Anisette V3 (#324)

* initial anisette V3 implementation

* update V3 urls and log version

* fix crash where FetchAnisetteDataOperation.clientInfo would be nil when getting anisette V3 without provisioning first

* move adi.pb reset to its own button instead of doing it on sign out

* fallback to V1 if client_info fails

* make sure to unwrap optional strings

* feat(anisette): update v3 usage, improve error messages and names, report v3 errors to the user

* refactor(anisette): reduce duplicate JSON to anisette code

* fixes(anisette v3): improve errors, fix v3 server check, fix some edge cases where SideStore could crash and instead return an error, retry on -45061

AltStore.xcodeproj/project.pbxproj

@@ -19,6 +19,7 @@
 		19B9B7452845E6DF0076EF69 /* SelectTeamViewController.swift in Sources */ = {isa = PBXBuildFile; fileRef = 19B9B7442845E6DF0076EF69 /* SelectTeamViewController.swift */; };
 		4879A95F2861046500FC1BBD /* AltSign in Frameworks */ = {isa = PBXBuildFile; productRef = 4879A95E2861046500FC1BBD /* AltSign */; };
 		4879A9622861049C00FC1BBD /* OpenSSL in Frameworks */ = {isa = PBXBuildFile; productRef = 4879A9612861049C00FC1BBD /* OpenSSL */; };
+		9922FFEC29B501C50020F868 /* Starscream in Frameworks */ = {isa = PBXBuildFile; productRef = 9922FFEB29B501C50020F868 /* Starscream */; };
 		99C4EF4D2979132100CB538D /* SemanticVersion in Frameworks */ = {isa = PBXBuildFile; productRef = 99C4EF4C2979132100CB538D /* SemanticVersion */; };
 		99F87D0529D8B4E200B40039 /* minimuxer-helpers.swift in Sources */ = {isa = PBXBuildFile; fileRef = 9961EC2D29BE9F2E00AF2C6F /* minimuxer-helpers.swift */; };
 		99F87D1829D8E4C900B40039 /* SwiftBridgeCore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 99F87D1629D8E4C900B40039 /* SwiftBridgeCore.swift */; };
@@ -921,6 +922,7 @@
 				B3146ED2284F581E00BBC3FD /* Roxas.framework in Frameworks */,
 				D533E8B72727841800A9B5DD /* libAppleArchive.tbd in Frameworks */,
 				B3C395F9284F362400DA9E2F /* AppCenterCrashes in Frameworks */,
+				9922FFEC29B501C50020F868 /* Starscream in Frameworks */,
 				D533E8BE2727BBF800A9B5DD /* libcurl.a in Frameworks */,
 				4879A9622861049C00FC1BBD /* OpenSSL in Frameworks */,
 				B3C395F4284F35DD00DA9E2F /* Nuke in Frameworks */,
@@ -1991,6 +1993,7 @@
 				B3C395F6284F362400DA9E2F /* AppCenterAnalytics */,
 				B3C395F8284F362400DA9E2F /* AppCenterCrashes */,
 				4879A9612861049C00FC1BBD /* OpenSSL */,
+				9922FFEB29B501C50020F868 /* Starscream */,
 			);
 			productName = AltStore;
 			productReference = BFD2476A2284B9A500981D42 /* SideStore.app */;
@@ -2062,6 +2065,7 @@
 				4879A95D2861046500FC1BBD /* XCRemoteSwiftPackageReference "AltSign" */,
 				4879A9602861049C00FC1BBD /* XCRemoteSwiftPackageReference "OpenSSL" */,
 				99C4EF472978D52400CB538D /* XCRemoteSwiftPackageReference "SemanticVersion" */,
+				9922FFEA29B501C50020F868 /* XCRemoteSwiftPackageReference "Starscream" */,
 			);
 			productRefGroup = BFD2476B2284B9A500981D42 /* Products */;
 			projectDirPath = "";
@@ -3367,6 +3371,14 @@
 				minimumVersion = 1.1.180;
 			};
 		};
+		9922FFEA29B501C50020F868 /* XCRemoteSwiftPackageReference "Starscream" */ = {
+			isa = XCRemoteSwiftPackageReference;
+			repositoryURL = "https://github.com/daltoniam/Starscream.git";
+			requirement = {
+				kind = upToNextMajorVersion;
+				minimumVersion = 4.0.0;
+			};
+		};
 		99C4EF472978D52400CB538D /* XCRemoteSwiftPackageReference "SemanticVersion" */ = {
 			isa = XCRemoteSwiftPackageReference;
 			repositoryURL = "https://github.com/SwiftPackageIndex/SemanticVersion.git";
@@ -3446,6 +3458,11 @@
 			package = 4879A9602861049C00FC1BBD /* XCRemoteSwiftPackageReference "OpenSSL" */;
 			productName = OpenSSL;
 		};
+		9922FFEB29B501C50020F868 /* Starscream */ = {
+			isa = XCSwiftPackageProductDependency;
+			package = 9922FFEA29B501C50020F868 /* XCRemoteSwiftPackageReference "Starscream" */;
+			productName = Starscream;
+		};
 		99C4EF4C2979132100CB538D /* SemanticVersion */ = {
 			isa = XCSwiftPackageProductDependency;
 			package = 99C4EF472978D52400CB538D /* XCRemoteSwiftPackageReference "SemanticVersion" */;

