Apple Authentication error

[andrewchester1]

Build/Submit details page URL

No response

Summary

When trying to create a new build with eas cli, apple authentication fails when requesting SMS 6 digit pin instead of device. We made sure eas cli is updated. This issue just started showing up yesterday.

Managed or bare?

managed

Environment

expo-env-info 1.2.1 environment info:
System:
OS: Windows 10 10.0.19045
Binaries:
Node: 18.18.0 - C:\Program Files\nodejs\node.EXE
Yarn: 1.22.22 - ~\AppData\Roaming\npm\yarn.CMD
npm: 9.8.1 - C:\Program Files\nodejs\npm.CMD
IDEs:
Android Studio: AI-221.6008.13.2211.9477386
npmPackages:
expo: ~51.0.35 => 51.0.39
react: 18.2.0 => 18.2.0
react-native: 0.74.5 => 0.74.5
react-native-web: ~0.19.6 => 0.19.13
Expo Workflow: managed

✔ Check package.json for common issues
✔ Check Expo config for common issues
✔ Check native tooling versions
✔ Check if the project meets version requirements for submission to app stores
✔ Check for common project setup issues
✖ Check dependencies for packages that should not be installed directly
✔ Check for app config fields that may not be synced in a non-CNG project
✔ Check for issues with Metro config
✔ Check npm/ yarn versions
✔ Check Expo config (app.json/ app.config.js) schema
✔ Check that packages match versions required by installed Expo SDK
✔ Check that native modules do not use incompatible support packages
✔ Check for legacy global CLI installed locally
✔ Check that native modules use compatible support package versions for installed Expo SDK

Detailed check results:

The package "@types/react-native" should not be installed directly in your project, as types are included with the "react-native" package.

One or more checks failed, indicating possible issues with the project.

Error output

√ How do you want to validate your account? ... device / sms

Internal Server Error: 'h', 'Received an internal server error from Apple's App Store Connect / Developer Portal servers, please try again later'. Retrying after 3 seconds (remaining: 3)

× Logging in...
Authentication with Apple Developer Portal failed!
Received an internal server error from Apple's App Store Connect / Developer Portal servers, please try again later
Error: build command failed.

Reproducible demo or steps to reproduce from a blank project

Run eas cli for an apple build, and request sms for authentication

[noahkurz]

I'm seeing this issue as well

[jameskennethrobinson]

Also experiencing this. Coming back to expo after 5 years and experiencing this with a new app 😂

[bmills2023]

Also having this issue with my project as well. It just started happening lately. I have never had a problem with it in the past

[andrewchester1]

Is anyone looking into this issue? It has been three days and multiple people are having the same issue. It doesn't seem like anyone from expo is even looking into this issue.

[szdziedzic]

Hey,

I can't reproduce it on my end so far. These errors are often not easily reproducible between Apple accounts, and it makes it hard to debug.

Can you run the command with EXPO_DEBUG=1 env var so we have more error details to work with?

[andrewchester1]

@szdziedzic I just ran the command. It is returning a 500, is it okay if I paste the response in this issue? Not sure if there is any sensitive data in the error

[szdziedzic]

It's best to strip any cookies/session IDs, and so on just in case. You can just post stuff relevant to an error message/error code, without any data that is specific to you like an actual phone number.

[szdziedzic]

If it's 500 it seems to be an internal server error on Apple's end 🤔 Based on the error code itself it doesn't seem that it's something wrong with the payload that is sent from EAS CLI to Apple servers because then it would be some different error code related to validation error 🤔.

Can you log in to developer.apple.com normally through the website using SMS 2FA?

[andrewchester1]

