TgtgLoginError - Seems like two factor auth is required // Error 403 #119

MaxWinterstein · 2021-11-09T12:20:35Z

First seen on a mobile a few days ago, now happening to me here too:

>>> from tgtg import TgtgClient
>>> client = TgtgClient(email="REDACTED", password="REDACTED")
>>> client.get_items()
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/Users/winterstein/venv/togoodtogo/lib/python3.9/site-packages/tgtg/__init__.py", line 143, in get_items
    self._login()
  File "/Users/winterstein/venv/togoodtogo/lib/python3.9/site-packages/tgtg/__init__.py", line 122, in _login
    raise TgtgLoginError(response.status_code, response.content)
tgtg.exceptions.TgtgLoginError: (403, b'<html><head><title>apptoogoodtogo.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script>var dd={\'cid\':\'REDACTED==\',\'hsh\':\'REDACTED\',\'t\':\'fe\',\'r\':\'b\',\'s\':35693,\'host\':\'geo.captcha-delivery.com\'}</script><script src="https://ct.captcha-delivery.com/c.js"></script></body></html>\n')

On mobile, an email is sent with a 6-digits code that needs to be entered into the app, or a link that opens up the app.

VeslavG · 2021-11-10T15:55:23Z

Not sure, if it possible to use this python code for token authentication?
Node-js stopped working because of this issue.

MaxWinterstein · 2021-11-10T16:39:56Z

@VeslavG this implementation has the same issue as the node-js one. Both need some rewrite of the login method used.

VeslavG · 2021-11-10T17:05:32Z

Thanks for the clarification.
I have seen quite detailed discussion on the node-js tool about new auth endpoints and was not sure about the status.
Let's wait for the implementation...
Unfortunately, my python is not "enough" to contribute to the development.

JabLuszko · 2021-11-13T13:14:17Z

marklagendijk/node-toogoodtogo-watcher#114
this seems to fix some everything for me (at least pulling data, did not try logging in)

Quick fix - just add it here https://github.com/ahivert/tgtg-python/blob/master/tgtg/__init__.py#L64

MaxWinterstein · 2021-11-13T13:31:44Z

marklagendijk/node-toogoodtogo-watcher#114 this seems to fix some everything for me (at least pulling data, did not try logging in)

Quick fix - just add it here https://github.com/ahivert/tgtg-python/blob/master/tgtg/__init__.py#L64

True.

When providing user_id, refresh_token (needed to patch __init__.py), and access_token to the constructor, and adding the header, it works.

But still needs to overhaul login process or at least provide the keyword refresh_token for class contruction.

shiraneyo · 2021-11-14T16:58:37Z

I was able to fix this error by switching LOGIN_ENDPOINT to "auth/v2/loginByEmail"

ahivert · 2021-11-14T20:36:41Z

Sorry for the delay, just published new release 0.7.0 that will fix the login + let you build the client with access_token, refresh_token and user_id.

MaxWinterstein · 2021-11-14T22:34:35Z

thx @ahivert , nice to see you did not let the project die <3

Sadly, for me, and I guess a lot of others, the 'banning issue' still persists as a problem. My ipv4 is stuck behind the captcha ('data dome' bot blocker).

As it is static I cannot simply reconnect and go on. I think in that case, somehow getting the captcha visible and solving is required. Then the returned cookie needs to be used for the next request, and each returned cookie must be reused. At least that seems to be what the app is doing...

DL6ER · 2021-11-15T09:24:07Z

I was affected by the same 403 and updating to 0.7.0 alone was sufficient to get this fixed for me.

@MaxWinterstein I do have a static IPv4 as well as my ISP doesn't support port forwarding otherwise. I don't think this is relevant even though I've seen the post on the other issue ticket as well. Even more because using the app on any smartphone still worked here, too and, may it be this client or the regular app, they have the same IPv4 on the outside.

MaxWinterstein · 2021-11-15T10:12:34Z

I was affected by the same 403 and updating to 0.7.0 alone was sufficient to get this fixed for me.

@MaxWinterstein I do have a static IPv4 as well as my ISP doesn't support port forwarding otherwise. I don't think this is relevant even though I've seen the post on the other issue ticket as well. Even more because using the app on any smartphone still worked here, too and, may it be this client or the regular app, they have the same IPv4 on the outside.

I got the captcha also displayed at the app at one point.

I guess there is more than the IP only used at Data Dome to calculate if you are a bad guy or not. But no idea how they create their fingerprint in detail...

