How to authenticate a developer

I am trying to develop a tool for developers and I need a way to authenticate that who I am talking to online is the real owner/developer of a given app (identified by the app id). I know there is a private developer key and a public developer ID. Is there any information available for how this can be used to authenticate a developer, perhaps by some challenge/response mechanism?

0 flocsy🤠 over 2 years ago

Generate a random uuid and display it to the developer and ask them to include it in the app's description or what's new section. Similar to how the ownership of a domain can be proved by adding a DNS record

0 _psx_ over 2 years ago

use contact developer link :-)

0 trudelta over 2 years ago in reply to flocsy🤠

Thanks for the suggestion, I'm actually hoping for an automated process using a form on a webpage, not a manual process.

0 trudelta over 2 years ago in reply to _psx_

Thanks for the suggestion, I'm actually hoping for an automated process using a form on a webpage, not a manual process.

0 flocsy🤠 over 2 years ago in reply to trudelta

What do you mean? There's going to be something the developer has to do. Why the contact developer isn't good? You send a random code to the developer that he has to enter in your website.

0 trudelta over 2 years ago in reply to flocsy🤠

A manual step(s) for the developer is fine. I want to avoid having to do manual steps for every developer that I need to or want to support.

0 flocsy🤠 over 2 years ago in reply to trudelta

So both ideas you got is automatable you just need to parse the html page from the app store. Probably ChatGPT can do it for you, but you'll need to be able to identify yourself and prove to it that it's really you ;)

0 PlayItLoud over 2 years ago in reply to trudelta

Support to do what?

0 trudelta over 2 years ago in reply to flocsy🤠

I was looking for a way that has fewer steps, may be using the app Id. I noticed that the app id in the manifest XML is not the same as the app ID in the URL on apps.garmin.com. Why is this? Can the one in the store URL be calculated from the other?