[AltServer] Fetches anisette data without Mail plug-in

Works on all macOS versions supported by AltServer.

AltServer/Anisette Data/AnisetteError.swift

@@ -0,0 +1,51 @@
+//
+//  AnisetteError.swift
+//  AltServer
+//
+//  Created by Riley Testut on 9/13/23.
+//  Copyright © 2023 Riley Testut. All rights reserved.
+//
+
+import Foundation
+
+extension AnisetteError
+{
+    enum Code: Int, ALTErrorCode
+    {
+        typealias Error = AnisetteError
+        
+        case aosKitFailure
+        case missingValue
+    }
+    
+    static func aosKitFailure(file: String = #fileID, line: UInt = #line) -> AnisetteError {
+        AnisetteError(code: .aosKitFailure, sourceFile: file, sourceLine: line)
+    }
+    
+    static func missingValue(_ value: String?, file: String = #fileID, line: UInt = #line) -> AnisetteError {
+        AnisetteError(code: .missingValue, value: value, sourceFile: file, sourceLine: line)
+    }
+}
+
+struct AnisetteError: ALTLocalizedError
+{
+    var code: Code
+    var errorTitle: String?
+    var errorFailure: String?
+    
+    @UserInfoValue
+    var value: String?
+    
+    var sourceFile: String?
+    var sourceLine: UInt?
+    
+    var errorFailureReason: String {
+        switch self.code
+        {
+        case .aosKitFailure: return NSLocalizedString("AltServer could not retrieve anisette data from AOSKit.", comment: "")
+        case .missingValue:
+            let valueName = self.value.map { "anisette data value “\($0)”" } ?? NSLocalizedString("anisette data values.", comment: "")
+            return String(format: NSLocalizedString("AltServer could not retrieve %@.", comment: ""), valueName)
+        }
+    }
+}

AltServer/AnisetteDataManager.swift

@@ -7,6 +7,7 @@
 //
 
 import Foundation
+import OSLog
 
 private extension Bundle
 {
@@ -30,6 +31,19 @@ private extension ALTAnisetteData
     }
 }
 
+@objc private protocol AOSUtilitiesProtocol
+{
+    static var machineSerialNumber: String? { get }
+    static var machineUDID: String? { get }
+    
+    static func retrieveOTPHeadersForDSID(_ dsid: String) -> [String: Any]?
+    
+    // Non-static versions used for respondsToSelector:
+    var machineSerialNumber: String? { get }
+    var machineUDID: String? { get }
+    func retrieveOTPHeadersForDSID(_ dsid: String) -> [String: Any]?
+}
+
 class AnisetteDataManager: NSObject
 {
     static let shared = AnisetteDataManager()
@@ -53,40 +67,121 @@ class AnisetteDataManager: NSObject
     
     func requestAnisetteData(_ completion: @escaping (Result<ALTAnisetteData, Error>) -> Void)
     {
-        self.requestAnisetteDataFromXPCService { (result) in
+        self.requestAnisetteDataFromAOSKit { (result) in
             do
             {
                 let anisetteData = try result.get()
                 completion(.success(anisetteData))
             }
-            catch CocoaError.xpcConnectionInterrupted
+            catch let aosKitError
             {
-                // SIP and/or AMFI are not disabled, so fall back to Mail plug-in.
-                self.requestAnisetteDataFromPlugin { (result) in
-                    completion(result)
+                // Fall back to XPC in case SIP is disabled.
+                self.requestAnisetteDataFromXPCService { (result) in
+                    do
+                    {
+                        let anisetteData = try result.get()
+                        completion(.success(anisetteData))
+                    }
+                    catch CocoaError.xpcConnectionInterrupted
+                    {
+                        // SIP and/or AMFI are not disabled, so fall back to Mail plug-in as last resort.
+                        self.requestAnisetteDataFromPlugin { (result) in
+                            do
+                            {
+                                let anisetteData = try result.get()
+                                completion(.success(anisetteData))
+                            }
+                            catch
+                            {
+                                Logger.main.error("Failed to fetch anisette data via Mail plug-in. \(error.localizedDescription, privacy: .public)")
+                                
+                                // Return original error.
+                                completion(.failure(aosKitError))
+                            }
+                        }
+                    }
+                    catch
+                    {
+                        Logger.main.error("Failed to fetch anisette data via XPC service. \(error.localizedDescription, privacy: .public)")
+                        
+                        // Return original error.
+                        completion(.failure(aosKitError))
+                    }
                 }
             }
-            catch
-            {
-                completion(.failure(error))
-            }
-        }
-    }
-    
-    func isXPCAvailable(completion: @escaping (Bool) -> Void)
-    {
-        guard let proxy = self.xpcConnection.remoteObjectProxyWithErrorHandler({ (error) in
-            completion(false)
-        }) as? AltXPCProtocol else { return }
-        
-        proxy.ping {
-            completion(true)
         }
     }
 }
 
