mirror/rclone
1
0
Fork 0
mirror of https://github.com/rclone/rclone.git synced 2026-04-03 23:32:50 -04:00
Code Issues Packages Projects Releases Wiki Activity

iclouddrive: use dynamic origin for SRP auth headers

Browse Source 
This fixes China mainland iCloud authentication by deriving the Origin
and Referer headers from authEndpoint instead of hardcoding idmsa.apple.com.

Fixes compatibility with PR #8818 (China region support) and PR #9209
(SRP authentication).

Signed-off-by: Xiangzhe <xiangzhedev@gmail.com>
This commit is contained in:
Xiangzhe
2026-03-03 15:59:59 +08:00
committed by Nick Craig-Wood
parent 35e4f60548
commit 2610beb18d
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
backend/iclouddrive/api/session.go
View File

@@ -346,15 +346,22 @@ func (s *Session) authSRPComplete(ctx context.Context, accountName, m1Base64, m2
}
}
// getSRPAuthHeaders returns headers needed for SRP auth requests to idmsa.apple.com.
// getAuthOrigin returns the origin URL for auth requests.
// Supports both global (idmsa.apple.com) and China (idmsa.apple.com.cn) endpoints.
func getAuthOrigin() string {
return strings.TrimSuffix(authEndpoint, "/appleauth/auth")
}
// getSRPAuthHeaders returns headers needed for SRP auth requests.
func (s *Session) getSRPAuthHeaders() map[string]string {
frameTag := "auth-" + s.FrameID
authOrigin := getAuthOrigin()
headers := map[string]string{
"Accept": "application/json",
"Content-Type": "application/json",
"User-Agent": iCloudUserAgent,
"Origin": "https://idmsa.apple.com",
"Referer": "https://idmsa.apple.com/",
"Origin": authOrigin,
"Referer": authOrigin + "/",
"X-Apple-Widget-Key": s.ClientID,
"X-Apple-OAuth-Client-Id": s.ClientID,
"X-Apple-OAuth-Client-Type": "firstPartyAuth",