AltStore.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved

@@ -81,6 +81,15 @@
         "version" : "2.1.0"
       }
     },
+    {
+      "identity" : "starscream",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/daltoniam/Starscream.git",
+      "state" : {
+        "revision" : "df8d82047f6654d8e4b655d1b1525c64e1059d21",
+        "version" : "4.0.4"
+      }
+    },
     {
       "identity" : "stprivilegedtask",
       "kind" : "remoteSourceControl",

AltStore/Operations/FetchAnisetteDataOperation.swift

@@ -7,15 +7,28 @@
 //
 
 import Foundation
+import CommonCrypto
+import Starscream
 
 import AltStoreCore
 import AltSign
 import Roxas
 
 @objc(FetchAnisetteDataOperation)
-final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>
+final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>, WebSocketDelegate
 {
     let context: OperationContext
+    var socket: WebSocket!
+    
+    var url: URL?
+    var startProvisioningURL: URL?
+    var endProvisioningURL: URL?
+    
+    var clientInfo: String?
+    var userAgent: String?
+    
+    var mdLu: String?
+    var deviceId: String?
     
     init(context: OperationContext)
     {
@@ -32,32 +45,412 @@ final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>
             return
         }
         
-        let url = AnisetteManager.currentURL
-        DLOG("Anisette URL: %@", url.absoluteString)
+        self.url = AnisetteManager.currentURL
+        print("Anisette URL: \(self.url!.absoluteString)")
         
