Search results for

“file uri scheme”

81,708 results found

Post

Replies

Boosts

Views

Activity

Reply to Authorizing a process to access a Private Key pushed via MDM
[quote='818622021, mobiusmoonglade, /thread/818622, /profile/mobiusmoonglade'] Is there a documented, MDM-compatible way to inject a specific binary path into the ACL of a private key? [/quote] No. Our direction in this space is the ManagedApp framework. It’s super cool. For a short intro, watch WWDC 2025 Session 203 Get to know the ManagedApp Framework. However, it won’t work for you because it’s not available on the Mac. Also note that its focus is on apps and app extensions, so it’s not clear how it would work for a launchd daemon. If you’d like to see ManagedApp support your use case, I recommend that you file an enhancement request describing your requirements. And if you do that, please post your bug number, just for the record. Beyond that, the only option that I’m aware for provisioning a daemon is via the super obscure mechanism [1]. However, that’s really meant for configuration settings rather than credentials. You could obviously jam a credential into it, but that has significant drawbac
Topic: Privacy & Security SubTopic: General Tags:
3w
Reply to Swift compiler fails in Release (-O) when using generic ObservableObject with @Published on iOS < 26 in Xcode 26.3
Right. That’s the Swift compiler crashing, which is something it should never do. I recommend that you file a bug about it. And as this is specific to Apple technologies, you’ll have to use Feedback Assistant rather than the Swift open source bug process. Please post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
MDM profile for a binary with multiple signatures
Hello, we use an MDM profile that enables FDA for our program. The Identifier is set to be the path to our program. We'd like to have a profile that allows multiple CodeSignatures. Our older programs are signed with a different certificate than the current ones. We tried deploying 2 profiles (one for the 'old certificate' signed binary and the other for the 'new certificate' signed binary). But it looks like that MacOS accepts only one. I have also tried to use ProfileCreator to generate a profile with 2 entries, but it fails to do it. Manually editing the XML file and adding new entries does not work either. I'd like to know if there's a workaround for this issue.
2
0
1.6k
3w
Notarization submissions stuck in "In Progress" for many hours with no logs
Hi, I currently have multiple notarization submissions that have been stuck in In Progress status for many hours without any updates. Here are several examples from my recent submissions: Submission IDs: 01f7a80e-a9cc-49b3-bb93-94b126cf3124 (a.dmg) 7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (a.dmg) 2b35ec79-d851-41d6-a900-788d4201a273 (b.dmg) 8194b1af-a270-4de9-92f1-ce2a8d4782f2 (c.dmg) 2608dcfc-7652-4efa-97e3-1749e7130dcb (d.zip) These submissions were created between March 11 and March 12, and all of them remain stuck in the In Progress state indefinitely. When checking using: xcrun notarytool history all recent submissions appear as: status: In Progress Additionally: No logs are available for these submissions. notarytool --wait eventually times out after 30 minutes with exit code 124. The app bundles are signed with a valid Developer ID Application certificate. All embedded frameworks and dylibs are individually signed using: --options runtime --timestamp Earlier submissions on the same day (for example df41010
1
0
128
3w
Notarization submissions stuck in "In Progress" for many hours with no logs
Hi, I currently have multiple notarization submissions that have been stuck in In Progress status for many hours without any updates. Here are several examples from my recent submissions: Submission IDs: 01f7a80e-a9cc-49b3-bb93-94b126cf3124 (AutoTyper.dmg) 7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (AutoTyper.dmg) 2b35ec79-d851-41d6-a900-788d4201a273 (autoclaw-0.2.15.dmg) 8194b1af-a270-4de9-92f1-ce2a8d4782f2 (z-code_0.21.2_aarch64.unnotarized.dmg) 2608dcfc-7652-4efa-97e3-1749e7130dcb (AutoGLM PC.zip) These submissions were created between March 11 and March 12, and all of them remain stuck in the In Progress state indefinitely. When checking using: xcrun notarytool history all recent submissions appear as: status: In Progress Additionally: No logs are available for these submissions. notarytool --wait eventually times out after 30 minutes with exit code 124. The app bundles are signed with a valid Developer ID Application certificate. All embedded frameworks and dylibs are individually signed using: --options runti
1
0
103
3w
Wrong appearance of decimalPad keyboard in dark mode
