Hey all. I "Archived" my XCode application, notarized through XCode, exported the .app and used a program create-dmg to generate a DMG for me. I then notarized this using the xcrun notarytool submit Lyric\ Fever\ 1.7.dmg --keychain-profile "notarytoolProfile" command as well as xcrun stapler staple Lyric\ Fever\ 1.7.dmg, both of which passed. Running syspolicy_check distribution also passes. So does xcrun stapler validate. This dmg still fails when testing using spctl. spctl -a -t open -vvv --context context:primary-signature Lyric\ Fever\ 1.7.dmg generates the following error: Lyric Fever 1.7.dmg: rejected origin=Apple Development: Avi Wadhwa (#######) Furthermore, I uploaded this dmg to github and redownloaded it. This newly downloaded dmg does not open in finder, prompting the "unidentifier developer, malware" message. Yet xcrun stapler validate passes, and so does syspolicy_check distribution. I know as per Eskimo's previous posts that this is not the ideal way to test notarization (and setting a macOS vm is the best method), but if I cannot download my own dmg from GitHub then something is clearly wrong.

Hi everyone. My app "FriendActivity for Spotify" is a third party app that uses the Spotify API. As such, I need the user to log into their Spotify account. This has been going well for 3 years, but today, I got rejected trying to push an update. The reason is: "Unable to log in with an Apple account". This is because if you attempt to log in with an Apple account that isn't connected to a Spotify account, Spotify sends you back to the login screen, stating that no account associated with your Apple ID was found. I understand that the Apple store reviewers want a smooth experience where it should have automatically created a Spotify account, but this is out of my hands. It is completely unreasonable that my app is held up but the official Spotify app as well as the 1000s of third party apps are on the store, considering all of us share the same login flow decided by Spotify. It is completely irrational. I have replied with similar messages on the App review page, but the store reviewer keeps sending me the same rejection, copy pasted. I truly do not know what to do. This update was an urgent bugfix, as my user's haven't been able to access my app for the past week. Any suggestions recommended.