我之前逆向找登录接口都是随便输入一个账号然后点击登录查看是否能登。

不过经过测试发现，苹果会先调用一个接口查案这个账号是否是正常状态（如果被多次尝试登录或者有其他异常行为会被锁定），如果这个账号不存在也会返回错误的状态码。这个接口不需要密码。

接口地址：https://gsa.apple.com/grandslam/GsService2

HEADER 

X-MMe-Client-Info: <iPhone7,2> <iPhone OS;10.2;14C92> <com.apple.akd/1.0 (com.apple.akd/1.0)>

POST参数

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Header</key>

<dict>

<key>Version</key>

<string>1.0.1</string>

</dict>

<key>Request</key>

<dict>

<key>A2k</key>

<data>

************

</data>

<key>cpd</key>

<dict>

<key>AppleIDClientIdentifier</key>

<string>***********</string>

<key>X-Apple-I-Client-Time</key>

<string>2017-08-31T02:39:13Z</string>

<key>X-Apple-I-MD</key>

<string>***********</string>

<key>X-Apple-I-MD-M</key>

<string>***********</string>

<key>X-Apple-I-MD-RINFO</key>

<string>***********</string>

<key>X-Apple-I-SRL-NO</key>

<string>***********</string>

<key>X-Mme-Device-Id</key>

<string>***********</string>

<key>bootstrap</key>

<true/>

<key>capp</key>

<string>itunesstored</string>

<key>ckgen</key>

<true/>

<key>dc</key>

<string>#b4b5b9</string>

<key>dec</key>

<string>#3b3b3c</string>

<key>loc</key>

<string>zh_CN</string>

<key>pbe</key>

<false/>

<key>prtn</key>

<string>***********</string>

<key>svct</key>

<string>iTunes</string>

</dict>

<key>o</key>

<string>init</string>

<key>ps</key>

<array>

<string>s2k</string>

<string>s2k_fo</string>

</array>

<key>u</key>

<string>***********@qq.com</string>

</dict>

</dict>

</plist>