Hi. The following code causes UI mismatch on iOS26. Keyboard with type decimalPad and appearance as dark is displayed as popUp with wrong colors. Before iOS26 keyboard was regular with correct color scheme. Please advice either how to make the scheme correct or force to display regular keyboard instead of popup. class ViewController: UIViewController { @IBOutlet weak var textField: UITextField! override func viewDidLoad() { super.viewDidLoad() // Do any additional setup after loading the view. textField.keyboardType = .decimalPad textField.keyboardAppearance = .dark view.backgroundColor = .darkGray } }
6
0
344
3w
Unable to enable eligibility for External Purchase Link APIs — seeking clarification
Hello, I am currently implementing External Purchase Link and External Purchase Custom Link and am encountering an issue where both ExternalPurchaseLink.canOpen and ExternalPurchaseCustomLink.isEligible always return false under all test conditions. I would like to confirm whether my setup is missing any required steps or whether this behavior is expected. Below are the details of my current environment and configuration: 🔧 1. Development Environment Xcode: 16.3, 16.4, 26.0 beta 4 Devices: iPhone running iOS 26.2 beta iPhone running iOS 16.7.12 macOS 15.5 (real device testing) Simulator iOS 18.0 Build Type: Local development build using a Developer Provisioning Profile Sandbox account signed in during testing 🔑 2. Entitlements (Developer site & Xcode) In Certificates → Identifiers → App ID, both capabilities are enabled: StoreKit External Purchase StoreKit External Purchase Link The .entitlements file in Xcode includes: com.apple.developer.storekit.external-purchase = YES com.apple.developer.st
2
0
240
3w
Reply to How does Numbers.app detect that a document was moved to Recently Deleted, and can third-party apps implement the same behavior?
It's not really about what the Numbers guy does but probably what FileDocument lets it do it. I have never used FileDocument with an iOS app. I do have a macOS application with FileDocument. If I open and then close a document and then move it under a different volume or a folder, the application is still able to open it. But it won't if I move a file to the dumpster.
Topic: App & System Services SubTopic: General Tags:
3w
Reply to App group broken on Sequoia
Right -- think I've had a breakthrough: the entitlements file for the appex shows its app ID as follows: [Key] com.apple.application-identifier [Value] [String] $(AppIdentifierPrefix)$(PRODUCT_BUNDLE_IDENTIFIER) while the main app shows a proper value: [Key] com.apple.application-identifier [Value] [String] XXXXXXXXXX.com.mydomain.MyApp For some reason, the Xcode variables weren't being substituted in the FileProvider! The surprise here is simply that the app worked for so long without the entitlements being validated... Anyway. I've confirmed that the app now presents the entitlements validated flag correctly on our older machines; once I hear back from the employee running this on Sequoia that it works now, I'll accept the answer here. Thanks!
Topic: Code Signing SubTopic: Entitlements Tags:
3w
Behavior of Bookmark URLs and Files App Recently Deleted – Clarification and Potential Bug
I am developing an iOS/iPadOS application and have encountered some behavior regarding Files App and security-scoped bookmarks that I would like to clarify. Additionally, I would like to report some behavior which might include a potential issue. Question1: Accessing deleted files via bookmark (Specification clarification) Our app saves file URLs as bookmarks, which file that user has selected on Files App or app-created so to open a file which user has modified previously in the next launch. When a user deletes a file in Files App (moves a file to Recently Deleted), the app can still resolve the bookmark and access the file for read/write operations. Is this behavior intended? In other words, is it correct that a bookmark can access a file that has been deleted in Files App but not permanently removed? Question2: Overwriting a file in Recently Deleted (Potential bug) We noticed that overwritin
6
0
349
3w
SwiftData Models and SortDesc. Only Work in One Swift File
Hey everyone, I found a possible SwiftData Release-only issue with nested sort descriptors on an optional relationship. In a minimal repro, sorting a @Query by a nested optional relationship key path like: SortDescriptor(InvestigationPhotoAsset.imageAnalysis?.overallAestheticsScore, order: .reverse) works in Debug, but crashes at runtime in Release. The surprising part is that the crash depends on file layout: if the active SwiftData models and the sort logic are kept in the same Swift file, the app works if the same models are split into separate files, the Release build crashes, 'Debug' will also work The repro was reduced to just two SwiftData models: InvestigationPhotoAsset InvestigationImageAnalysis So this looks less like an app-modeling issue and more like a SwiftData/compiler/codegen issue related to nested sort metadata in optimized builds. If useful, I can also give you a slightly more formal version with a title and code snippet block. Please check out the code example he
4
0
267
3w
Reply to NSProgress - way to publish progress to make the file url unselectable in Finder?