h [Error]: Received an internal server error from Apple's App Store Connect / Developer Portal servers, please try again later
at t.getAppleResponseError (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:856515)
at block (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:864626)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async j (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:865138)
at async T (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:863991)
at async t.requestAsync (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:862469)
at async t.idmsaRequestAsync (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:736419)
at async t.sendRequestTokenToSMSAsync (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:751279)
at async y (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:747910)
at async y (C:\Users\AppData\Roaming\nvm\v18.18.0\node_modules\eas-cli\node_modules@expo\apple-utils\build\index.js:1:748254) {
response: {
status: 500,
statusText: '',
headers: {
server: 'Apple',
date: 'Mon, 18 Nov 2024 16:30:28 GMT',
'content-type': 'application/json;charset=UTF-8',
'transfer-encoding': 'chunked',
connection: 'close',
'x-apple-i-request-id': xxx,
'x-frame-options': 'DENY',
'x-content-type-options': 'nosniff',
'x-xss-protection': '1; mode=block',
'strict-transport-security': 'max-age=31536000; includeSubDomains; preload',
'referrer-policy': 'origin',
'x-buildversion': 'R2',
'set-cookie': [Array],
pragma: 'no-cache',
expires: 'Thu, 01 Jan 1970 00:00:00 GMT',
'cache-control': 'no-cache, no-store, no-store',
'x-apple-id-account-country': 'USA',
vary: 'accept-encoding',
},
config: {
url: 'https://idmsa.apple.com/appleauth/auth/verify/phone',
method: 'put',
data: '{"phoneNumber":{"id":1},"mode":"sms"}',
headers: [Object],
transformRequest: [Array],
transformResponse: [Array],
timeout: 0,
withCredentials: true,
adapter: [Function (anonymous)],
xsrfCookieName: 'XSRF-TOKEN',
xsrfHeaderName: 'X-XSRF-TOKEN',
maxContentLength: -1,
maxBodyLength: -1,
jar: [M],
maxRedirects: 0,
baseURL: 'https://idmsa.apple.com/',
validateStatus: [Function: validateStatus]
},
request: ClientRequest {
_events: [Object: null prototype],
_eventsCount: 2,
_maxListeners: undefined,
outputData: [],
outputSize: 0,
writable: true,
destroyed: false,
_last: true,
chunkedEncoding: false,
shouldKeepAlive: false,
maxRequestsOnConnectionReached: false,
_defaultKeepAlive: true,
useChunkedEncodingByDefault: true,
sendDate: false,
_removedConnection: false,
_removedContLen: false,
_removedTE: false,
strictContentLength: false,
_contentLength: 37,
_hasBody: true,
_trailer: '',
finished: true,
_headerSent: true,
_closed: false,
socket: [TLSSocket],
_header: 'PUT /appleauth/auth/verify/phone HTTP/1.1\r\n' +
'Accept: application/json\r\n' +
'Content-Type: application/json\r\n' +
'User-Agent: Xcode\r\n' +
'X-Xcode-Version: 7.0 (7A120f)\r\n' +
'Content-Length: 37\r\n' +
'Host: idmsa.apple.com\r\n' +
'Connection: close\r\n' +
'\r\n',
_keepAliveTimeout: 0,
_onPendingData: [Function: nop],
agent: [Agent],
socketPath: undefined,
method: 'PUT',
maxHeaderSize: undefined,
insecureHTTPParser: undefined,
joinDuplicateHeaders: undefined,
path: '/appleauth/auth/verify/phone',
_ended: true,
res: [IncomingMessage],
aborted: false,
timeoutCb: null,
upgradeOrConnect: false,
parser: null,
maxHeadersCount: null,
reusedSocket: false,
host: 'idmsa.apple.com',
protocol: 'https:',
[Symbol(kCapture)]: false,
[Symbol(kBytesWritten)]: 0,
[Symbol(kNeedDrain)]: false,
[Symbol(corked)]: 0,
[Symbol(kOutHeaders)]: [Object: null prototype],
[Symbol(errored)]: null,
[Symbol(kHighWaterMark)]: 16384,
[Symbol(kRejectNonStandardBodyWrites)]: false,
[Symbol(kUniqueHeaders)]: null
},
data: {
phoneNumber: [Object],
securityCode: [Object],
mode: 'sms',
type: 'verification',
authenticationType: 'hsa2',
autoVerified: false,
showAutoVerificationUI: false,
hideSendSMSCodeOption: false,
supervisedChangePasswordFlow: false,
supportsRecovery: true,
hsa2Account: true,
restrictedAccount: false,
managedAccount: false,
serviceErrors: [Array]
}
}
}

[andrewchester1]

@szdziedzic The entire team can authentication directly to the apple portal with SMS without an issue! I added the Error logs above and cleaned out any sensitive information

[andrewchester1]

@szdziedzic have you gotten a chance to look into this issue more? All of our agreements are to up date for Apple. It is concerning that other people are experiencing this issue as well.

[szdziedzic]

It's really hard for me to move forward without the reproducible example. I tested auth with multiple Apple accounts I have access to and it always works. Additionally, the error code signals some bug on the Apple end, because it's 500.

Is there any chance you can show me the payload (without sensitive information) sent to Apple servers from your browser when applying the SMS code? We could diff the payload then and see what's different.