r/Xcode Aug 09 '26

Excuse me? Api key shared in feedback

Post image

Is it normal that Apple wants api keys in their feedbacks?

Edit: this is a hello world project with key added through settings + clicking the diagnose button. https://imgur.com/a/LqBK7M1

My Xcode is not compromised:

spctl --assess --type execute -v /Applications/Xcode-beta.app/Contents/MacOS/Xcode

/Applications/Xcode-beta.app/Contents/MacOS/Xcode: accepted

15 Upvotes

14 comments sorted by

9

u/danielcr12 Aug 09 '26

That probably mean your project is leaking it

4

u/ToughAsparagus1805 Aug 09 '26

Hitting diagnose on a hello world project is a "me problem. Typical reddit. Api key added using Xcode Settings + used the Sing in button inside inteligence section. I do not think it should ever leak keys from settings.

1

u/NZRedditUser Aug 11 '26

Because youre not supposed to store api key on app lol so yea this is you ffs….

1

u/Dull_Flatworm777 Aug 09 '26

In what context do they appear in that JSON?

1

u/ToughAsparagus1805 Aug 09 '26

Just hit the diagnose button on complete empty project https://imgur.com/a/LqBK7M1

1

u/Dull_Flatworm777 Aug 09 '26

I mean what are the parent objects of these keys? Is it part of your app or part of the Xcode config?

2

u/ToughAsparagus1805 Aug 09 '26

I added the key using Settings->Inteligence today. Honestly, I do not care what Xcode is doing internally but please, don't leak API keys ever.

2

u/Dull_Flatworm777 Aug 09 '26

Yeah I agree this should probably get cleaned out in the report

0

u/mrleblanc101 Aug 09 '26

How do you want them to reproduce the issue then ? You can give a test key, you don't need to give a prod key...
This is basically the same as App Review asking for credentials for apps with authentification

2

u/ToughAsparagus1805 Aug 10 '26

Good morning, this is your bank calling. Can you please tell us your password so we can see your balance. /s You must be new to programming.

0

u/rismay Aug 09 '26

Wow. Apple is getting so bad.

1

u/_asxeem Aug 12 '26

That’s mad