Is there a way to mark the file 'unselectable' with the published progress? I'm not sure if/where this was originally documented, but the Finder actually still does this the way macOS Classic did, which is by using type/creator codes. If you're not familiar with them, macOS Classic originally related files to the apps using two 32-bit values- type (meaning what kind of file is this) and creator (meaning, what app should open this). By convention, these were constructed 4 ASCII characters, leading to definitions like these: kFirstMagicBusyFiletype = 'bzy ' kLastMagicBusyFiletype = 'bzy?' How you set them is a bit obscure, but getattrlist/setattrlist (see their man pages for full details) provides access to them through ATTR_CMN_FNDRINFO. The data returned in the concatenation of the FileInfo and ExtendedFileInfo structures[1], with the type being in FileInfo.fileType. Note that the ATTR_CMN_FNDRINFO structures are used to store other data, so the normal behavior is to retrieve the cu
Topic: UI Frameworks SubTopic: AppKit Tags:
3w
Reply to Current wisdom on multiple XPC services in a System Extension?
Quinn, thank you for another quick and informative answer (and for explaining the change in the man page text). If I were in charge, you would never have to pay for a beverage again. ;-) A couple of quick clarifications: I haven't implemented any XPC listeners yet; it's more how I'm thinking about the low-level messages I'm seeing that refer to Mach service names and the like. That said, when I wrote a single XPC listener for both, using the same service name under each key, I meant that I would enter the service name for the single listener under both keys in the Info.plist file. It seems clear to me that multiple listeners need unique service names for each. You've summarized quite well the tradeoffs of single vs. multiple sysexen. In the case where both subsystems feed events to a common module, a single sysex seems like the better choice. Thanks again for your assistance.
Topic: App & System Services SubTopic: Core OS Tags:
3w
Reply to Authorizing a process to access a Private Key pushed via MDM
[quote='818622021, mobiusmoonglade, /thread/818622, /profile/mobiusmoonglade'] Is there a documented, MDM-compatible way to inject a specific binary path into the ACL of a private key? [/quote] No. Our direction in this space is the ManagedApp framework. It’s super cool. For a short intro, watch WWDC 2025 Session 203 Get to know the ManagedApp Framework. However, it won’t work for you because it’s not available on the Mac. Also note that its focus is on apps and app extensions, so it’s not clear how it would work for a launchd daemon. If you’d like to see ManagedApp support your use case, I recommend that you file an enhancement request describing your requirements. And if you do that, please post your bug number, just for the record. Beyond that, the only option that I’m aware for provisioning a daemon is via the super obscure mechanism [1]. However, that’s really meant for configuration settings rather than credentials. You could obviously jam a credential into it, but that has significant drawbac
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w
Reply to Swift compiler fails in Release (-O) when using generic ObservableObject with @Published on iOS < 26 in Xcode 26.3
Right. That’s the Swift compiler crashing, which is something it should never do. I recommend that you file a bug about it. And as this is specific to Apple technologies, you’ll have to use Feedback Assistant rather than the Swift open source bug process. Please post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to Monitor mode capture broken with Wi-Fi 7 (M5 Pro MacBook Pro) on macOS 26 - worked previously on same OS with older hardware
This is likely fallout from Wi-Fi hardware changes, so the best path forward is for you to file a bug about it. Please post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
3w
MDM profile for a binary with multiple signatures
Hello, we use an MDM profile that enables FDA for our program. The Identifier is set to be the path to our program. We'd like to have a profile that allows multiple CodeSignatures. Our older programs are signed with a different certificate than the current ones. We tried deploying 2 profiles (one for the 'old certificate' signed binary and the other for the 'new certificate' signed binary). But it looks like that MacOS accepts only one. I have also tried to use ProfileCreator to generate a profile with 2 entries, but it fails to do it. Manually editing the XML file and adding new entries does not work either. I'd like to know if there's a workaround for this issue.