Sadly, 0.7.0 does not fix the issue alone for me:

root@e7e84399196c:/# pip install tgtg
Collecting tgtg
  Downloading tgtg-0.7.0-py3-none-any.whl (5.9 kB)
Collecting requests==2.26.0
  Downloading requests-2.26.0-py2.py3-none-any.whl (62 kB)
     |████████████████████████████████| 62 kB 521 kB/s 
Collecting charset-normalizer~=2.0.0
  Downloading charset_normalizer-2.0.7-py3-none-any.whl (38 kB)
Collecting idna<4,>=2.5
  Downloading idna-3.3-py3-none-any.whl (61 kB)
     |████████████████████████████████| 61 kB 2.5 MB/s 
Collecting certifi>=2017.4.17
  Downloading certifi-2021.10.8-py2.py3-none-any.whl (149 kB)
     |████████████████████████████████| 149 kB 3.9 MB/s 
Collecting urllib3<1.27,>=1.21.1
  Downloading urllib3-1.26.7-py2.py3-none-any.whl (138 kB)
     |████████████████████████████████| 138 kB 3.3 MB/s 
Installing collected packages: urllib3, idna, charset-normalizer, certifi, requests, tgtg
Successfully installed certifi-2021.10.8 charset-normalizer-2.0.7 idna-3.3 requests-2.26.0 tgtg-0.7.0 urllib3-1.26.7
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
WARNING: You are using pip version 21.2.4; however, version 21.3.1 is available.
You should consider upgrading via the '/usr/local/bin/python -m pip install --upgrade pip' command.
root@e7e84399196c:/# python

Python 3.9.8 (main, Nov 10 2021, 02:58:52) 
[GCC 10.2.1 20210110] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> from tgtg import TgtgClient
>>> client = TgtgClient(email='REDACTED', password='REDACTED')
>>> client.login()
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python3.9/site-packages/tgtg/__init__.py", line 126, in login
    raise TgtgLoginError(response.status_code, response.content)
tgtg.exceptions.TgtgLoginError: (403, b'<html><head><title>apptoogoodtogo.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script>var dd={\'cid\':\'REDACTED-RQ==\',\'hsh\':\'REDACTED\',\'t\':\'fe\',\'r\':\'b\',\'s\':35693,\'host\':\'geo.captcha-delivery.com\'}</script><script src="https://ct.captcha-delivery.com/c.js"></script></body></html>\n')
>>>

TGTGbot · 2021-11-17T16:45:11Z

I donwloaded the latest version of the code and still the same error. Anybody else managed to get it solved?

lampje25 · 2021-11-19T20:21:38Z

same problems here.
this morning it still worked.
Not anymore unfortunately.

Traceback (most recent call last):
File "C:\Python39\tgtg_get_tokens.py", line 15, in
client.get_items()
File "C:\Python39\tgtg_init_.py", line 151, in get_items
self.login()
File "C:\Python39\tgtg_init_.py", line 130, in login
raise TgtgLoginError(response.status_code, response.content)
tgtg.exceptions.TgtgLoginError: (404, b'')

Dielee · 2021-11-20T06:54:47Z

I have build a new version witch works with the new endpoints.
You have to use only Tgtgclient with an email:

TgtgClient(email="dqweds@yourmail.de")
tgtgclient.login()

After loging in, you should get an email.
Klick on this link and your good to go ;)
PS: You have 2 Minutes to click this Link!

Changes are here:
https://github.com/Dielee/tgtg-python

Please give me feedback. If this works, I will open an PR.

PPS: There are some people getting captcha request. There is an issue open in my forked repo. Feel free to help us to get the captcha url.

DL6ER · 2021-11-20T09:25:37Z

@Dielee I tried your new code in #122 and can confirm it's working. I'd suggest you add the changed login method also to the README.

I left some comments about a Python error you introduced and about unnecessarily changed indentation.

matteoscrugli · 2021-11-23T13:04:39Z

I write how I "solved" it.
First of all I necessarily had to restart the modem to change my IP address, this way it started working again. However, it locks up again after numerous attempts or login or call to get_items(). Probably, tgtg requires a captcha or something similar after numerous requests to the server.
After getting a new IP address, I'm noticing that a stable configuration turns out not to call get_item() more than once per minute, I set it to call once every 61 seconds (actually a random number between 61 and 81).

matteoscrugli · 2021-11-23T17:24:11Z

As if I wasn't, even once a minute I get blocked... And I must necessarily change my IP address

ahivert · 2021-11-24T21:56:21Z

New release 0.8.0 available

c0lumb0 · 2021-11-25T13:28:29Z

Has anyone made the application work again with the 2FA via mail? I tried a few things with VPN and setting different levels get_item(), but did not succeed. :(

matteoscrugli · 2021-11-25T13:30:58Z

With 0.8.0, for me, it works without problems, what errors do you have?