 private extension AnisetteDataManager
 {
+    func requestAnisetteDataFromAOSKit(completion: @escaping (Result<ALTAnisetteData, Error>) -> Void)
+    {
+        do
+        {
+            let aosKitURL = URL(fileURLWithPath: "/System/Library/PrivateFrameworks/AOSKit.framework")
+            
+            guard let aosKit = Bundle(url: aosKitURL) else { throw AnisetteError.aosKitFailure() }
+            try aosKit.loadAndReturnError()
+            
+            guard let AOSUtilitiesClass = NSClassFromString("AOSUtilities"),
+                  AOSUtilitiesClass.responds(to: #selector(AOSUtilitiesProtocol.retrieveOTPHeadersForDSID(_:))),
+                  AOSUtilitiesClass.responds(to: #selector(getter: AOSUtilitiesProtocol.machineSerialNumber)),
+                  AOSUtilitiesClass.responds(to: #selector(getter: AOSUtilitiesProtocol.machineUDID))
+            else { throw AnisetteError.aosKitFailure() }
+            
+            let AOSUtilities = unsafeBitCast(AOSUtilitiesClass, to: AOSUtilitiesProtocol.Type.self)
+            
+            // -2 = Production environment (via https://github.com/ionescu007/Blackwood-4NT)
+            guard let requestHeaders = AOSUtilities.retrieveOTPHeadersForDSID("-2") else { throw AnisetteError.missingValue("oneTimePassword") }
+            
+            guard let machineID = requestHeaders["X-Apple-MD-M"] as? String else { throw AnisetteError.missingValue("machineID") }
+            guard let oneTimePassword = requestHeaders["X-Apple-MD"] as? String else { throw AnisetteError.missingValue("oneTimePassword") }
+            
+            guard let deviceID = AOSUtilities.machineUDID else { throw AnisetteError.missingValue("deviceUniqueIdentifier") }
+            guard let localUserID = deviceID.data(using: .utf8)?.base64EncodedString() else { throw AnisetteError.missingValue("localUserID") }
+            
+            let serialNumber = AOSUtilities.machineSerialNumber ?? "C02LKHBBFD57" // serialNumber can be nil, so provide valid fallback serial number.
+            let routingInfo: UInt64 = 84215040 // Other known values: 17106176, 50660608
+            
+            let osVersion: OperatingSystemVersion
+            let buildVersion: String
+            
+            if let build = ProcessInfo.processInfo.operatingSystemBuildVersion
+            {
+                osVersion = ProcessInfo.processInfo.operatingSystemVersion
+                buildVersion = build
+            }
+            else
+            {
+                // Unknown build, so fall back to known valid macOS version.
+                osVersion = OperatingSystemVersion(majorVersion: 13, minorVersion: 4, patchVersion: 0)
+                buildVersion = "22F66"
+            }
+            
+            let deviceModel = ProcessInfo.processInfo.deviceModel ?? "iMac21,1"
+            let osName = (osVersion.majorVersion < 11) ? "Mac OS X" : "macOS"
+            
+            let serverFriendlyDescription = "<\(deviceModel)> <\(osName);\(osVersion.stringValue);\(buildVersion)> <com.apple.AuthKit/1 (com.apple.dt.Xcode/3594.4.19)>"
+            
+            let anisetteData = ALTAnisetteData(machineID: machineID,
+                                               oneTimePassword: oneTimePassword,
+                                               localUserID: localUserID,
+                                               routingInfo: routingInfo,
+                                               deviceUniqueIdentifier: deviceID,
+                                               deviceSerialNumber: serialNumber,
+                                               deviceDescription: serverFriendlyDescription,
+                                               date: Date(),
+                                               locale: .current,
+                                               timeZone: .current)
+            completion(.success(anisetteData))
+        }
+        catch
+        {
+            completion(.failure(error))
+        }
+    }
+    
     func requestAnisetteDataFromXPCService(completion: @escaping (Result<ALTAnisetteData, Error>) -> Void)
     {
         guard let proxy = self.xpcConnection.remoteObjectProxyWithErrorHandler({ (error) in

