[obsim]

Can you explain how it is possible to generate secure tokens? I can't find anything related to it from the iCloud documentations.

[philo23]

I'm guessing, that they simulate an iCloud login and then store the cookie on their servers and then use that cookie to login in the future?

But thinking about it, it's a CalDAV server which normally uses email + password to authenticate..