Update your web browser issue.

EAPTCB

Diarium version: 2.9.39.0
OS + version: Windows 10 22H2 Windows Feature Experience Pack 120.2212.4190.0

I have recently added security keys to my iphone 14 pro max (ios 16.3) and when I tried syncing Diarium I got a message about a browser needing updates. I checked my broswer (Firefox latest, no updates) and even tried using Chrome, but I was still getting the message. I have attached a screen shot.

timo

The webview that Diarium uses internally is a very old browser (Internet Explorer) and some services don't accept these any more. E.g. I already use another browser window for the Dropbox & Fitbit login.
While I was not able to reproduce the error that you posted a screenshot of (perhaps because I don't have any security keys added), I will switch the iCloud login also to the new webview. Please let me know if that fixes the issue in the next app update.

EAPTCB

@timo While I'm waiting for the update I wonder if you could answer this question for me - If I create journal entries on Windows version and different entries on iPhone version once you fix the browswer update issue and the sync works again, will everything sync correctly or will there be isssues because I used two different platforms?

timo

There should be no issues

EAPTCB

@timo Thanks for the latest update, BUT...
There is now a new issue, the "contiue" button doesn't seem to work?! When I get to the sync options screen and after chosing iCloud and logging in - I can not proceed to very with my security key. I have included a screen shot.

I must also add that I tried putting my security key in usb of my PC before, during and after the prompt window above appeared (obviously three different attempts) 🙁

EAPTCB

As a temporary workaround, I removed my security keys to enable sync and then I added my security keys again. This should work OK until iCloud asks for my password again in a month for security.

Also, on another note regarding the latest update you released (for windows) the sync seems to be slower for me since this update, and I was also getting error messages about large file attachments and slow internet speed after my PC failed to sync. I deleted a recent video attachment and that seemed to work, but again, it feels slow

Incidently, the video was small and my broadband speed is around 360Mbps

timo

The sync (especially the sync download) should be faster with the last update(s).
I think the error messages and problems you encountered were caused by your internet connection or iCloud being slow.

Do you think there is any way to add security keys to my account as well (without having to buy hardware) so I can try reproduce the issue? Or can you point me to a cheap device that I could buy and try with?
Do other buttons in the process of authenticating work and is it just that one "continue" button?

EAPTCB

timo Do you think there is any way to add security keys to my account as well (without having to buy hardware) so I can try reproduce the issue?

I'm afraid not. By the sheer nature of security keys you need to physically have them with you and touch/press them to "unlock" your account.

timo can you point me to a cheap device that I could buy and try with?

I use Yubico's Yubikey they are arguably the best security keys on the market but they come at a premium. This is made even more expensive, since it is always recommended to buy keys in pairs. (for obvious reasons) I got mine from Amazon UK Another option is Google. They make security keys too, which are 'only' £30 GBP plus you get a pair of them instead of just one.

If you are trying to reproduce the exact issue as I have then I would assume you should be using the exact same key as I do, the Yubikey, but i'm not here trying to spend your money for you! it's up to you which (if any) you decide to go for.

timo Do other buttons in the process of authenticating work and is it just that one "continue" button?

The username and password to log into iCloud buttons (actually they are arrows) worked, and after submitting my log in credentionals the screen pictured above in my previous post pops up and although the button shows the "pressing" action it does nothing. I also tried hitting the return (enter) key too.

timo

Thanks for the info.
I hope that it shouldn't matter too much which particular device I would be buying as the problem hopefully is not dependent on the particular device, but rather what URL the authentication process navigates to in the browser. So if the problem would only occur for Yubikey, but not others, I would see the issue rather at Yubikeys side.

I might buy the Google keys once I find time. If other users are coming forward with the same problem, this might speed up the process.
If you have time, could you check if the login works in Diarium when using an Android phone or when disbaling iCloud Drive on your Apple device and then logging in to the Cloud Sync? (Diarium can then no longer access the built-in iCloud APIs will then use a fallback and also try to login through the browser)

EAPTCB

Unfortunately, I don't have access to or own an Android phone.

I have tried disabling iCloud Drive on my iPhone and also turning off syn in Diarium etc but my iPhone just automatically signs back in without verification since its a "trusted device" as a result of the added security measures in place. It did fallback on the browser though as you stated.

I thought I would try a few things out to help in maybe troubleshooting. here's what I tried:
I turned off sync and then when I turned it back on again the windows version started syncing! then I saw the "reset credentials" option - I hit that, tried signing into iCloud and I was then faced with the same issue.

I didn't have iCloud for windows installed on my system so I downloaded it and installed it (maybe it would somehow help with the issue - I know, I was clutching at straws here) anyway, it installed, i ran it, logged in and I got the attached error message - maybe this would help somehow?

timo

The iCloud Windows program is unrelated to the problem we are facing, Diarium is not communicating with it. Just looks like that program doesn't support that way of authenticating either at the moment.

EAPTCB

I have another similar issue now...
So, after all the issues I faced syncing as discussed above in my previous posts, I decided to remove my security keys. Which wasn't ideal, but nevertheless I did it for compatibility sakes.

I recently turned on "Advanced Data Protection" from my iPhone so that all my data including iCloud sync data has end-to-end encryption (which is something I really wanted) it works well with the Diarium App on iPhone. Unfortunately, the Windows version of Diarium refuses to play nice with this feature too!

I created a journal entry on Windows Diarium hit the sync button and I was presented with the log-in screen for iCloud.com I filled in my log in information, completed the standard 2FA procedure and the screen disappeared as it usually does signifying that I am now logged in. However, when I hit the sync button, the iCloud login screen appears again! so I fill in my details again, hit submit, again, the window disappears, then when I press sync, the "Diarium Sync" window appears asking me to chose a sync provider!

Anything to do with security and syncing does not work well with windows - this is most frustrating. I've attached the screen shots for reference.

timo

iOS and macOS can use the native iCloud APIs which do work with the "Advanced Data Protection". The web APIs, which Windows and Android use (have to use) do not work with that. In a future update I hope to detect this case and give a better error to the user

Marik

Hi @timo, I've recently started using the app on Android with Google Drive sync enabled, and I just bought it on Windows as well. I tried to enable cloud sync for Google Drive on the Windows app, but when I attempted to log in to my Google account with my attached Yubikey security key, I encountered an issue.

Typically, when I select "external security key" as the login option, a screen pops up asking me to physically touch my key to unlock it:

However, instead of proceeding as expected, I received an error message stating "Something went wrong."

I’ve tried the process several times, but the issue persists. Could you please help me resolve this? Any advice or troubleshooting steps would be greatly appreciated!

Diarium version: 3.0.88.0
Windows 10 22H2

timo

Marik I was able to reproduce the issue. I assume the root cause is the sandboxed architecure of UWP, the technology I am using to build Diarium, which causes the embedded web view control to not have sufficient permissions to launch the "Windows Security" dialog.

I also tested the authentication with Smart Card in a "WinUI" app - which is the technology I am planning to migrate the Diarium app to at some point in the future - and it worked there. So until then you will have to continue to use other ways of authenticating

Marik

I found a workaround by clicking "Try another way" and proceeding with the option to sign in using a one-time passkey