Replies
2
Boosts
0
Views
1.6k
Activity
3w
Notarization submissions stuck in "In Progress" for many hours with no logs
Hi, I currently have multiple notarization submissions that have been stuck in In Progress status for many hours without any updates. Here are several examples from my recent submissions: Submission IDs: 01f7a80e-a9cc-49b3-bb93-94b126cf3124 (a.dmg) 7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (a.dmg) 2b35ec79-d851-41d6-a900-788d4201a273 (b.dmg) 8194b1af-a270-4de9-92f1-ce2a8d4782f2 (c.dmg) 2608dcfc-7652-4efa-97e3-1749e7130dcb (d.zip) These submissions were created between March 11 and March 12, and all of them remain stuck in the In Progress state indefinitely. When checking using: xcrun notarytool history all recent submissions appear as: status: In Progress Additionally: No logs are available for these submissions. notarytool --wait eventually times out after 30 minutes with exit code 124. The app bundles are signed with a valid Developer ID Application certificate. All embedded frameworks and dylibs are individually signed using: --options runtime --timestamp Earlier submissions on the same day (for example df41010
Replies
1
Boosts
0
Views
128
Activity
3w
Notarization submissions stuck in "In Progress" for many hours with no logs
Hi, I currently have multiple notarization submissions that have been stuck in In Progress status for many hours without any updates. Here are several examples from my recent submissions: Submission IDs: 01f7a80e-a9cc-49b3-bb93-94b126cf3124 (AutoTyper.dmg) 7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (AutoTyper.dmg) 2b35ec79-d851-41d6-a900-788d4201a273 (autoclaw-0.2.15.dmg) 8194b1af-a270-4de9-92f1-ce2a8d4782f2 (z-code_0.21.2_aarch64.unnotarized.dmg) 2608dcfc-7652-4efa-97e3-1749e7130dcb (AutoGLM PC.zip) These submissions were created between March 11 and March 12, and all of them remain stuck in the In Progress state indefinitely. When checking using: xcrun notarytool history all recent submissions appear as: status: In Progress Additionally: No logs are available for these submissions. notarytool --wait eventually times out after 30 minutes with exit code 124. The app bundles are signed with a valid Developer ID Application certificate. All embedded frameworks and dylibs are individually signed using: --options runti
Replies
1
Boosts
0
Views
103
Activity
3w
Wrong appearance of decimalPad keyboard in dark mode
Hi. The following code causes UI mismatch on iOS26. Keyboard with type decimalPad and appearance as dark is displayed as popUp with wrong colors. Before iOS26 keyboard was regular with correct color scheme. Please advice either how to make the scheme correct or force to display regular keyboard instead of popup. class ViewController: UIViewController { @IBOutlet weak var textField: UITextField! override func viewDidLoad() { super.viewDidLoad() // Do any additional setup after loading the view. textField.keyboardType = .decimalPad textField.keyboardAppearance = .dark view.backgroundColor = .darkGray } }
Replies
6
Boosts
0
Views
344
Activity
3w
Unable to enable eligibility for External Purchase Link APIs — seeking clarification
Hello, I am currently implementing External Purchase Link and External Purchase Custom Link and am encountering an issue where both ExternalPurchaseLink.canOpen and ExternalPurchaseCustomLink.isEligible always return false under all test conditions. I would like to confirm whether my setup is missing any required steps or whether this behavior is expected. Below are the details of my current environment and configuration: 🔧 1. Development Environment Xcode: 16.3, 16.4, 26.0 beta 4 Devices: iPhone running iOS 26.2 beta iPhone running iOS 16.7.12 macOS 15.5 (real device testing) Simulator iOS 18.0 Build Type: Local development build using a Developer Provisioning Profile Sandbox account signed in during testing 🔑 2. Entitlements (Developer site & Xcode) In Certificates → Identifiers → App ID, both capabilities are enabled: StoreKit External Purchase StoreKit External Purchase Link The .entitlements file in Xcode includes: com.apple.developer.storekit.external-purchase = YES com.apple.developer.st
Replies
2
Boosts
0
Views
240
Activity
3w
Reply to How does Numbers.app detect that a document was moved to Recently Deleted, and can third-party apps implement the same behavior?
It's not really about what the Numbers guy does but probably what FileDocument lets it do it. I have never used FileDocument with an iOS app. I do have a macOS application with FileDocument. If I open and then close a document and then move it under a different volume or a folder, the application is still able to open it. But it won't if I move a file to the dumpster.
