Setting up Automatic iOS Code Signing Using App Store Connect API keys

Read about how Codemagic handles automatic code signing for iOS apps using App Store Connect API keys and Codemagic CLI tools. Continue reading to find out what changes with the new Apple Developer Portal integration, how to set it up, and what's the role of Codemagic CLI tools in all this.

One of the killer features of Codemagic is its Apple Developer Portal integration for automatic code signing of iOS apps. With automatic code signing, Codemagic takes care of creating and managing the signing certificates and provisioning profiles for you: just set up the integration once and use the same credentials across all your apps and workflows.

The good news is that our Apple Developer Portal integration just got better as it’s now using the official App Store Connect API, powered by our very own open-source utilities collectively known as Codemagic CLI tools for a transparent code signing experience.

Continue reading to find out what changes with the new Apple Developer Portal integration, how to set it up, and what's the role of Codemagic CLI tools in all this.

Using API keys instead of login data

Many services, including Codemagic, that used to integrate with Apple’s services did so by asking users for their Apple developer portal username and password to create a session with Apple. This approach came with several problems, such as failure to receive the two-factor authentication code from Apple and expiring sessions that required reconnecting the integration in Codemagic.

Using the App Store Connect API and API keys instead of session-based authentication resolves these issues. There will be no more expiring sessions or hassle with two-factor authentication. In addition, the API keys come with permission levels, which greatly limits our access to your data compared to giving full access to your account. You can create different keys for different teams and use a suitable one per workflow in your Codemagic builds.

automatic ios api api keys code

This article is for the interest of those who have worked with API keys in Ruby or those who tend to do so. Devs who worked or who intend to work API keys in other languages may also benefit from this article. First and foremost, I’d like to...

Learn what are the most important API security threats engineering leaders should be aware of and steps you can take to prevent them

APIs have been around for decades – they allow different systems to talk to each other in a seamless, fast fashion – yet it’s been during the past decade that this technology has become a significant force.

This is an archive of a stream that was broadcasted live on Twitch - https://www.twitch.tv/codinggarden 💖 Donate: https://coding.garden/donate 😍 Pledge: http...

I’ve been working with Restful APIs for some time now and one thing that I love to do is to talk about APIs.