Login problem without 2FA

[Hirishiolo]

Hello,

i can't login, I see in debug log this:

[2025-05-29 10:09:38,920] fb2cal INFO () Starting fb2cal v1.3.1 (Production) [https://git.io/fjMwr]
[2025-05-29 10:09:38,920] fb2cal INFO () This project is released under the GPLv3 license.
[2025-05-29 10:09:38,921] fb2cal INFO () Attemping to parse config file...
[2025-05-29 10:09:38,922] fb2cal INFO () Config successfully loaded.
[2025-05-29 10:09:38,922] fb2cal INFO () Logging level set to: DEBUG
[2025-05-29 10:09:38,922] fb2cal INFO () Attemping to authenticate with Facebook...
[2025-05-29 10:09:38,925] urllib3.connectionpool DEBUG (_new_conn) Starting new HTTPS connection (1): www.facebook.com:443
[2025-05-29 10:09:39,210] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "GET /login HTTP/1.1" 200 None
[2025-05-29 10:09:40,560] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "POST /login/device-based/regular/login/?login_attempt=1&lwv=100 HTTP/1.1" 302 0
[2025-05-29 10:09:40,748] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "GET /two_step_verification/authentication/?encrypted_context=LONGSTRING&flow=pre_authentication&next HTTP/1.1" 200 None
[2025-05-29 10:09:40,861] fb2cal DEBUG (authenticate
HTML CODE
[2025-05-29 10:18:11,432] fb2cal DEBUG (authenticate) Cookie(c_user) : None
[2025-05-29 10:18:11,433] fb2cal ERROR (authenticate) Failed to authenticate with Facebook with email EMAIL. Please check provided `email/password.

I don't have 2FA, but I see in the request "two_step_verification", can that be the problem?

[mobeigi]

Hi @Hirishiolo ,

Thanks for raising this issue.
It seems like Facebook has updated their login flow to be more JS heavy.

It seems to redirect the script to /two_step_verification if it suspects you are not human, and that pages probably verifies you are human via captcha or password confirmation etc.

Keep in mind this script does not use a JS engine so our approach is limited.

The proper fix over time is going to be to mitigate their 'bot detection' which is pretty tedious.

However, luckily I believe I have found a quick fix around the user-agent that seems to bypass this issue and works on my end.
I'll release an update shortly alongside changes to make this project work with Python 3.13+.

[mobeigi]

@Hirishiolo Version 1.3.2 has been released with some changes.

Can you try again with the new version and see if it's working for you now?

[Hirishiolo]

thank you very much!
It seems to bypass login but then;

[2025-05-30 22:53:47,161] fb2cal INFO () Starting fb2cal v1.3.2 (Production) [https://git.io/fjMwr]
[2025-05-30 22:53:47,161] fb2cal INFO () This project is released under the GPLv3 license.
[2025-05-30 22:53:47,162] fb2cal INFO () Attemping to parse config file...
[2025-05-30 22:53:47,163] fb2cal INFO () Config successfully loaded.
[2025-05-30 22:53:47,163] fb2cal INFO () Logging level set to: DEBUG
[2025-05-30 22:53:47,164] fb2cal INFO () Attemping to authenticate with Facebook...
[2025-05-30 22:53:47,167] urllib3.connectionpool DEBUG (_new_conn) Starting new HTTPS connection (1): www.facebook.com:443
[2025-05-30 22:53:51,518] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "GET /login HTTP/1.1" 200 None
[2025-05-30 22:53:54,526] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "POST /login/device-based/regular/login/?login_attempt=1&lwv=100 HTTP/1.1" 302 0
[2025-05-30 22:53:54,831] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "GET /?lsrc=lb HTTP/1.1" 200 None
[2025-05-30 22:53:55,300] fb2cal INFO () Successfully authenticated with Facebook.
[2025-05-30 22:53:55,301] fb2cal INFO () Fetching all Birthdays via BirthdayCometRootQuery endpoint...
[2025-05-30 22:53:55,560] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "GET /events/birthdays/ HTTP/1.1" 200 None
[2025-05-30 22:53:56,625] urllib3.connectionpool DEBUG (_make_request) https://www.facebook.com:443 "POST /api/graphql/ HTTP/1.1" 200 None

with error:

[mobeigi]

@Hirishiolo You should use Python version 3.9+. Older versions are not supported.

[Hirishiolo]

thank you very much! Now it is ok!

Unofortunately, I read that you remove google drive option, it was very useful!

Have a nice day!!!

[jacobokoenig]

@mobeigi is there any way to bring a human in the loop or wait for 2FA approval from the user? I suspect 90% of users will have 2FA enabled

[mobeigi]

@mobeigi is there any way to bring a human in the loop or wait for 2FA approval from the user? I suspect 90% of users will have 2FA enabled

Probably not unless someone wants to contribute a solution for it.
Adding a 2FA loop is tedious and prone to breaking regulary.