SharkIq - "Suspicious request requires verification" - account gets blocked and logged out of all devices

[Morac2]

The problem

I logged into SharkIQ a few days ago which worked, but today noticed all my vacuums were "unavailable" (instead of just some). Checking the logs I saw that SharkIQ had a sign-in error where it said the OAuth login was a "Suspicious request requires verification". See attached logs.

I saw that the SharkIQ integration was showing as set up failure so I reloaded it a few times and then deleted and re-added it. It failed to login with my username and password. I then received an email that my SharkNinja account was blocked and I had to click a link in the email to unblock it.

Logger: homeassistant.components.sharkiq
Source: components/sharkiq/config_flow.py:74
integration: Shark IQ (documentation, issues)
First occurred: 10:23:49 PM (2 occurrences)
Last logged: 10:26:21 PM

429: Your account has been blocked after multiple consecutive login attempts. We've sent you a notification via your preferred contact method with instructions on how to unblock it.
401: Suspicious request requires verification

I tried to then add the integration back in and it failed to log in with the same "Suspicious request requires verification" 401 error. At this point I stopped trying as it would just lock me out of my account again.

What version of Home Assistant Core has the issue?

2025.12.1

What was the last working version of Home Assistant Core?

2025.12.1

What type of installation are you running?

Home Assistant Container

Integration causing the issue

SharkIQ

Link to integration documentation on our website

https://www.home-assistant.io/integrations/sharkiq/

Diagnostics information

No response

Example YAML snippet

Anything in the logs that might be useful for us?

Additional information

Logger: homeassistant.config_entries
Source: config_entries.py:761
First occurred: 8:21:29 AM (1 occurrence)
Last logged: 8:21:29 AM

Error setting up entry [email adddress] for sharkiq
Traceback (most recent call last):
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 317, in async_sign_in
await self._password_grant_sign_in(ayla_client)
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 273, in _password_grant_sign_in
raise SharkIqAuthError(f"Auth0 password grant failed: {resp.status} {await resp.text()}")
sharkiq.exc.SharkIqAuthError: Auth0 password grant failed: 401 {"error":"requires_verification","error_description":"Suspicious request requires verification"}

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 295, in _legacy_cookie_sign_in
auth_result = await Auth0Client.do_auth0_login(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<4 lines>...
)
^
File "/usr/local/lib/python3.13/site-packages/sharkiq/auth0.py", line 101, in do_auth0_login
raise SharkIqAuthError(f"Auth0 login failed: {redirect_url}")
sharkiq.exc.SharkIqAuthError: Auth0 login failed: /u/login?state=[filtered out OAuth token]

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/src/homeassistant/homeassistant/config_entries.py", line 761, in __async_setup_with_context
result = await component.async_setup_entry(hass, self)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/src/homeassistant/homeassistant/components/sharkiq/init.py", line 73, in async_setup_entry
if not await async_connect_or_timeout(ayla_api):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/src/homeassistant/homeassistant/components/sharkiq/init.py", line 41, in async_connect_or_timeout
await ayla_api.async_sign_in()
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 320, in async_sign_in
await self._legacy_cookie_sign_in(ayla_client)
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 305, in _legacy_cookie_sign_in
return await self._legacy_cookie_sign_in(ayla_client, force_auth0_sdk=True)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 306, in _legacy_cookie_sign_in
raise err
File "/usr/local/lib/python3.13/site-packages/sharkiq/ayla_api.py", line 287, in _legacy_cookie_sign_in
auth_result = await get_token.login_async(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<4 lines>...
)
^
File "/usr/local/lib/python3.13/site-packages/auth0/asyncify.py", line 13, in closure
return await m(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/auth0/rest_async.py", line 116, in post
return await self._request("post", url, json=data, headers=request_headers)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/auth0/rest_async.py", line 93, in _request
return await self._request_with_session(session, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/auth0/rest_async.py", line 70, in _request_with_session
return await self._process_response(response)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/auth0/rest_async.py", line 146, in _process_response
return parsed_response.content()
~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/local/lib/python3.13/site-packages/auth0/rest.py", line 303, in content
raise Auth0Error(
...<4 lines>...
)
auth0.exceptions.Auth0Error: 401: Suspicious request requires verification

[home-assistant]

Hey there @JeffResc, @funkybunch, @TheOneOgre, mind taking a look at this issue as it has been labeled with an integration (sharkiq) you are listed as a code owner for? Thanks!

