2FA code never comes when using xtool setup. #283

Activity

1. necoarcc

   added

   bugSomething isn't workingSomething isn't working

   on Sep 28, 2026
2. necoarcc commented on Sep 29, 2026

   

   necoarcc

   on Sep 29, 2026

   Author

   More actions

   When capturing the traffic with mitmproxy, https://gsa.apple.com/auth/verify/phone/put?mode=sms fails with response:

     <alert title="No Trusted Phone Numbers"
     message="You do not have any trusted phone numbers associated with your Apple Account.  You can add a trusted phone number by verifying your identity.">
       <button name="ak-button" ak-action="cancel">Cancel</button>
       <button httpMethod="GET" url="https://gsa.apple.com/iforgot/phone/add?context=donthaveaccess&amp;prs_account_nm=[email]&amp;autoSubmitAccount=true&amp;appId=93&amp;xa=showModal">Add</button>
     </alert>
   </xmlui>```
   
3. necoarcc commented on Sep 29, 2026

   

   necoarcc

   on Sep 29, 2026

   Author

   More actions

   the apple account does have a phone number linked and logging in through web works
4. necoarcc commented on Sep 30, 2026

   

   necoarcc

   on Sep 30, 2026

   Author

   More actions

   Could only solve the issue by adding an iphone to the apple account and using that to receive the code instead
5. kabiroberai commented on Oct 4, 2026

   

   kabiroberai

   on Oct 4, 2026

   Member

   More actions

   Interesting, did you ever try logging into a sideloading tool like SideStore/AltStore with this Apple ID previously? I'm curious whether it succeeded, since the approach xtool takes is similar
6. Nick-800

   added a commit that references this issue on Oct 15, 2026

   auth: tighten 2FA SMS error semantics per review (xtool-org#283)

   ...

   1fdec3e
7. necoarcc commented on Oct 20, 2026

   

   necoarcc

   on Oct 20, 2026

   Author

   More actions

   Didn't try signing into other stuff with it before adding a phone, don't know
8. kabiroberai commented on Oct 20, 2026

   

   kabiroberai

   on Oct 20, 2026

   Member

   More actions

   Gotcha. I think this should be solved by the workaround in #349 (see #345 for details).
9. kabiroberai

   closed this as completedon Oct 20, 2026