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w
Reply to App group broken on Sequoia
Right -- think I've had a breakthrough: the entitlements file for the appex shows its app ID as follows: [Key] com.apple.application-identifier [Value] [String] $(AppIdentifierPrefix)$(PRODUCT_BUNDLE_IDENTIFIER) while the main app shows a proper value: [Key] com.apple.application-identifier [Value] [String] XXXXXXXXXX.com.mydomain.MyApp For some reason, the Xcode variables weren't being substituted in the FileProvider! The surprise here is simply that the app worked for so long without the entitlements being validated... Anyway. I've confirmed that the app now presents the entitlements validated flag correctly on our older machines; once I hear back from the employee running this on Sequoia that it works now, I'll accept the answer here. Thanks!
Topic: Code Signing SubTopic: Entitlements Tags:
Replies
Boosts
Views
Activity
3w
Behavior of Bookmark URLs and Files App Recently Deleted – Clarification and Potential Bug
I am developing an iOS/iPadOS application and have encountered some behavior regarding Files App and security-scoped bookmarks that I would like to clarify. Additionally, I would like to report some behavior which might include a potential issue. Question1: Accessing deleted files via bookmark (Specification clarification) Our app saves file URLs as bookmarks, which file that user has selected on Files App or app-created so to open a file which user has modified previously in the next launch. When a user deletes a file in Files App (moves a file to Recently Deleted), the app can still resolve the bookmark and access the file for read/write operations. Is this behavior intended? In other words, is it correct that a bookmark can access a file that has been deleted in Files App but not permanently removed? Question2: Overwriting a file in Recently Deleted (Potential bug) We noticed that overwritin
Replies
6
Boosts
0
Views
349
Activity
3w
SwiftData Models and SortDesc. Only Work in One Swift File
Hey everyone, I found a possible SwiftData Release-only issue with nested sort descriptors on an optional relationship. In a minimal repro, sorting a @Query by a nested optional relationship key path like: SortDescriptor(InvestigationPhotoAsset.imageAnalysis?.overallAestheticsScore, order: .reverse) works in Debug, but crashes at runtime in Release. The surprising part is that the crash depends on file layout: if the active SwiftData models and the sort logic are kept in the same Swift file, the app works if the same models are split into separate files, the Release build crashes, 'Debug' will also work The repro was reduced to just two SwiftData models: InvestigationPhotoAsset InvestigationImageAnalysis So this looks less like an app-modeling issue and more like a SwiftData/compiler/codegen issue related to nested sort metadata in optimized builds. If useful, I can also give you a slightly more formal version with a title and code snippet block. Please check out the code example he
Replies
4
Boosts
0
Views
267
Activity
3w
Reply to SwiftData Models and SortDesc. Only Work in One Swift File
Interesting. Is there any issue where I could track that status on the swift language? And is there any other known workaround beside copying the related declarations together in one file?
Replies
Boosts
Views
Activity
3w
Reply to NSProgress - way to publish progress to make the file url unselectable in Finder?
Is there a way to mark the file 'unselectable' with the published progress? I'm not sure if/where this was originally documented, but the Finder actually still does this the way macOS Classic did, which is by using type/creator codes. If you're not familiar with them, macOS Classic originally related files to the apps using two 32-bit values- type (meaning what kind of file is this) and creator (meaning, what app should open this). By convention, these were constructed 4 ASCII characters, leading to definitions like these: kFirstMagicBusyFiletype = 'bzy ' kLastMagicBusyFiletype = 'bzy?' How you set them is a bit obscure, but getattrlist/setattrlist (see their man pages for full details) provides access to them through ATTR_CMN_FNDRINFO. The data returned in the concatenation of the FileInfo and ExtendedFileInfo structures[1], with the type being in FileInfo.fileType. Note that the ATTR_CMN_FNDRINFO structures are used to store other data, so the normal behavior is to retrieve the cu
Topic: UI Frameworks SubTopic: AppKit Tags:
Replies
Boosts
Views
Activity
3w
Reply to Current wisdom on multiple XPC services in a System Extension?
Quinn, thank you for another quick and informative answer (and for explaining the change in the man page text). If I were in charge, you would never have to pay for a beverage again. ;-) A couple of quick clarifications: I haven't implemented any XPC listeners yet; it's more how I'm thinking about the low-level messages I'm seeing that refer to Mach service names and the like. That said, when I wrote a single XPC listener for both, using the same service name under each key, I meant that I would enter the service name for the single listener under both keys in the Info.plist file. It seems clear to me that multiple listeners need unique service names for each. You've summarized quite well the tradeoffs of single vs. multiple sysexen. In the case where both subsystems feed events to a common module, a single sysex seems like the better choice. Thanks again for your assistance.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
3w