.gitignored project files? about pgpro HOT 4 CLOSED

The reason I exluded xcodeproj was, that I wasn't sure it doesn't contain any sensitive information (e.g. signing certificate data, etc.). If that's not the case, I'll happily share it :-)
The rest of the .gitignore file has indeed be autogenerated, but I think is fine.

from pgpro.

Thanks for the response :) xcodeproj is safe in the way it does not have any key embedded in, it only has references on how to find one. Project file is just a very long text file so you can open in any text editor including Xcode itself and verify. In terms of app distribution, it only contains:

• Team ID (you can find for DevelopmentTeam text in the file), which is used to find proper Certificate and Private key in your Keychain app
• Provisioning profile (either it's UUID, or it's name – look for PROVISIONING_PROFILE) to embed into the app so devices can verify if they can trust and run the app. Actual profiles are stored in the ~/Library/MobileDevice/Provisioning Profiles directory on your machine and basically they are useless without the private key

Both of these are safe to share because they are only references. Maybe if you use feature to Automatically manage signing in Xcode, then maybe they are not even exist in the project file, this I never checked.

So as long as you do not put any other special private key-alike stuff into the build settings or build phases, then you should be safe. :)

from pgpro.

I've just pushed the project file

from pgpro.

Thanks a lot! I can confirm project files are now in place, so the issue is resolved. With #32 and Yubico/yubikit-ios#62 merged, the code is able to build 👍

from pgpro.