Fix App Store auth endpoint handling

[b-nnett]

Summary

Apple moved the App Store login endpoint and changed where authenticateAccount appears in the Bag response.

This patch updates login to:

• read authenticateAccount from both the Bag root and urlBag
• normalize native auth URLs to /auth/v1/native/fast/
• fall back to the native auth endpoint when Bag does not return one
• keep response metadata when XML decoding fails
• retry once with a native auth URL found in a non-plist response body

Notes

One detail from testing: https://auth.itunes.apple.com/auth/v1/native/fast returned an HTML redirect for me, while ...native/fast/ (with a trailing slash) reached MZAuth and completed login.

Validation

• go generate ./...
• go test ./...
• built the CLI locally
• confirmed ipatool auth login succeeds with a live Apple ID

[9021007]

not loving the AI, but I was able to log in, download an app, and install it.

[sheiy]

8:56PM DBG error="something went wrong" metadata={"Data":{"Account":{"Address":{"FirstName":"","LastName":""},"Email":""},"CustomerMessage":"","DirectoryServicesID":"","FailureType":"","PasswordToken":""},"Headers":{"Apple-Originating-System":"MZAuth","Apple-Seq":"0.0","Apple-Timing-App":"0 ms","Apple-Tk":"false","B3":"838bf55b3aa8160278a71fd306d3edcf-13e24770614e9dbb","Cache-Control":"private, no-cache, no-store, no-transform, must-revalidate, max-age=0","Content-Length":"0","Date":"Fri, 12 Jun 2026 12:56:29 GMT","Edge-Control":"no-store","G":"t","Server":"Apple","Strict-Transport-Security":"max-age=31536000; includeSubdomains","Vary":"Origin","X-Apple-Jingle-Correlation-Key":"QOF7KWZ2VALAE6FHD7JQNU7NZ4","X-Apple-Lokamai-No-Cache":"true","X-Apple-Request-Uuid":"838bf55b-3aa8-1602-78a7-1fd306d3edcf","X-B3-Spanid":"13e24770614e9dbb","X-B3-Traceid":"838bf55b3aa8160278a71fd306d3edcf","X-Content-Type-Options":"nosniff","X-Daiquiri-Debug-Worker-Pid":"125847","X-Daiquiri-Instance":"daiquiri:11787001:mr47p00it-qujn07082302:7987:26RELEASE107:daiquiri-amp-commerce-l7services-int-003-mr","X-Frame-Options":"SAMEORIGIN","X-Responding-Instance":"MZAuth:10039:::","X-Runtime":"0.000852","X-Xss-Protection":"1; mode=block"},"StatusCode":200}
8:56PM ERR error="something went wrong" success=false
```  not work

[Den1136]

8:56PM DBG error="something went wrong" metadata={"Data":{"Account":{"Address":{"FirstName":"","LastName":""},"Email":""},"CustomerMessage":"","DirectoryServicesID":"","FailureType":"","PasswordToken":""},"Headers":{"Apple-Originating-System":"MZAuth","Apple-Seq":"0.0","Apple-Timing-App":"0 ms","Apple-Tk":"false","B3":"838bf55b3aa8160278a71fd306d3edcf-13e24770614e9dbb","Cache-Control":"private, no-cache, no-store, no-transform, must-revalidate, max-age=0","Content-Length":"0","Date":"Fri, 12 Jun 2026 12:56:29 GMT","Edge-Control":"no-store","G":"t","Server":"Apple","Strict-Transport-Security":"max-age=31536000; includeSubdomains","Vary":"Origin","X-Apple-Jingle-Correlation-Key":"QOF7KWZ2VALAE6FHD7JQNU7NZ4","X-Apple-Lokamai-No-Cache":"true","X-Apple-Request-Uuid":"838bf55b-3aa8-1602-78a7-1fd306d3edcf","X-B3-Spanid":"13e24770614e9dbb","X-B3-Traceid":"838bf55b3aa8160278a71fd306d3edcf","X-Content-Type-Options":"nosniff","X-Daiquiri-Debug-Worker-Pid":"125847","X-Daiquiri-Instance":"daiquiri:11787001:mr47p00it-qujn07082302:7987:26RELEASE107:daiquiri-amp-commerce-l7services-int-003-mr","X-Frame-Options":"SAMEORIGIN","X-Responding-Instance":"MZAuth:10039:::","X-Runtime":"0.000852","X-Xss-Protection":"1; mode=block"},"StatusCode":200}
8:56PM ERR error="something went wrong" success=false
```  not work

Can you please give me the exe file or from wherever can i run this fixed ipatool version? The exe file in release tab is old and doesn't work