New login verification from Origin

[fulgeru99]

The login doesn't work anymore because now there's a code sent by email when logging-in

[livertonoliveira]

Noooooo. . This is the end....

[artielange]

I think you have origin login verification turned on... you can turn that off

[fulgeru99]

I always had if OFF and the verification popped-out today. I tried turning it ON and OFF again but it didn't work.

[livertonoliveira]

@fulgeru99 I Think @artielange is right.

I checked my account, look at this :

[fulgeru99]

As I mentioned: with login verification turned OFF, I still get it the login verification window. I tried to activate and de-activate it but I still get it.

[Lululuz]

Same for me. Verification off but getting this lame enter code shit.

[artielange]

Yeah same here. Not too sure what to do about this this

[Lululuz]

I'm in the support queue, I'll let you know what they tell me.

edit: support takes too long... but I found this one:
https://help.ea.com/en/article/fifa-15-first-steps-login-verification/

[livertonoliveira]

Any news @Lululuz ?

[Lululuz]

@livertonli12 Nah not really, live support coulnd't really help me (I had to enable, disable the verification serveral times, but this didnt help) so he sent the issue to the "specialists" :/. We'll see if they can fix it.

[trydis]

I'll keep an eye on this thread, to see if there's anything we can do about it.

[A-VORONKIN]

I have the same problem. does anyone have a solution?

[tmontana3x]

Maybe this helps: when connecting to web app via firefox it dont asks for the verification code, but with IE it does.
Does anyone of you think we will get it to work again? Finding out what firefox does different then ie maybe?

EDIT: First of all Thank you for that Toolkit !!! For what i read so far, brilliant! I just wanted start using it, (i mean first to learn how to use VS and C#), and now i question if it makes any sense, when this is not working anymore.
I hope you coding-cracks have an idea...

[A-VORONKIN]

Maybe this will help
futapi/fut#83

[tmontana3x]

@A-VORONKIN: Thank you! Are you sure with oczkers fut the login still works? I am asking because, i am a code newb (did some small stuff but have a lot to learn)-> and it seems to me oczkers fut is not C# but maybe python (?) -> so in any way it will take me days (better: nights) and weeks to get familiar with it. Therefore my question: is it better to wait for a solution here, or to start from 0 and dive into the oczkers fut because they have a solution for the login problem? Hope you know the answer ;)

[A-VORONKIN]

To help keep your account safe and secure, Login Verification will now be a mandatory step before you can access the FUT Web App. Some players may see this step as soon as December 9th, and all players will see it by December 12th.
http://help.ea.com/en/article/fifa-ultimate-team-login-verification-information/
Oczkers managed to get past the new verification (via email or phone) by using his own cookie request. So we need to implement it too.

[livertonoliveira]

I understood that there is nothing to worry. We'll do it once and no more on each computer we use.

[livertonoliveira]

guys I saw that the path to fix is inside login async method. when challenge is activated , after post login information the page content change to render the challenge. at this moment having the code just do another post and proceed. i'm working on it . let me know if there is another working too to trade some exp and fix as soon as possible. my email is visible on profile

[trydis]

Would be great if someone could send a pull request with the code when it's done, so i can integrate it into the toolkit. Even though i'm not playing FUT myself anymore i want to keep the toolkit up to date.

[livertonoliveira]

@trydis I agree with you, I developed a solution with @craigb but mine is different from him in one point. He implemented one window that pop up to user and wait for some code filled to continue, mine is logging into e-mail account searching for an specific e-mail and returning the code.

In this case we have different solutions, what would be the best approach for our toolkit ?

[LUFCMOT]

I have made a script that dips into the email inbox and gets the code - but i cannot for the life of me find out what URL to send the request too. The params are...

"twoFactorCode" => code goes here,
"_trustThisDevice" => "on",
"trustThisDevice" => "on",
"_eventId" => "on"

[DiCoco]

'submit'

[craigbaines]

would you mind sharing your email code with me?

i have the other bit working, add me on skype.....

craig_b3

[LUFCMOT]

Thanks, I am looking for the actual URL that the data is posted to.

