about identification host

[sms-ebarbeito]

Hello, I have a quick question, I have a docker running on my linux laptop, the docker compose is like this:

version: '2'
services:
  photos-sync:
    image: steilerdev/icloud-photos-sync:latest
    container_name: photos-sync
    ports:
      - '19000:80'
    user: 1000:1000 
    environment:
      APPLE_ID_USER: "[email protected]"
      APPLE_ID_PWD: "xxxxxxxx"
      TZ: "America/Buenos_Aires"                                                       
      SCHEDULE: "0 * * * *"
      ENABLE_CRASH_REPORTING: true
    volumes:
      - /home/xxxxx/Pictures/icloud:/opt/icloud-photos-library

every time that I restart the container or restart the laptop, on next execution event I receive a mail from apple saying that my Id was used to start session on a web explorer. There is a way to avoid this mails such a browser identification or something?

[steilerDev]

Hey @sms-ebarbeito - this behaviour is intentional.

I'm not persisting the necessary cookies (whichd could avoid triggering this message) to disk - they will however be persisted in between scheduled executions (in memory). I haven't implemented this persistence, because if cookies, credentials and trust token are written to disk, an attacker could grab them (if they get access to your data somehow) and authenticate against the iCloud API without you noticing.

By receiving these mail notifications, you are made aware of any activity, while not interupting the actual execution of the tool.