search

tuarua / Apple-Signin-ANE

Apple Sign In Adobe Air Native Extension for macOS 10.15+, iOS 13.0+ and tvOS 13.0+
Apache License 2.0
5 stars 4 forks source link

Not working on MacOS BigSur #18

Open mateo-kozomara opened 3 years ago

mateo-kozomara commented 3 years ago

We encountered an issue when using Apple Signin on MacOS BigSur, i posted a ticket about it here

I tested this ANE in hopes i did something wrong, but seems like same issue is happening on this ANE as well.

tuarua commented 3 years ago

This does sound entitlement and sandbox inheritance related.

I don't get the same error as you. I get the standard error you would get if the com.apple.developer.applesignin were missing.

Credential Error: The operation couldn’t be completed. (com.apple.AuthenticationServices.AuthorizationError error 1000.) Reason: Unknown

I sign the AIR frameworks and ANE frameworks with the below entitlements to inherit the sandbox from the parent app, but the error suggests this is not happening (in Big Sur anyway).

<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.inherit</key>
    <true/>
  </dict>

Main app is signed with the following entitlements.

<dict>
    <key>com.apple.application-identifier</key>
    <string>XXX.x.x.x</string>
    <key>com.apple.developer.applesignin</key>
    <array>
        <string>Default</string>
    </array>
    <key>com.apple.developer.team-identifier</key>
    <string>XXX</string>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.application-groups</key>
    <array>
        <string>XXX.x.x.x</string>
    </array>
    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <true/>
</dict>

According to the release notes AIR for macOS is compiled against 10.12 Xcode 11.2.1

They may need to compile with a newer SDK and Xcode version now to support Big Sur.

I see something similar about sandbox inheritance problems mentioned here. https://developer.apple.com/forums/thread/668496

I did try adding other entitlements but it didn't help

<key>com.apple.security.get-task-allow</key>
<true/>
ajwfrost commented 3 years ago

Thanks for this..

They may need to compile with a newer SDK and Xcode version now to support Big Sur.

which is something we had started looking into, but is not a simple task.. but we can focus some more efforts on this perhaps!