[deprolou]

@LUFCMOT Should be posted to something like this, didnt fix it yet so not sure..

https://signin.ea.com/p/web/login?execution=e2107776095s3&initref=https%3A%2F%2Faccounts.ea.com%3A443%2Fconnect%2Fauth%3Fscope%3Dbasic.identity%2Bbasic.persona%2Bsignin%2Boffline%2Bsecurity.challenge%26redirect_uri%3Dhttp%253A%252F%252Fwww.easports.com%252Ffifa%252Flogin_check%26locale%3Den_US%26state%3DozJNiBxcSMfexI84t_GNEV-bQq1HcW8Cp3Qpyg0HbZI%26response_type%3Dcode%26client_id%3DEASFC-web

[livertonoliveira]

guys after ensuring that login async returned status code 200.

Check it's page content . If there is anything related to e-mail verification fill the code and just do another post to it's uri

cya.

[craigbaines]

My logins all of a sudden seem to be failing, they worked fine before....

am i alone/ cocked something up or is this something else?

[LUFCMOT]

@watcherize Yes that url keeps popping up but doesn't seem right to me..

[craigbaines]

scrap that last comment, its logging in, but im getting some fails....

does the account lock if you enter the pin wrong / request too many pins or anything? :/ hmmm

[christrato]

i'm trying to send the two factor code via POST like this: (the same method of the "login" where you send email and password)

twofactorCode=012980&_trustThisDevice=on&trustThisDevice=on&_eventId=submit

but the answer of this HttpsURLConnection (JAVA) is the page html, with the "field-error" that show the message: Please enter a valid security code.

I know that the code is right, because before send it, i get the code from email.

[hacklex]

I belive you should either obtain new cookies, or find a way to make ea think you are not a bot (which equals having the hypothetical IsBot flag cleared in the EA fut sessions database).
Since I do not know how to perform the latter, we are to stick with the former option.
Basically, once you encounter a strange error, you
a) delete your old cookies
b) restart your bot (the fut client will automatically ask you for a code)
c) enter a new code, and,
d) if you are as lucky as me, your newly initiated session will not be bugged.

[artielange]

Thanks for the info @hacklex.

I wonder if it's possible to experiment with this manually? i.e. take an already bugged account, log in to the webapp with a browser that has no ea cookies/cleared cookies in an attempt to clear the session flag.

My experience is that these bugged accounts log in systematically after more than one hour of inactivity, usually 2-3. I also noticed that the accounts seem to be flagged in "waves" at certain times of the morning EST time. The sessions seem to stay up a little longer in the evenings though.

[hacklex]

I'm afraid you did not get what I meant. Perhaps my english is still not quite good. The flag is not associated with the account, but with the session, or so it seems to me. I believe you should relogin with no cookies using your bot, to obtain new cookies for it, and the session you will begin, will be fresh, therefore not be flagged for some reasonable time.

[hacklex]

Anyway, I understand that automating this is dangerous, because too much code requests for a single FUT account looks suspicious, to say the least. Well, if banned, I suppose one might appeal to the support, saying, "I'm running fut web app from my work, and my admin has disabled cookies in my browser".

[hacklex]

Honestly, what surprises me the most is ths strange laziness in how ea guys deal with bots. I mean, I can come up with at least five or so different detection methods (ranging from simple ones (time-based, average timings-based) and relatively simple ones (honeypot-based), to relatively sophisticated ones (neural networks and other fuzzy logic decision makers) and totally sophisticated ones (such as matching the formal behavior description length (or even pattern) against known bot signatures, which I suppose they may obtain in thousands)?
It hardly takes a week to implement it (especially if you already know the math behind those words)... or perhaps they don't need a game without bots, as long as there are not too many of them?

[artielange]

I think the last part is where you hit the nail on the head. As long as the bots don't cause downtime, which so far hasn't happened this year, not as much as last year anyway, they're happy. Only a minimum investment was needed to "control" a problem which isn't really a problem.