-        let task = URLSession.shared.dataTask(with: url) { data, response, error in
-            guard let data = data, error == nil else { return }
-            
-            do {
-                // make sure this JSON is in the format we expect
-                // convert data to json
-                if let json = try JSONSerialization.jsonObject(with: data, options: []) as? [String: String] {
-                    // try to read out a dictionary
-                    //for some reason serial number isn't needed but it doesn't work unless it has a value
-                    let formattedJSON: [String: String] = ["machineID": json["X-Apple-I-MD-M"]!, "oneTimePassword": json["X-Apple-I-MD"]!, "localUserID": json["X-Apple-I-MD-LU"]!, "routingInfo": json["X-Apple-I-MD-RINFO"]!, "deviceUniqueIdentifier": json["X-Mme-Device-Id"]!, "deviceDescription": json["X-MMe-Client-Info"]!, "date": json["X-Apple-I-Client-Time"]!, "locale": json["X-Apple-Locale"]!, "timeZone": json["X-Apple-I-TimeZone"]!, "deviceSerialNumber": "1"]
-                    
-                    if let anisette = ALTAnisetteData(json: formattedJSON) {
-                        DLOG("Anisette used: %@", formattedJSON)
-                        self.finish(.success(anisette))
-                    }
+        if let identifier = Keychain.shared.identifier,
+           let adiPb = Keychain.shared.adiPb {
+            fetchAnisetteV3(identifier, adiPb)
+        } else {
+            provision()
+        }
+    }
+    
+    // MARK: - COMMON
+    
+    func extractAnisetteData(_ data: Data, _ response: HTTPURLResponse?, v3: Bool) throws {
+        // make sure this JSON is in the format we expect
+        // convert data to json
+        if let json = try JSONSerialization.jsonObject(with: data, options: []) as? [String: String] {
+            if v3 {
+                if json["result"] == "GetHeadersError" {
+                    let message = json["message"]
+                    print("Error getting V3 headers: \(message ?? "no message")")
+                    if let message = message,
+                       message.contains("-45061") {
+                        print("Error message contains -45061 (not provisioned), resetting adi.pb and retrying")
+                        Keychain.shared.adiPb = nil
+                        return provision()
+                    } else { throw OperationError.anisetteV3Error(message: message ?? "Unknown error") }
                 }
+            }
+            
+            // try to read out a dictionary
+            // for some reason serial number isn't needed but it doesn't work unless it has a value
+            var formattedJSON: [String: String] = ["deviceSerialNumber": "0"]
+            if let machineID = json["X-Apple-I-MD-M"] { formattedJSON["machineID"] = machineID }
+            if let oneTimePassword = json["X-Apple-I-MD"] { formattedJSON["oneTimePassword"] = oneTimePassword }
+            if let routingInfo = json["X-Apple-I-MD-RINFO"] { formattedJSON["routingInfo"] = routingInfo }
+            
+            if v3 {
+                formattedJSON["deviceDescription"] = self.clientInfo!
+                formattedJSON["localUserID"] = self.mdLu!
+                formattedJSON["deviceUniqueIdentifier"] = self.deviceId!
+                
+                // Generate date stuff on client
+                let formatter = DateFormatter()
+                formatter.locale = Locale(identifier: "en_US_POSIX")
+                formatter.calendar = Calendar(identifier: .gregorian)
+                formatter.timeZone = TimeZone.current
+                formatter.dateFormat = "yyyy-MM-dd'T'HH:mm:ss'Z'"
+                let dateString = formatter.string(from: Date())
+                formattedJSON["date"] = dateString
+                formattedJSON["locale"] = Locale.current.identifier
+                formattedJSON["timeZone"] = TimeZone.current.abbreviation()
+            } else {
+                if let deviceDescription = json["X-MMe-Client-Info"] { formattedJSON["deviceDescription"] = deviceDescription }
+                if let localUserID = json["X-Apple-I-MD-LU"] { formattedJSON["localUserID"] = localUserID }
+                if let deviceUniqueIdentifier = json["X-Mme-Device-Id"] { formattedJSON["deviceUniqueIdentifier"] = deviceUniqueIdentifier }
+                
+                if let date = json["X-Apple-I-Client-Time"] { formattedJSON["date"] = date }
+                if let locale = json["X-Apple-Locale"] { formattedJSON["locale"] = locale }
+                if let timeZone = json["X-Apple-I-TimeZone"] { formattedJSON["timeZone"] = timeZone }
+            }
+            
+            if let response = response,
+               let version = response.value(forHTTPHeaderField: "Implementation-Version") {
+                print("Implementation-Version: \(version)")
+            } else { print("No Implementation-Version header") }
+            
+            print("Anisette used: \(formattedJSON)")
+            print("Original JSON: \(json)")
+            if let anisette = ALTAnisetteData(json: formattedJSON) {
+                print("Anisette is valid!")
+                self.finish(.success(anisette))
+            } else {
+                print("Anisette is invalid!!!!")
+                if v3 {
+                    throw OperationError.anisetteV3Error(message: "Invalid anisette (the returned data may not have all the required fields)")
+                } else {
+                    throw OperationError.anisetteV1Error(message: "Invalid anisette (the returned data may not have all the required fields)")
+                }
+            }
+        } else {
+            if v3 {
+                throw OperationError.anisetteV3Error(message: "Invalid anisette (the returned data may not be in JSON)")
+            } else {
+                throw OperationError.anisetteV1Error(message: "Invalid anisette (the returned data may not be in JSON)")
+            }
+        }
+    }
+    
+    // MARK: - V1
+    
+    func handleV1() {
+        print("Server is V1")
+        
+        if UserDefaults.shared.trustedServerURL == AnisetteManager.currentURLString {
+            print("Server has already been trusted, fetching anisette")
+            return self.fetchAnisetteV1()
+        }
+        
+        print("Alerting user about outdated server")
+        let alert = UIAlertController(title: "WARNING: Outdated anisette server", message: "We've detected you are using an older anisette server. Using this server has a higher likelihood of locking your account and causing other issues. Are you sure you want to continue?", preferredStyle: UIAlertController.Style.alert)
+        alert.addAction(UIAlertAction(title: "Continue", style: UIAlertAction.Style.destructive, handler: { action in
+            print("Fetching anisette via V1")
+            UserDefaults.shared.trustedServerURL = AnisetteManager.currentURLString
+            self.fetchAnisetteV1()
+        }))
+        alert.addAction(UIAlertAction(title: "Cancel", style: UIAlertAction.Style.cancel, handler: { action in
+            print("Cancelled anisette operation")
+            self.finish(.failure(OperationError.cancelled))
+        }))
+
+        let keyWindow = UIApplication.shared.windows.filter { $0.isKeyWindow }.first
+
+        DispatchQueue.main.async {
+            if let presentingController = keyWindow?.rootViewController?.presentedViewController {
+                presentingController.present(alert, animated: true)
+            } else {
+                keyWindow?.rootViewController?.present(alert, animated: true)
+            }
+        }
+    }
+    
+    func fetchAnisetteV1() {
+        print("Fetching anisette V1")
+        URLSession.shared.dataTask(with: self.url!) { data, response, error in
+            do {
+                guard let data = data, error == nil else { throw OperationError.anisetteV1Error(message: "Unable to fetch data\(error != nil ? " (\(error!.localizedDescription))" : "")") }
