusted.

Error code

NA

Logs

NA

Operating environment

  • OS: Synology
  • Version: 1.1.1-beta3
  • Execution environment: docker

See PR #240.

As a workaround, you can configure server side rules in your email provider to move them out of the way (this is how I'm currently handling those emails)

HeaderJar and global NetworkManager are now persisting cookies between scheduled sync executions. It seems the aasp cookie in connection with the sessionToken are suppressing this email. This was added with 1.2.0-nightly.6.

Currently those cookies are not persisted between process restarts (not sure if it should) - please check it out and provide feedback.

v1.2.0 only sends this notification after a restart and/or after the session expires (after what appears to be thirty days) - closing this

I am still getting this when running a manual sync command on an already running container in v.1.2.0. Is this expected behavior?

Yes, session info is held in memory - so not shared between processes.

Only daemon mode shares between sync executions

@steilerDev Is it possible to persist this to disk similar to the implementation by icloud-photos-downloader? In the event I need to reboot the host or similar keeping it in memory will cause it to re-trigger prior to 30 days.

It's technically possible, but I think I don't want to circumvent this security feature. If someone would be able to access your resource file, they could login and authenticate unnoticed - by keeping this information only in memory you would get notified in case someone logs in using your trust token.