[artielange]

I've taken a an account and logged in from a totally different location and browser, thus getting new cookies and a new session, and the webapp exhibits the same problematic behavior. Maybe I'm not understanding the concept properly.

I saw this problem at the end of FUT14, those accounts never came back up. Someone else told me about having the same problem with their accounts, but on a much larger scale lol.

[artielange]

I've read an re-read what you wrote... When you mention:
...
After that, the server will throw errors at you in various places. Therefore, when encountered an exception where it is not normally possible (normally possible are mostly "outbid" exceptions), it is a good thing to delete your cookies and restart the bot and obtain a new code, and so on.
...

I understand that at this point the session/account is already flagged.

[myCollections]

From here, i m able to use my bugged account on mobile, but not on the webApp, my AB or even on the Xbox...I try to not use it during days but without any luck...

[hacklex]

I'm not sure whether it is the account or the session which receives the flag... perhaps sometimes both. But I believe there are cases when only the session gets flagged, and in such cases one might just start a new session. I am nowhere near solving the general case.

[A-VORONKIN]

So it`s be better to delete cookies before account will be flaged.

[hacklex]

Tactically, yes. The more errors occur, the more suspicious the account itself seems. So, if deleting cookies leads to less frequent errors, the account looks less suspicious.
Strategically, on the other hand, no. That is, because the more codes you request, the more suspicious your actions seem...

I can't give an advise on strategical level, for I don't know whether ea seriously tracks and counts your code requests, but tactically, deleting cookies may be a good move to reduce the exceptions rate.

[A-VORONKIN]

I tried to delete old cookies and restart bot every 30 mins and I still have problem with "bugged" account after 2-3 hours

[hacklex]

-_- again, if you decided to delete cookies, don't do it every 30 minutes, just when the bug arises. As long as everything proceeds smoothly, I see no need to delete cookies. That's just my opinion of course.

[A-VORONKIN]

Deleting cookies when the bug arises didn't help me. I even can't enter Ultimate Team in my console and Web app after it. So I`m trying to do something before my account will be flagged.

[hacklex]

yep, got it already. I haven't yet expirenced any troubles logging in game or in webapp (only the exceptions during bot activities), so I don't know what to do if the account itself gets flagged. As for the session issue, I merely stated the fact I noticed, namely, when you encounter an exception, and request a new code (via deleting cookies), the overall exception rate decreases, compared to continuing (via relogin using the same cookies). Whether the observation will be useful or not, time will tell. I can't really help regarding the login issues you described, sorry.

[artielange]

Understood @hacklex, I think you would see different symptoms automating more than an account at once.

For all we know, there could be some sort of intelligence behind this tracking the accounts behaviour.

[hacklex]

I don't know how to make another origin account for fut

[cdc1979]

Hi Guys, So has anyone had any real contact with EA/Origin Directly for breaking the terms of service when running bots / farming for coins? I experimented in Fifa 14 with this toolkit and had good results and never had an issue, and am using it a bit more recently in 15 and not had an issue as of yet. I have had a warning on one of my accounts for buying coins, so have not done that again. I have started running my bot on separate accounts to reduce the risk of my main account being closed. I have noticed that occasionally the web app will error or stop working and usually I just clear both the session and the cookie. Over Christmas the servers were just a nightmare but in the past week I have had up time of +24 hours on some of the code that's running.

[tamaralhack]

Please, can anyone help me with this?

ITwoFactorCodeProvider provider = new ImapTwoFactorCodeProvider( "gmail", "password" , "imap.gmail.com", 993, true );
var LoginResponse = await client.LoginAsync(logiDetails, provider);

I am stuck as heck with this. I have no idea where to go and fix this or how this ITwoFactorCodeProvider works. I also have an ERROR "the 'await' operator can only be used in a method or lambda marked with the 'async' modifier"

I saw the ImapTwoFactorCodeProviders implementation here: https://gist.github.com/trydis/d20ed9daedec19dc87e8

But I have no idea how to use it! I have been trying for at least 24hrs and cannot get it to make sense. I am sorry for the lack of experience But I'd appreciate if one of you could help me with this.

thanks a lot!

