Entitlements

RSS for tag

Entitlements allow specific capabilities or security permissions for your apps.

Entitlements Documentation

Pinned Posts

Posts under Entitlements tag

165 Posts
Sort by:
Post marked as solved
4 Replies
314 Views
Hi forum! I'm a n00b in apple development, so I apologise in advance if something is very wrong. I have a python app for MacOS that I am deploying with pyinstaller (thus I am NOT using Xcode). The app is to be deployed through github not through the app store. I could sign it and notarize it and it works. However, the app needs to run some external unsigned code (like a plugin). The hardened runtime blocks that, so I need to add entitlements. I've done it as it's explained in many other places with codesign. It seems to work but when I run the app, it crashes immediately with EXC_CRASH (Code signature invalid). The crash doesn't happen unless I add the entitlements. Now my questions: how do I make my situation work? Do I need a provisioning profile? The entitlements I am trying to add (hardened runtime-related) are not restricted AFAIK, so I don't think I do? If I need a provisioning profile, how can I add it to the app after it's bundled with pyinstaller? Thank you so much! Francesco
Posted
by
Post marked as solved
3 Replies
208 Views
How to integrate native Java backend with macOS catalyst app UI? My UI is SwiftUI/macCatalyst, using entitlements for voice recognition and microphone. My back-end is from a large legacy Java code base rendered to native x86_64 binary. For now they interface via stdio streams established by the native java command launching the UI app. This works fine when the Java code runs on a JDK. When native backend launches the UI app, the UI app fails to secure permissions (but otherwise works fine) Same result when the backend is bundled with the app as if a command-line tool Solution constraints: Unlike the sample app/docs that integrate a command-line tool into an app, this binary cannot be built using XCode's Clang I'd like to continue using macCatalyst, knowing this can't be deployed to iOS proper, only to macOS. I can make the UI launch the backend, but don't want to do this without some assurance it would fix things :) I'd rather not work through the calling conventions/wrappers to staticly link these binaries now. Assuming the parent process needs the app entitlements, I tried: To embed the java binary into the SwiftUI app?: Following instructions for embedding a command-line app did not configure the backend binary with the entitlements? Deploy the java binary standalone as an app with the proper entitlements? Similar to above: unable to figure out how Pointers to docs welcome. I've seen Embedding Nonstandard Code Structures in a Bundle Embedding a command-line tool in a sandboxed app Ideally I'd like to know how to deliver an app whose binary is entirely build using Java native (including proper entitle/sign/credential/notorize/sandbox...) Thanks!
Posted
by
Post not yet marked as solved
0 Replies
160 Views
Developing Apple Wallet functionality (provisioning credit and debit cards) from my App, I'm unable to open the Apple Wallet screens with the provisioning steps. The bug occurs only in RELEASE (installing the App from TestFlight). Tests in DEBUG/DEVELOP (deploying from XCode) are successful, this means that the Apple provisioning screen opens correctly. We have generated the provisioning profile, setting the Select for the Entitlement that Apple has enabled and we have loaded them correctly. At the same time, we enabled the CAPABILITY Apple Wallet and configured the related Entitlements as follows: <key>com.apple.developer.pass-type-identifiers</key> <array>       <string>$(TeamIdentifierPrefix)*</string> </array> <key>com.apple.developer.payment-pass-provisioning</key> <true/> The only information we have obtained, taken from the gather logging, is that when we install the App (from TestFlight) the following error is generated: <err> (0x16fecXXXXXX) _InstallProvisioningProfile: Could not install embedded profile: 0xeXXXXXXXXXXX (Attempted to install a Beta profile without the proper entitlement.). We have exhausted the alternatives available to us, we can only wait for Apple to respond. If anyone has encountered this situation and could share their experience or solution, I would be completely grateful.
Posted
by
Post marked as solved
5 Replies
345 Views