AltServer/AppDelegate.swift

@@ -247,8 +247,7 @@ private extension AppDelegate
         let username = appleIDTextField.stringValue
         let password = passwordTextField.stringValue
         
-        func finish(_ result: Result<ALTApplication, Error>)
-        {
+        ALTDeviceManager.shared.installApplication(at: fileURL, to: device, appleID: username, password: password) { (result) in
             switch result
             {
             case .success(let application):
@@ -269,49 +268,6 @@ private extension AppDelegate
                 }
             }
         }
-                
-        func install()
-        {
-            ALTDeviceManager.shared.installApplication(at: fileURL, to: device, appleID: username, password: password, completion: finish(_:))
-        }
-        
-        AnisetteDataManager.shared.isXPCAvailable { isAvailable in
-            if isAvailable
-            {
-                // XPC service is available, so we don't need to install/update Mail plug-in.
-                // Users can still manually do so from the AltServer menu.
-                install()
-            }
-            else
-            {
-                self.pluginManager.isUpdateAvailable { result in
-                    switch result
-                    {
-                    case .failure(let error):
-                        let error = (error as NSError).withLocalizedTitle(NSLocalizedString("Could not check for Mail plug-in updates.", comment: ""))
-                        finish(.failure(error))
-                        
-                    case .success(let isUpdateAvailable):
-                        self.isAltPluginUpdateAvailable = isUpdateAvailable
-                        
-                        if !self.pluginManager.isMailPluginInstalled || isUpdateAvailable
-                        {
-                            self.installMailPlugin { result in
-                                switch result
-                                {
-                                case .failure: break
-                                case .success: install()
-                                }
-                            }
-                        }
-                        else
-                        {
-                            install()
-                        }
-                    }
-                }
-            }
-        }
     }
     
     func showErrorAlert(error: Error)

AltServer/Extensions/ProcessInfo+Device.swift

@@ -0,0 +1,54 @@
+//
+//  ProcessInfo+Device.swift
+//  AltServer
+//
+//  Created by Riley Testut on 9/13/23.
+//  Copyright © 2023 Riley Testut. All rights reserved.
+//
+
+import Foundation
+import RegexBuilder
+
+extension ProcessInfo
+{
+    var deviceModel: String? {
+        let service = IOServiceGetMatchingService(kIOMasterPortDefault, IOServiceMatching("IOPlatformExpertDevice"))
+        defer {
+            IOObjectRelease(service)
+        }
+        
+        guard 
+            let modelData = IORegistryEntryCreateCFProperty(service, "model" as CFString, kCFAllocatorDefault, 0).takeRetainedValue() as? Data,
+            let cDeviceModel = String(data: modelData, encoding: .utf8)?.cString(using: .utf8) // Remove trailing NULL character
+        else { return nil }
+        
+        let deviceModel = String(cString: cDeviceModel)
+        return deviceModel
+    }
+    
+    var operatingSystemBuildVersion: String? {
+        let osVersionString = ProcessInfo.processInfo.operatingSystemVersionString
+        let buildVersion: String?
+        
+        if #available(macOS 13, *), let match = osVersionString.firstMatch(of: Regex {
+            "(Build "
+            Capture {
+                OneOrMore(.anyNonNewline)
+            }
+            ")"
+        })
+        {
+            buildVersion = String(match.1)
+        }
+        else if let build = osVersionString.split(separator: " ").last?.dropLast()
+        {
+            buildVersion = String(build)
+        }
+        else
+        {
+            buildVersion = nil
+        }
+        
+        return buildVersion
+    }
+}