+                
+                try self.extractAnisetteData(data, response as? HTTPURLResponse, v3: false)
             } catch let error as NSError {
                 print("Failed to load: \(error.localizedDescription)")
                 self.finish(.failure(error))
             }
-            
+        }.resume()
+    }
+    
+    // MARK: - V3: PROVISIONING
+    
+    func provision() {
+        fetchClientInfo {
+            print("Getting provisioning URLs")
+            var request = self.buildAppleRequest(url: URL(string: "https://gsa.apple.com/grandslam/GsService2/lookup")!)
+            request.httpMethod = "GET"
+            URLSession.shared.dataTask(with: request) { data, response, error in
+                if let data = data,
+                   let plist = try? PropertyListSerialization.propertyList(from: data, format: nil) as? Dictionary<String, Dictionary<String, Any>>,
+                   let startProvisioningString = plist["urls"]?["midStartProvisioning"] as? String,
+                   let startProvisioningURL = URL(string: startProvisioningString),
+                   let endProvisioningString = plist["urls"]?["midFinishProvisioning"] as? String,
+                   let endProvisioningURL = URL(string: endProvisioningString) {
+                    self.startProvisioningURL = startProvisioningURL
+                    self.endProvisioningURL = endProvisioningURL
+                    print("startProvisioningURL: \(self.startProvisioningURL!.absoluteString)")
+                    print("endProvisioningURL: \(self.endProvisioningURL!.absoluteString)")
+                    print("Starting a provisioning session")
+                    self.startProvisioningSession()
+                } else {
+                    print("Apple didn't give valid URLs! Got response: \(String(data: data ?? Data("nothing".utf8), encoding: .utf8) ?? "not utf8")")
+                    self.finish(.failure(OperationError.provisioningError(result: "Apple didn't give valid URLs. Please try again later", message: nil)))
+                }
+            }.resume()
+        }
+    }
+    
+    func startProvisioningSession() {
+        let provisioningSessionURL = self.url!.appendingPathComponent("v3").appendingPathComponent("provisioning_session")
+        var wsRequest = URLRequest(url: provisioningSessionURL)
+        wsRequest.timeoutInterval = 5
+        self.socket = WebSocket(request: wsRequest)
+        self.socket.delegate = self
+        self.socket.connect()
+    }
+    
+    func didReceive(event: WebSocketEvent, client: WebSocket) {
+        switch event {
+        case .text(let string):
+            do {
+                if let json = try JSONSerialization.jsonObject(with: string.data(using: .utf8)!, options: []) as? [String: Any] {
+                    guard let result = json["result"] as? String else {
+                        print("The server didn't give us a result")
+                        client.disconnect(closeCode: 0)
+                        self.finish(.failure(OperationError.provisioningError(result: "The server didn't give us a result", message: nil)))
+                        return
+                    }
+                    print("Received result: \(result)")
+                    switch result {
+                    case "GiveIdentifier":
+                        print("Giving identifier")
+                        client.json(["identifier": Keychain.shared.identifier!])
+                        
+                    case "GiveStartProvisioningData":
+                        print("Getting start provisioning data")
+                        let body = [
+                            "Header": [String: Any](),
+                            "Request": [String: Any](),
+                        ]
+                        var request = self.buildAppleRequest(url: self.startProvisioningURL!)
+                        request.httpMethod = "POST"
+                        request.httpBody = try! PropertyListSerialization.data(fromPropertyList: body, format: .xml, options: 0)
+                        URLSession.shared.dataTask(with: request) { data, response, error in
+                            if let data = data,
+                               let plist = try? PropertyListSerialization.propertyList(from: data, format: nil) as? Dictionary<String, Dictionary<String, Any>>,
+                               let spim = plist["Response"]?["spim"] as? String {
+                                print("Giving start provisioning data")
+                                client.json(["spim": spim])
+                            } else {
+                                print("Apple didn't give valid start provisioning data! Got response: \(String(data: data ?? Data("nothing".utf8), encoding: .utf8) ?? "not utf8")")
+                                client.disconnect(closeCode: 0)
+                                self.finish(.failure(OperationError.provisioningError(result: "Apple didn't give valid start provisioning data. Please try again later", message: nil)))
+                            }
+                        }.resume()
+                        
+                    case "GiveEndProvisioningData":
+                        print("Getting end provisioning data")
+                        guard let cpim = json["cpim"] as? String else {
+                            print("The server didn't give us a cpim")
+                            client.disconnect(closeCode: 0)
+                            self.finish(.failure(OperationError.provisioningError(result: "The server didn't give us a cpim", message: nil)))
+                            return
+                        }
+                        let body = [
+                            "Header": [String: Any](),
+                            "Request": [
+                                "cpim": cpim,
+                            ],
+                        ]
+                        var request = self.buildAppleRequest(url: self.endProvisioningURL!)
+                        request.httpMethod = "POST"
+                        request.httpBody = try! PropertyListSerialization.data(fromPropertyList: body, format: .xml, options: 0)
+                        URLSession.shared.dataTask(with: request) { data, response, error in
+                            if let data = data,
+                               let plist = try? PropertyListSerialization.propertyList(from: data, format: nil) as? Dictionary<String, Dictionary<String, Any>>,
+                               let ptm = plist["Response"]?["ptm"] as? String,
+                               let tk = plist["Response"]?["tk"] as? String {
+                                print("Giving end provisioning data")
+                                client.json(["ptm": ptm, "tk": tk])
+                            } else {
+                                print("Apple didn't give valid end provisioning data! Got response: \(String(data: data ?? Data("nothing".utf8), encoding: .utf8) ?? "not utf8")")
+                                client.disconnect(closeCode: 0)
+                                self.finish(.failure(OperationError.provisioningError(result: "Apple didn't give valid end provisioning data. Please try again later", message: nil)))
+                            }
+                        }.resume()
+                        
+                    case "ProvisioningSuccess":
+                        print("Provisioning succeeded!")
+                        client.disconnect(closeCode: 0)
+                        guard let adiPb = json["adi_pb"] as? String else {
+                            print("The server didn't give us an adi.pb file")
+                            self.finish(.failure(OperationError.provisioningError(result: "The server didn't give us an adi.pb file", message: nil)))
