Workaround for "Could not send verification code"

[kabiroberai]

Context

Recent backend changes on Apple's part made it so xtool may fail to deliver Apple ID 2FA codes via SMS. When this happens, you'll see something like:

# xtool auth
Login mode: <1>
Apple ID: <...>
Password: <...>
Logging in...
warning: Could not send verification code via SMS. Falling back to trusted device authentication...
warning: Could not send verification code. Generate one manually.
Code:

There are a few solutions to work around this.

Solution 1: use API key auth

If your account is enrolled in the paid Apple Developer Program, I highly recommend using API key based authentication instead of password based authentication. This works around the 2FA limitation + any other auth issues that may come up.

…else, solution 2: generate a 2FA code via web

1. Ensure your iPhone is logged into the Apple ID. If it's a secondary account (not your primary iCloud), you can add it to the Mail app. Settings > Apps > Mail > Mail Accounts > Add Account
2. Start xtool's authentication via xtool auth login. Enter your username and password, up until you see the Code: prompt.
3. Go to account.apple.com on your computer and initiate a login for the same Apple ID. Enter email & password, click Sign In.
4. You should see a 2FA code popup on your trusted device. Note down the code. Close account.apple.com WITHOUT entering the code there.
5. Enter the code you received into xtool's Code: prompt.

…else, solution 3: create a new Apple Account without 2FA

1. Go to music.apple.com > Sign In
2. Enter an email address that doesn't already have an Apple Account. Many email services allow you to have "aliases" with +. For example if your email is something@gmail.com you can register an Apple Account with something+alt@gmail.com and it'll still send emails to your inbox.
3. Finish creating the account; skip entering a phone number if prompted.
4. You can use this account to log into xtool, and you won't receive a 2FA prompt.

[trit133]

solution 2 - there is no prompt for code

[kabiroberai]

I just released the update that adds the prompt, but also fixes the root cause so SMS 2FA should hopefully now work again.

[kabiroberai]

Resolved in v1.23.0