eclipsesource / eclipsesource/tabris-js

Prevent usage of default keys for production apps

Open
#1,427 0 comments 0 reactions 0 assignees View on GitHub
connect feature
Dominant language
JavaScript
Stars
1.4k
Forks
171
PR merge metrics
No merged PRs in 30d

Description

### Problem description
Currently it is possible to build a Tabris.js Android app in release mode with one of the keys generated by the Tabris.js build service on tabrisjs.com (_Default Key (app-name)_).

It is not recommended to upload such a build to the Play Store:

* for security reasons, on Android separate keys should be used when signing builds for development and production
* the Tabris.js build service does not provide a way to download those keys, so signing a version of the app built on the user's machine with the same key is currently not possible.

### Expected behavior

Default keys should not be listed in the _Release Signing Key_ dropdown box for Android builds.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.