+                            return
+                        }
+                        Keychain.shared.adiPb = adiPb
+                        self.fetchAnisetteV3(Keychain.shared.identifier!, Keychain.shared.adiPb!)
+                        
+                    default:
+                        if result.contains("Error") || result.contains("Invalid") || result == "ClosingPerRequest" || result == "Timeout" || result == "TextOnly" {
+                            print("Failing because of \(result)")
+                            self.finish(.failure(OperationError.provisioningError(result: result, message: json["message"] as? String)))
+                        }
+                    }
+                }
+            } catch let error as NSError {
+                print("Failed to handle text: \(error.localizedDescription)")
+                self.finish(.failure(OperationError.provisioningError(result: error.localizedDescription, message: nil)))
+            }
+            
+        case .connected:
+            print("Connected")
+            
+        case .disconnected(let string, let code):
+            print("Disconnected: \(code); \(string)")
+            
+        case .error(let error):
+            print("Got error: \(String(describing: error))")
+            
+        default:
+            print("Unknown event: \(event)")
+        }
+    }
+    
+    func buildAppleRequest(url: URL) -> URLRequest {
+        var request = URLRequest(url: url)
+        request.setValue(self.clientInfo!, forHTTPHeaderField: "X-Mme-Client-Info")
+        request.setValue(self.userAgent!, forHTTPHeaderField: "User-Agent")
+        request.setValue("text/x-xml-plist", forHTTPHeaderField: "Content-Type")
+        request.setValue("*/*", forHTTPHeaderField: "Accept")
+
+        request.setValue(self.mdLu!, forHTTPHeaderField: "X-Apple-I-MD-LU")
+        request.setValue(self.deviceId!, forHTTPHeaderField: "X-Mme-Device-Id")
+
+        let formatter = DateFormatter()
+        formatter.locale = Locale(identifier: "en_US_POSIX")
+        formatter.calendar = Calendar(identifier: .gregorian)
+        formatter.timeZone = TimeZone(identifier: "UTC")
+        formatter.dateFormat = "yyyy-MM-dd'T'HH:mm:ss'Z'"
+        let dateString = formatter.string(from: Date())
+        request.setValue(dateString, forHTTPHeaderField: "X-Apple-I-Client-Time")
+        request.setValue(Locale.current.identifier, forHTTPHeaderField: "X-Apple-Locale")
+        request.setValue(TimeZone.current.abbreviation(), forHTTPHeaderField: "X-Apple-I-TimeZone")
+        return request
+    }
+    
+    // MARK: - V3: FETCHING
+    
+    func fetchClientInfo(_ callback: @escaping () -> Void) {
+        if  self.clientInfo != nil &&
+                self.userAgent != nil &&
+                self.mdLu != nil &&
+                self.deviceId != nil &&
+                Keychain.shared.identifier != nil {
+            print("Skipping client_info fetch since all the properties we need aren't nil")
+            return callback()
+        }
+        print("Trying to get client_info")
+        let clientInfoURL = self.url!.appendingPathComponent("v3").appendingPathComponent("client_info")
+        URLSession.shared.dataTask(with: clientInfoURL) { data, response, error in
+            do {
+                guard let data = data, error == nil else {
+                    return self.finish(.failure(OperationError.anisetteV3Error(message: "Couldn't fetch client info. The server may be down\(error != nil ? " (\(error!.localizedDescription))" : "")")))
+                }
+                
+                if let json = try JSONSerialization.jsonObject(with: data, options: []) as? [String: String] {
+                    if let clientInfo = json["client_info"] {
+                        print("Server is V3")
+                        
+                        self.clientInfo = clientInfo
+                        self.userAgent = json["user_agent"]!
+                        print("Client-Info: \(self.clientInfo!)")
+                        print("User-Agent: \(self.userAgent!)")
+                        
+                        if Keychain.shared.identifier == nil {
+                            print("Generating identifier")
+                            var bytes = [Int8](repeating: 0, count: 16)
+                            let status = SecRandomCopyBytes(kSecRandomDefault, bytes.count, &bytes)
+                            
+                            if status != errSecSuccess {
+                                print("ERROR GENERATING IDENTIFIER!!! \(status)")
+                                return self.finish(.failure(OperationError.provisioningError(result: "Couldn't generate identifier", message: nil)))
+                            }
+                            
+                            Keychain.shared.identifier = Data(bytes: &bytes, count: bytes.count).base64EncodedString()
+                        }
+                        
+                        let decoded = Data(base64Encoded: Keychain.shared.identifier!)!
+                        self.mdLu = decoded.sha256().hexEncodedString()
+                        print("X-Apple-I-MD-LU: \(self.mdLu!)")
+                        let uuid: UUID = decoded.object()
+                        self.deviceId = uuid.uuidString.uppercased()
+                        print("X-Mme-Device-Id: \(self.deviceId!)")
+                        
+                        callback()
+                    } else { self.handleV1() }
+                } else { self.finish(.failure(OperationError.anisetteV3Error(message: "Couldn't fetch client info. The returned data may not be in JSON"))) }
+            } catch let error as NSError {
+                print("Failed to load: \(error.localizedDescription)")
+                self.handleV1()
+            }
+        }.resume()
+    }
+    
+    func fetchAnisetteV3(_ identifier: String, _ adiPb: String) {
+        fetchClientInfo {
+            print("Fetching anisette V3")
+            var request = URLRequest(url: self.url!.appendingPathComponent("v3").appendingPathComponent("get_headers"))
+            request.httpMethod = "POST"
+            request.httpBody = try! JSONSerialization.data(withJSONObject: [
+                "identifier": identifier,
+                "adi_pb": adiPb
+            ], options: [])
+            request.setValue("application/json", forHTTPHeaderField: "Content-Type")
+            URLSession.shared.dataTask(with: request) { data, response, error in
+                do {
+                    guard let data = data, error == nil else { throw OperationError.anisetteV3Error(message: "Couldn't fetch anisette") }
+                    
+                    try self.extractAnisetteData(data, response as? HTTPURLResponse, v3: true)
+                } catch let error as NSError {
+                    print("Failed to load: \(error.localizedDescription)")
+                    self.finish(.failure(error))
+                }
+            }.resume()
         }
-        
-        task.resume()
     }
 }
+
+extension WebSocket {
+    func json(_ dictionary: [String: String]) {
+        let data = try! JSONSerialization.data(withJSONObject: dictionary, options: [])
+        self.write(string: String(data: data, encoding: .utf8)!)
+    }
+}
+
+extension Data {
+    // https://stackoverflow.com/a/25391020
+    func sha256() -> Data {
+        var hash = [UInt8](repeating: 0,  count: Int(CC_SHA256_DIGEST_LENGTH))
+        self.withUnsafeBytes {
+            _ = CC_SHA256($0.baseAddress, CC_LONG(self.count), &hash)
+        }
+        return Data(hash)
+    }
+    
+    // https://stackoverflow.com/a/40089462
+    func hexEncodedString() -> String {
+        return self.map { String(format: "%02hhX", $0) }.joined()
+    }
+    
+    // https://stackoverflow.com/a/59127761
+    func object<T>() -> T { self.withUnsafeBytes { $0.load(as: T.self) } }
+}