Code owner commands

Code owners of sharkiq can trigger bot actions by commenting:

• @home-assistant close Closes the issue.
• @home-assistant rename Awesome new title Renames the issue.
• @home-assistant reopen Reopen the issue.
• @home-assistant unassign sharkiq Removes the current integration label and assignees on the issue, add the integration domain after the command.
• @home-assistant add-label needs-more-information Add a label (needs-more-information, problem in dependency, problem in custom component) to the issue.
• @home-assistant remove-label needs-more-information Remove a label (needs-more-information, problem in dependency, problem in custom component) on the issue.

_{^{(message by CodeOwnersMention)}}

---

sharkiq documentation
sharkiq source
_{^{(message by IssueLinks)}}

[brianpmullaney]

+1. New install of the integration. On 2025.12.2

[rusty3379]

Wanted to pile on and say "Same issue!"

[TheOneOgre]

Hello all. There has been work on resolving this, however it's very much a work in progress solution, and I am currently having select people test before trying to apply it to core.

If you would like to test it out for yourself. Follow the comment here and continue down, or head straight to the test repo at https://github.com/TheOneOgre/sharkiq/

This code is highly experimental and the repo is only temporary until verification or a better method is created.

[njack21]

Following

[funkybunch]

@njack21 please refrain from commenting unless you also have new information to contribute. There is a follow button to get notified of updates without spamming everyone who has already chimed in.

[brich4750]

Hello all. There has been work on resolving this, however it's very much a work in progress solution, and I am currently having select people test before trying to apply it to core.

If you would like to test it out for yourself. Follow the comment here and continue down, or head straight to the test repo at https://github.com/TheOneOgre/sharkiq/

This code is highly experimental and the repo is only temporary until verification or a better method is created.

Any Update on this and the fix?

[dooder420]

same issue here ✋

[TheOneOgre]

I would just like to update everyone that progress has stalled in development at least for me. The temporary testing and HACS repo I was working on hasn't seen any progress, as, I haven't really been able to find much headway. Combined with the fact that my shark robot doesn't even properly work with the SharkClean app (even without running any shark integrations in HA, making a new account, factory resetting, etc.), I am not even able to reliable debug changes on the fly which slows progress by 10000%.

I do not want to crush any hope for the project or what is to come, but at least in my development, and the lack of response from Shark to actually get things working, there is currently no updates on the way, at least for now.

The ONLY thing I can say, is that the HACS branch seems to work for some people, even if a little, and not at all for others, and for many, after a reboot of HA, it breaks the login. So there may very well be an issue caching the login/token across reboots, or it just trying to force a sign in each time. BUT that's speculation.

If anyone tries their hand with development in resolving this issue and finds any breakthroughs, please let someone in the sharkiq team know. Otherwise, thank you all for hanging in there and have been and still willing to be such help! <3

[alanhogan]

@TheOneOgre I probably shouldn't do this, but... maybe I could lend you my Shark credentials, if it helps. But why is your robot nonfunctional? Do you think it’s a result of your development work & they locked you out, or unrelated?

[falco1717]

Hello all. There has been work on resolving this, however it's very much a work in progress solution, and I am currently having select people test before trying to apply it to core.

If you would like to test it out for yourself. Follow the comment here and continue down, or head straight to the test repo at https://github.com/TheOneOgre/sharkiq/

This code is highly experimental and the repo is only temporary until verification or a better method is created.

I was able to get my shark logged in with this repo.

[alanhogan]

I was able to get my shark logged in with this repo.

Me too, but it didn't survive a Home Assistant reboot (auth problems again), and even when it was 'working,' I couldn't actually control the robot. What about you? Did the authentication work-around make the sharkiq integration useful for you?

[dkunttu]

I installed this and it seemed great for about a week but today my account was locked again and I've been getting spammed with notices from Shark about it, so I've disabled the integration for now.