I'm getting ready to release a new app that uses CloudKit. I just deployed my Development schema to Production in CloudKit dashboard. Is there a way to run my app from Xcode using the CloudKit Production environment for testing? Details of how to test in the production environment are described here: https://developer.apple.com/library/archive/documentation/DataManagement/Conceptual/CloudKitQuickStart/TestingYourApp/TestingYourApp.html But would be faster (and easier for debugging potential issues) if I could select tell Xcode to use the production environment when running from the debugger. Is this supported? Thanks
Post not yet marked as solved
0 Replies
162 Views
We are trying to suppress or show the notification received based on device. We have a business requirement that once the notification receives on the device, based on device location and predefined geo-fence location, we want to either show or suppress it. we have submitted the similar request to apple entitlement and the request got rejected by apple saying "This is not a supported usecase of the Notification Service Extension filtering entitlement." Can you please help why is this rejected and what are the usecases we can make use of this "com.apple.developer.usernotifications.filtering" request get approved by apple.
Posted
by
Post not yet marked as solved
0 Replies
130 Views
General: DevForums tags: Code Signing, Signing Certificates, Provisioning Profiles, Entitlements Developer Account Help — This document is good in general but, in particular, the Reference section is chock-full of useful information, including the names and purposes of all certificate types issued by Apple Developer web site, tables of which capabilities are supported by which distribution models on iOS and macOS, and information on how to use managed capabilities. TN3125 Inside Code Signing: Provisioning Profiles — This includes links to other technotes in the Inside Code Signing series. Certificate Signing Requests Explained DevForums post --deep Considered Harmful DevForums post Entitlements documentation Don’t Run App Store Distribution-Signed Code DevForums post Mac code signing: DevForums tag: Developer ID Creating Distribution-Signed Code for Mac DevForums post Packaging Mac Software for Distribution DevForums post Manual Code Signing Example DevForums post Placing Content in a Bundle documentation Embedding Nonstandard Code Structures in a Bundle documentation Embedding a Command-Line Tool in a Sandboxed App documentation Signing a Daemon with a Restricted Entitlement documentation For problems with notarisation, see Notarisation Resources. For problems with the trusted execution system, including Gatekeeper, see Trusted Execution Resources. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = "eskimo" + "1" + "@" + "apple.com"
Posted
by
Post not yet marked as solved
2 Replies
190 Views
Hello! Does anybody know how to get the appropriate entitlement to use (or just test for the first time) of the Framework ProximityReader (Tap to pay)?
Posted
by
Post not yet marked as solved
0 Replies
170 Views
Hello, I am creating an app which includes an AppClip. I added the Clip in the build phases (as an Embed AppClip), I use everywhere the good BundleID (either the parent app, or the clip) but when I'm archiving the app, and then I distribute it, i'm still getting this error: IDEFoundation.AssociatedAppClipIdentifiersFilterErrors error 1 I can't figure why this happen, it's the first Clip I do and deploy so it's all new to me.
Posted
by
Post marked as solved
1 Replies
204 Views
Is something changed in request form for multicast permission? When I try to enter request page https://developer.apple.com/contact/request/networking-multicast I've get "Sorry, you cannot view this page." I am a developer account owner, all agreements is accepted. How can I request this permission for my app for now?
Posted
by
Post marked as solved
2 Replies
260 Views
Sandbox is set to no in the entitlements file. Settings → security &amp; privacy → privacy → accessibility is enabled for the app. Can detect global mouse events. Can't use accessibility features: let systemWideElement: AXUIElement = AXUIElementCreateSystemWide() var focusedElement : AnyObject? let error = AXUIElementCopyAttributeValue( systemWideElement, kAXFocusedUIElementAttribute as CFString, &amp;focusedElement ) print(focusedElement) // this prints `nil` Can't execute applescripts ( NSAppleScript() ) Can't send keypress events ( CGEvent().post() ) Also, if i compile the executable with swiftc from terminal and then run from terminal, the app is able to access these features. Are there other xcode settings I need to change or are they always blocked when building from xcode?
Posted
by
Post marked as solved