ThomasCochou · 2021-11-26T10:23:45Z

I have the same issue with 0.8.0, nothing fix it:

changing IP
Uses of tokens
Uses of email

When I .login() or .get_credentials(), I instantly have this exception

(403, b'<html><head><title>apptoogoodtogo.com</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head><body style="margin:0"><p id="cmsg">Please enable JS and disable any ad blocker</p><script>var dd={\'cid\':\'AHrlqAAAAAMAj7DVZZjf-McAIvlLgQ==\',\'hsh\':\'1D42C2CA6131C526E09F294FE96F94\',\'t\':\'fe\',\'r\':\'b\',\'s\':35560,\'host\':\'geo.captcha-delivery.com\'}</script><script src="https://ct.captcha-delivery.com/c.js"></script></body></html>\n')

Am I alone ? Is there a way to fix this ?

Immelstorn · 2021-11-26T10:25:05Z

You're not alone, I have the same

DL6ER · 2021-11-26T10:28:20Z

See also #124 (comment) + following comment

ahivert · 2021-12-02T08:23:54Z

0.9.0 should solve this issue

This was referenced Nov 9, 2021

v2/loginByEmail endpoint doesn't seem to work anymore marklagendijk/node-toogoodtogo-watcher#112

Closed

Doesn't work, did TGTG change something? MaxWinterstein/toogoodtogo-ha-mqtt-bridge#17

Closed

Chouffy mentioned this issue Nov 12, 2021

"Error while setting up tgtg platform for sensor" and sensors are unavailables Chouffy/home_assistant_tgtg#1

Closed

sbx59 mentioned this issue Nov 16, 2021

403 on token refresh marklagendijk/node-toogoodtogo-watcher#115

Closed

maartenhendrix mentioned this issue Nov 19, 2021

Error 403 Chouffy/home_assistant_tgtg#13

Closed

wieluk mentioned this issue Nov 26, 2021

404 error if username/password or tokens are used Chouffy/home_assistant_tgtg#11

Closed

ahivert closed this as completed Dec 2, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

TgtgLoginError - Seems like two factor auth is required // Error 403 #119

TgtgLoginError - Seems like two factor auth is required // Error 403 #119

MaxWinterstein commented Nov 9, 2021

VeslavG commented Nov 10, 2021

MaxWinterstein commented Nov 10, 2021

VeslavG commented Nov 10, 2021

JabLuszko commented Nov 13, 2021

MaxWinterstein commented Nov 13, 2021

shiraneyo commented Nov 14, 2021

ahivert commented Nov 14, 2021

MaxWinterstein commented Nov 14, 2021 •

edited

Loading

DL6ER commented Nov 15, 2021

MaxWinterstein commented Nov 15, 2021

TGTGbot commented Nov 17, 2021

lampje25 commented Nov 19, 2021

Dielee commented Nov 20, 2021

DL6ER commented Nov 20, 2021

matteoscrugli commented Nov 23, 2021

matteoscrugli commented Nov 23, 2021

ahivert commented Nov 24, 2021

c0lumb0 commented Nov 25, 2021

matteoscrugli commented Nov 25, 2021 •

edited

Loading

ThomasCochou commented Nov 26, 2021

Immelstorn commented Nov 26, 2021

DL6ER commented Nov 26, 2021

ahivert commented Dec 2, 2021

TgtgLoginError - Seems like two factor auth is required // Error 403 #119

TgtgLoginError - Seems like two factor auth is required // Error 403 #119

Comments

MaxWinterstein commented Nov 9, 2021

VeslavG commented Nov 10, 2021

MaxWinterstein commented Nov 10, 2021

VeslavG commented Nov 10, 2021

JabLuszko commented Nov 13, 2021

MaxWinterstein commented Nov 13, 2021

shiraneyo commented Nov 14, 2021

ahivert commented Nov 14, 2021

MaxWinterstein commented Nov 14, 2021 • edited Loading

DL6ER commented Nov 15, 2021

MaxWinterstein commented Nov 15, 2021

TGTGbot commented Nov 17, 2021

lampje25 commented Nov 19, 2021

Dielee commented Nov 20, 2021

DL6ER commented Nov 20, 2021

matteoscrugli commented Nov 23, 2021

matteoscrugli commented Nov 23, 2021

ahivert commented Nov 24, 2021

c0lumb0 commented Nov 25, 2021

matteoscrugli commented Nov 25, 2021 • edited Loading

ThomasCochou commented Nov 26, 2021

Immelstorn commented Nov 26, 2021

DL6ER commented Nov 26, 2021

ahivert commented Dec 2, 2021

MaxWinterstein commented Nov 14, 2021 •

edited

Loading

matteoscrugli commented Nov 25, 2021 •

edited

Loading