AltStore/Operations/OperationError.swift

@@ -34,6 +34,10 @@ enum OperationError: LocalizedError
     case openAppFailed(name: String)
     case missingAppGroup
     
+    case anisetteV1Error(message: String)
+    case provisioningError(result: String, message: String?)
+    case anisetteV3Error(message: String)
+    
     var failureReason: String? {
         switch self {
         case .unknown: return NSLocalizedString("An unknown error occured.", comment: "")
@@ -49,6 +53,9 @@ enum OperationError: LocalizedError
         case .openAppFailed(let name): return String(format: NSLocalizedString("SideStore was denied permission to launch %@.", comment: ""), name)
         case .missingAppGroup: return NSLocalizedString("SideStore's shared app group could not be found.", comment: "")
         case .maximumAppIDLimitReached: return NSLocalizedString("Cannot register more than 10 App IDs.", comment: "")
+        case .anisetteV1Error(let message): return String(format: NSLocalizedString("An error occurred when getting anisette data from a V1 server: %@. Try using another anisette server.", comment: ""), message)
+        case .provisioningError(let result, let message): return String(format: NSLocalizedString("An error occurred when provisioning: %@%@. Please try again. If the issue persists, report it on GitHub Issues!", comment: ""), result, message != nil ? (" (" + message! + ")") : "")
+        case .anisetteV3Error(let message): return String(format: NSLocalizedString("An error occurred when getting anisette data from a V3 server: %@. Please try again. If the issue persists, report it on GitHub Issues!", comment: ""), message)
         }
     }
     

