Support login on Apple ID with security key

[Toad882]

Describe the bug
When I try to login on an Apple ID that is configured with security key for 2 factor authentication, Xcodes shows error after I enter email and password that stops me to sign in

To Reproduce
Steps to reproduce the behavior:
try to sign in with any Apple ID that use security key instead of 6 length code
Expected behavior
A clear and concise description of what you expected to happen.
prompt to insert the security key and sign in successfully
Screenshots
If applicable, add screenshots to help explain your problem.

Version

• OS: 13.2.1
• Xcodes: 1.9.0 (17)

[MattKiazyk]

Hi @Toad882

Unfortunately we don't support security keys at this time. I'll change this ticket to an enhancement request. The error is indicating that the securityCode isn't returning back from https://idmsa.apple.com/appleauth/auth call, so obviously if an account is setup to use security keys this is wrong.

[feralbob]

I have the same issue. I tried creating an app specific password and that didn't work either. Gives the following error/message

[shyuan]

I have the same issue.

I am wondering that if Apple provide some migration document to help developers use native Apple ID authentication flow.

[jaanus]

Just hit the same bug. This is unfortunate. I understand this is more on Apple's side than the Xcodes app.

[piersatdoshii]

Especially with the current push everywhere towards passkeys, I think this should be a high priority, thanks! 😄

[jaanus]

I have sort of given up on Xcodes supporting logging in with security key. It’s not their fault - it’s unclear if Apple ever intends logging in to their account with hardware security key to work with thirdparty things like Xcodes.

Xcodes is still very useful and I use it a lot. Just to see what versions I have installed, switch between them, see Swift versions etc, that is all great.

If it turns out that direct downloading is not possible with hardware security key, it would be very useful for Xcodes to automatically open the download location in my browser, where I can log in with the security key if needed, and just complete the download with my browser.