solana-mobile / dapp-publishing

Apache License 2.0
59 stars 17 forks source link

Check previous' versions signature for mismatch #199

Closed oliveeyay closed 1 year ago

oliveeyay commented 1 year ago

When publishers submit an app update, it would be nice to compare the APK signature with the previous version to avoid a signature mismatch (which would result in the app not being updated and errors).

A signature can be retrieved from an APK using (example): ~/Library/Android/sdk/build-tools/33.0.0/apksigner verify --print-certs --verbose app-Stub-release.apk

creativedrewy commented 1 year ago

This is most likely something that should occur on the back-end. Will close here for now.