AltStore/Settings/Settings.storyboard

@@ -21,7 +21,7 @@
                         <color key="tintColor" white="1" alpha="1" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
                         <color key="separatorColor" white="1" alpha="0.25" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
                         <label key="tableFooterView" opaque="NO" userInteractionEnabled="NO" contentMode="left" horizontalHuggingPriority="251" verticalHuggingPriority="251" text="SideStore 1.0" textAlignment="center" lineBreakMode="tailTruncation" baselineAdjustment="alignBaselines" adjustsFontSizeToFit="NO" id="bUR-rp-Nw2">
-                            <rect key="frame" x="0.0" y="1082" width="375" height="25"/>
+                            <rect key="frame" x="0.0" y="1194" width="375" height="25"/>
                             <autoresizingMask key="autoresizingMask" flexibleMaxX="YES" flexibleMaxY="YES"/>
                             <fontDescription key="fontDescription" type="system" pointSize="17"/>
                             <color key="textColor" white="1" alpha="0.69999999999999996" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
@@ -592,7 +592,7 @@
                                             <rect key="frame" x="0.0" y="0.0" width="375" height="51"/>
                                             <autoresizingMask key="autoresizingMask"/>
                                             <subviews>
-                                                <label opaque="NO" userInteractionEnabled="NO" contentMode="left" horizontalHuggingPriority="251" verticalHuggingPriority="251"  text="Reset Pairing File" textAlignment="natural" lineBreakMode="tailTruncation" baselineAdjustment="alignBaselines" adjustsFontSizeToFit="NO" translatesAutoresizingMaskIntoConstraints="NO" id="ysS-9s-dXm">
+                                                <label opaque="NO" userInteractionEnabled="NO" contentMode="left" horizontalHuggingPriority="251" verticalHuggingPriority="251" text="Reset Pairing File" textAlignment="natural" lineBreakMode="tailTruncation" baselineAdjustment="alignBaselines" adjustsFontSizeToFit="NO" translatesAutoresizingMaskIntoConstraints="NO" id="ysS-9s-dXm">
                                                     <rect key="frame" x="30" y="15.5" width="140" height="20.5"/>
                                                     <fontDescription key="fontDescription" type="boldSystem" pointSize="17"/>
                                                     <color key="textColor" white="1" alpha="1" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
@@ -618,9 +618,42 @@
                                             <userDefinedRuntimeAttribute type="boolean" keyPath="isSelectable" value="YES"/>
                                         </userDefinedRuntimeAttributes>
                                     </tableViewCell>
-                                    <tableViewCell clipsSubviews="YES" contentMode="scaleToFill" preservesSuperviewLayoutMargins="YES" selectionStyle="default" indentationWidth="10" rowHeight="51" id="fj2-EJ-Z98" customClass="InsetGroupTableViewCell" customModule="SideStore" customModuleProvider="target">
+                                    <tableViewCell clipsSubviews="YES" contentMode="scaleToFill" preservesSuperviewLayoutMargins="YES" selectionStyle="default" indentationWidth="10" rowHeight="51" id="e7s-hL-kv9" customClass="InsetGroupTableViewCell" customModule="SideStore" customModuleProvider="target">
                                         <rect key="frame" x="0.0" y="1074" width="375" height="51"/>
                                         <autoresizingMask key="autoresizingMask"/>
+                                        <tableViewCellContentView key="contentView" opaque="NO" clipsSubviews="YES" multipleTouchEnabled="YES" contentMode="center" preservesSuperviewLayoutMargins="YES" insetsLayoutMarginsFromSafeArea="NO" tableViewCell="e7s-hL-kv9" id="yjL-Mu-HTk">
+                                            <rect key="frame" x="0.0" y="0.0" width="375" height="51"/>
+                                            <autoresizingMask key="autoresizingMask"/>
+                                            <subviews>
+                                                <label opaque="NO" userInteractionEnabled="NO" contentMode="left" horizontalHuggingPriority="251" verticalHuggingPriority="251" text="Reset adi.pb" textAlignment="natural" lineBreakMode="tailTruncation" baselineAdjustment="alignBaselines" adjustsFontSizeToFit="NO" translatesAutoresizingMaskIntoConstraints="NO" id="eds-Dj-36y">
+                                                    <rect key="frame" x="30" y="15.5" width="102" height="20.5"/>
+                                                    <fontDescription key="fontDescription" type="boldSystem" pointSize="17"/>
+                                                    <color key="textColor" white="1" alpha="1" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
+                                                    <nil key="highlightedColor"/>
+                                                </label>
+                                                <imageView clipsSubviews="YES" userInteractionEnabled="NO" contentMode="scaleAspectFit" horizontalHuggingPriority="251" verticalHuggingPriority="251" image="Next" translatesAutoresizingMaskIntoConstraints="NO" id="0dh-yd-7i9">
+                                                    <rect key="frame" x="327" y="16.5" width="18" height="18"/>
+                                                </imageView>
+                                            </subviews>
+                                            <constraints>
+                                                <constraint firstItem="0dh-yd-7i9" firstAttribute="centerY" secondItem="yjL-Mu-HTk" secondAttribute="centerY" id="8OI-PI-weT"/>
+                                                <constraint firstItem="eds-Dj-36y" firstAttribute="leading" secondItem="yjL-Mu-HTk" secondAttribute="leadingMargin" id="BqG-Ef-xQo"/>
+                                                <constraint firstAttribute="trailingMargin" secondItem="0dh-yd-7i9" secondAttribute="trailing" id="TFW-nu-jo4"/>
+                                                <constraint firstItem="eds-Dj-36y" firstAttribute="centerY" secondItem="yjL-Mu-HTk" secondAttribute="centerY" id="YiJ-OF-FXE"/>
+                                            </constraints>
+                                        </tableViewCellContentView>
+                                        <color key="backgroundColor" white="1" alpha="0.14999999999999999" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
+                                        <edgeInsets key="layoutMargins" top="8" left="30" bottom="8" right="30"/>
+                                        <userDefinedRuntimeAttributes>
+                                            <userDefinedRuntimeAttribute type="number" keyPath="style">
+                                                <integer key="value" value="2"/>
+                                            </userDefinedRuntimeAttribute>
+                                            <userDefinedRuntimeAttribute type="boolean" keyPath="isSelectable" value="YES"/>
+                                        </userDefinedRuntimeAttributes>
+                                    </tableViewCell>
+                                    <tableViewCell clipsSubviews="YES" contentMode="scaleToFill" preservesSuperviewLayoutMargins="YES" selectionStyle="default" indentationWidth="10" rowHeight="51" id="fj2-EJ-Z98" customClass="InsetGroupTableViewCell" customModule="SideStore" customModuleProvider="target">
+                                        <rect key="frame" x="0.0" y="1125" width="375" height="51"/>
+                                        <autoresizingMask key="autoresizingMask"/>
                                         <tableViewCellContentView key="contentView" opaque="NO" clipsSubviews="YES" multipleTouchEnabled="YES" contentMode="center" preservesSuperviewLayoutMargins="YES" insetsLayoutMarginsFromSafeArea="NO" tableViewCell="fj2-EJ-Z98" id="BcT-Fs-KNg">
                                             <rect key="frame" x="0.0" y="0.0" width="375" height="51"/>
                                             <autoresizingMask key="autoresizingMask"/>