[artielange]

So for : ERROR "the 'await' operator can only be used in a method or lambda marked with the 'async' modifier"

The compiler is telling you that you are using the keyword "await" with a method that lacks the async modifier. Look at the method you are trying to "await" and you should notice that it's signature is missing the "async" keyword

I didn't yet implement the Login Verification, so sorry I can't help there

[hacklex]

I suppose he either haven't read my answer, or used the code I provided and forgot about this thread and the issue thread he created.
Shortly, it seems to me that he was trying to compile it under wrong framework.
Anyway, the code I provided in a comment should compile without problems.
Warning, this approach is no panacea, as it consumes a thread from threadpool. But, for the purpose of initial login, I suppose, it should suffice.

[craigbaines]

@lorenzh

I followed these steps exactly, iv'e re-done it about 4 times...

An yet every time it sill flags that it needs the verification. It seems to be saving, and loading a file, at what point do you save? iv'e tried all sorts.... Something isnt going right for me lol. If you have skype, id appriciate an add! @ craig_b3

 public FutClient()
    {
        _requestFactories = new FutRequestFactories();
    }

    public FutClient(CookieContainer cookie)
    {
        _requestFactories = new FutRequestFactories(cookie);
    }

and added two constructors to the FutRequestFactories class

    public FutRequestFactories()
    {
        _cookieContainer = new CookieContainer();
    }

    public FutRequestFactories(CookieContainer cookieContainer)
    {
        _cookieContainer = cookieContainer;
    }

and change the CookieContainer Property to

private readonly CookieContainer _cookieContainer;
now you could set and store the cookiecontainer in your own application

example:

class Programm
{
static void Main(string[] args)
{
var cookieJar = ReadCookiesFromDisk(@"C:\Temp\cookie.cont");
var futClient = new FutClient(cookieJar);

     // do stuff to login and after login
     WriteCookieToDisk(@"C:\Temp\cookie.cont",cookieJar );

 }

    public static void WriteCookieToDisk(string file, CookieContainer cookieContainer)
    {
        using (Stream stream = File.Create(file))
        {
            try
            {
                BinaryFormatter formatter = new BinaryFormatter();
                formatter.Serialize(stream, cookieContainer);
            }
            catch (Exception e)
            {
                Debug.WriteLine("Problem writing cookies to disk: " + e.GetType());
            }
        }
    }

    public static CookieContainer ReadCookiesFromDisk(string file)
    {
        try
        {
            using (Stream stream = File.Open(file, FileMode.Open))
            {
                BinaryFormatter formatter = new BinaryFormatter();
                return (CookieContainer)formatter.Deserialize(stream);
            }
        }
        catch (Exception e)
        {
            Debug.WriteLine("Problem reading cookies from disk: " + e.GetType());
            return new CookieContainer();
        }
    }

}

[rorentz]

Does anyone made the login process with the security code ?

[craigbaines]

There's a very easy way to implement using the back up recovery codes if you don't wanna go through the hassle of making it retrieve it from your email, you can simple open your logindetails model an add in a string for the code, add the new string to the login details when you log in. An on the loginrequest just input _logindetails.code or whatever you name the string.

If you make it save the cookies you only have to do so every three months? If not then it will be Everytime you open your bot.

Sent from my iPhone

On 28 Feb 2015, at 06:45 pm, "robsonrobi" notifications@github.com wrote:

Does anyone made the login process with the security code ?

—
Reply to this email directly or view it on GitHub.

[craigbaines]

Oh, an the code I copied above your comment is a method to make it save / load the cookies. It's working for me now, I'm not sure what was going wrong to start, something dumb I think lol

Sent from my iPhone

On 28 Feb 2015, at 06:45 pm, "robsonrobi" notifications@github.com wrote:

Does anyone made the login process with the security code ?

—
Reply to this email directly or view it on GitHub.

[DjTrilogic]

Is the webapp working again for you =O

[craigbaines]

The web app never stopped working, just the transfer market. Bots still login fine. Just cant really do anything past that lol.

[DjTrilogic]

Haha ! Yes ^^