1 Replies
210 Views
Hi everybody. I got stuck with the problem. I want to use "Sign in with Apple" capability in application signed with Developer ID certificate. I enable this entitlement in my App Store Connect for my App ID, generate the provision profile, download it in Xcode but it writes me that my provision profile does not support "Sign In with Apple" capability. Please clarify my anybody, is it possible to use "Sign in with Apple" capability in applications signed with Developer ID certificate?
Posted
by
Post not yet marked as solved
0 Replies
153 Views
Hi everyone! I have some issue with universal links. I follow this document from App Search Programming Guide And I create 3 apps associated with the same page and settings. It works perfectly when I read the QR code with native camera. But when I read a QR code with the QR Code Scanner from Control Center always opens App1 Example: I select App3 Show App3 Icon But open App1!!! I configure my AASA file something like this: `{   "applinks": {     "apps": [],     "details": [{         "appID": "TeamId.bundleApp1",         "paths": [           "*"         ]       },       {         "appID": "TeamId.bundleApp2",         "paths": [           "*"         ]       },       {         "appID": "TeamId.bundleApp3",         "paths": [           "*"         ]       }     ]   } }` Thanks!!!
Posted
by
Post not yet marked as solved
0 Replies
162 Views
I've an app which uses associated domains capability to enable universal links and password saving. Both features are working, except for one tiny detail. There are two domains associated with the app. Primary domain is the one commonly used to access the web app and the secondary domain is added due to historic reasons and handling universal links to older domain. When user sign in to the app using username and password it always gets saved against the secondary domain name and not the primary one. I tried changing the order in which the domains are defined in the entitlements file but no joy. I even tried adding webcredentials key to ASA file under both domains and that didn't work as well. Is there a way to direct iOS to prefer one domain over the other so that credential gets saved against the primary domain?
Posted
by
Post not yet marked as solved
0 Replies
158 Views
Hi guys! I'm having some issues geting Universal Links to work. I have uploaded an association file to my website. I have added applink Entitlements to my app. Now... I can see in my phone, Settings->Developer->Universal Links->Diagnostics, that my URL "Opens Installed Application". But when i click the URL in an email or messenger, it just opens in safari. Any ideas?
Posted
by
Post not yet marked as solved
0 Replies
163 Views
Hello, I need to use NFC for a project. My problem is that always when im entering with my Phone a RFID field Apple Pay shows up instead of just my NFC application. I know that you can suppress Apple Pay with adding com.apple.developer.passkit.pass-presentation-suppression to the Entitlements File but my Problem is that this Entitlement also suppresses NFC which I need. How can I suppress Apple Pay but use NFC? Thanks for Help!
Posted
by
Post not yet marked as solved
1 Replies
202 Views
Hi! I am trying to archive my flutter app and creating an app identifier with (Groups, Associated domains, Push notifications, Sign in apple) but "Apple pay payment processing" is capability automatically added and when I create Profile provisioning its giving Provisioning profile "MSPP" doesn't support the Apple Pay capability. Provisioning profile "MSPP" doesn't include the com.apple.developer.in-app-payments entitlement. errors on xcode. I tryed to uncheck "Apple pay payment processing" in identifier and recreate Profile provioning but error reoccuring , any help, suggession very appreciated , thank you very much
Posted
by
Post not yet marked as solved
0 Replies
177 Views
Our engineering team is near completion of integration of the Visa SDK for iOS Add to Mobile Wallet function for our user's debit card which we issue. Creating the Pass Type ID certificate was easy, but getting permission to use it from Apple has been extremely difficult. We submitted our request on April 22nd to the applepayentitlements email address. We got a response from them on April 26th, 4 days later asking for additional information & providing a 9-digit follow-up identifier. We provided the new information in a response, but have never heard back. It is now May 10th. I have tried all manner of support requests & have no idea where to go next.
Posted
by