| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <key>com.apple.security.app-sandbox</key> |
| 6 | <true/> |
| 7 | <key>com.apple.security.files.user-selected.read-only</key> |
| 8 | <true/> |
| 9 | <key>com.apple.security.network.client</key> |
| 10 | <true/> |
| 11 | <key>aps-environment</key> |
| 12 | <string>development</string> |
| 13 | <!-- Communication notifications: lets the NSE restyle a message banner via |
| 14 | INSendMessageIntent — sender's photo as the icon, app icon badged. --> |
| 15 | <key>com.apple.developer.usernotifications.communication</key> |
| 16 | <true/> |
| 17 | <!-- Sign in with Apple: the native SiwA door (SignInWithEleven). The App |
| 18 | ID carries the capability; home verifies the identity token with this |
| 19 | bundle id as an accepted audience. --> |
| 20 | <key>com.apple.developer.applesignin</key> |
| 21 | <array> |
| 22 | <string>Default</string> |
| 23 | </array> |
| 24 | <!-- Universal links: tapping an https invite link on any instance subdomain |
| 25 | opens the app directly (delivered to onOpenURL, fragment included). --> |
| 26 | <key>com.apple.developer.associated-domains</key> |
| 27 | <array> |
| 28 | <string>applinks:*.elevenmessenger.com</string> |
| 29 | <!-- Message permalinks (issue #905): 11ch.at is the one shared short |
| 30 | domain every instance's "Copy link" can route through, since a |
| 31 | dynamically-created instance host can't be listed here ahead of |
| 32 | time. Server side: linkscmd.go (lchat links run). --> |
| 33 | <string>applinks:11ch.at</string> |
| 34 | <!-- Fleet spaces live at <sqid>.11ch.at — the wildcard covers them |
| 35 | so a tapped /join link opens the app's confirm card (each |
| 36 | instance serves its own apple-app-site-association). Custom |
| 37 | domains can never be listed here; the join page stays the |
| 38 | universal fallback. --> |
| 39 | <string>applinks:*.11ch.at</string> |
| 40 | <!-- "Sign in with Eleven": native passkeys bind to the home server, |
| 41 | which serves the matching apple-app-site-association. The dev |
| 42 | clone rides along so a Debug build pointed there (HomeBase's |
| 43 | LCHAT_HOME_BASE / home_base_override) can run the ceremony too. --> |
| 44 | <string>webcredentials:home.elevenmessenger.com?mode=developer</string> |
| 45 | <string>webcredentials:home.dev.elevenmessenger.com?mode=developer</string> |
| 46 | </array> |
| 47 | <key>com.apple.security.application-groups</key> |
| 48 | <array> |
| 49 | <string>group.com.elevenmessenger.messenger</string> |
| 50 | </array> |
| 51 | <key>keychain-access-groups</key> |
| 52 | <array> |
| 53 | <string>$(AppIdentifierPrefix)com.elevenmessenger.messenger.shared</string> |
| 54 | </array> |
| 55 | </dict> |
| 56 | </plist> |
| 57 | |
amadan