The Mac build is ad-hoc signed, so every reinstall is a new identity #9

Closed
opened 2026-09-20 06:56:52 -07:00 by rays · 0 comments
Owner

tools/install-mac.sh builds with CODE_SIGNING_ALLOWED=NO and signs the result with a dash. That is fine for a scratch build and wrong for the copy in /Applications: macOS treats each rebuild as a different application, so the cookies the web view left behind and the server chosen at first run are not guaranteed to survive an update.

It has not bitten yet because the app is reinstalled rarely. It will, and the symptom will be an unexplained sign-in.

Fix: build with a real team, at which point the bundle keeps one identity across rebuilds. Needs the paid account that CarPlay needs anyway, so it may as well wait for that.

tools/install-mac.sh builds with CODE_SIGNING_ALLOWED=NO and signs the result with a dash. That is fine for a scratch build and wrong for the copy in /Applications: macOS treats each rebuild as a different application, so the cookies the web view left behind and the server chosen at first run are not guaranteed to survive an update. It has not bitten yet because the app is reinstalled rarely. It will, and the symptom will be an unexplained sign-in. Fix: build with a real team, at which point the bundle keeps one identity across rebuilds. Needs the paid account that CarPlay needs anyway, so it may as well wait for that.
rays added the enhancement label 2026-09-20 06:56:52 -07:00
rays added the wontfix label 2026-09-23 08:23:32 -07:00
rays closed this issue 2026-09-23 08:23:40 -07:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rays/ipodderx-app#9