AltStore/Settings/SettingsViewController.swift

@@ -54,6 +54,7 @@ extension SettingsViewController
         case refreshAttempts
         case errorLog
         case resetPairingFile
+        case resetAdiPb
         case advancedSettings
     }
 }
@@ -530,6 +531,25 @@ extension SettingsViewController
                 alertController.popoverPresentationController?.sourceRect = self.tableView.rectForRow(at: indexPath)
                 self.present(alertController, animated: true)
                 self.tableView.deselectRow(at: indexPath, animated: true)
+            case .resetAdiPb:
+                let alertController = UIAlertController(
+                    title: NSLocalizedString("Are you sure you want to reset the adi.pb file?", comment: ""),
+                    message: NSLocalizedString("The adi.pb file is used to generate anisette data, which is required to log into an Apple ID. If you are having issues with account related things, you can try this. However, you will be required to do 2FA again. This will do nothing if you are using an older anisette server.", comment: ""),
+                    preferredStyle: UIAlertController.Style.actionSheet)
+                
+                alertController.addAction(UIAlertAction(title: NSLocalizedString("Reset adi.pb", comment: ""), style: .destructive){ _ in
+                    if Keychain.shared.adiPb != nil {
+                        Keychain.shared.adiPb = nil
+                        print("Cleared adi.pb from keychain")
+                    }
+                    self.tableView.deselectRow(at: indexPath, animated: true)
+                })
+                alertController.addAction(.cancel)
+                //Fix crash on iPad
+                alertController.popoverPresentationController?.sourceView = self.tableView
+                alertController.popoverPresentationController?.sourceRect = self.tableView.rectForRow(at: indexPath)
+                self.present(alertController, animated: true)
+                self.tableView.deselectRow(at: indexPath, animated: true)
             case .advancedSettings:
                 // Create the URL that deep links to your app's custom settings.
                 if let url = URL(string: UIApplication.openSettingsURLString) {

AltStoreCore/Components/Keychain.swift

@@ -77,6 +77,12 @@ public class Keychain
     @KeychainItem(key: "patreonAccountID")
     public var patreonAccountID: String?
     
+    @KeychainItem(key: "identifier")
+    public var identifier: String?
+    
+    @KeychainItem(key: "adiPb")
+    public var adiPb: String?
+    
     private init()
     {
     }

AltStoreCore/Extensions/UserDefaults+AltStore.swift

@@ -42,6 +42,7 @@ public extension UserDefaults
     @NSManaged var patronsRefreshID: String?
     
     @NSManaged var trustedSourceIDs: [String]?
+    @NSManaged var trustedServerURL: String?
     
     var activeAppsLimit: Int? {
         get {