Tauri 2 macOS app cannot be opened: "contains malware" with Apple Development Certificate, or notarization blocked with Apple Distribution Certificate for IAP testing

Hi everyone,

I'm developing a macOS app using Tauri 2. I need to test In-App Purchases (IAP), which requires running the actual built .app (it doesn't work properly in the development environment).I tried two approaches:

Apple Development Certificate (free account): After cargo tauri build, the app "Mind Elixir.app" shows this error when I try to open it: “Mind Elixir.app” was not opened because it contains malware. This action did not harm your Mac.

Apple Distribution Certificate: The app builds successfully, but because it is not notarized, Gatekeeper completely blocks it and I cannot open it at all.

I just want to test IAP locally on my own Mac during development. Is there any other way to get a properly signed and runnable .app for testing IAP? Any help or workaround would be greatly appreciated. Thanks!

Answered by DTS Engineer in 885083022

In-app purchase is only support for App Store distribution, so Developer ID isn’t a factor here.

In general, you can’t run code signed with an Apple Distribution signing identity. See Don’t Run App Store Distribution-Signed Code.

Is there any other way to get a properly signed and runnable .app for testing IAP?

Yes. Use an Apple Development signing identity whose certificate was issued by your paid development team (the same team you used to set up the Apple Distribution signing identity). Apps signed this way will talk the StoreKit sandbox, can use StoreKit Test, and so on.

I can’t help you with the third-party tools you’re using, but to do thish in Xcode you:

  1. Navigate to Signing & Capabilities.

  2. Enable “Automatically manage signing”.

  3. Select your paid team is the Team popup.

  4. Select Development in the Signing Certificate popup.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

In-app purchase is only support for App Store distribution, so Developer ID isn’t a factor here.

In general, you can’t run code signed with an Apple Distribution signing identity. See Don’t Run App Store Distribution-Signed Code.

Is there any other way to get a properly signed and runnable .app for testing IAP?

Yes. Use an Apple Development signing identity whose certificate was issued by your paid development team (the same team you used to set up the Apple Distribution signing identity). Apps signed this way will talk the StoreKit sandbox, can use StoreKit Test, and so on.

I can’t help you with the third-party tools you’re using, but to do thish in Xcode you:

  1. Navigate to Signing & Capabilities.

  2. Enable “Automatically manage signing”.

  3. Select your paid team is the Team popup.

  4. Select Development in the Signing Certificate popup.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Tauri 2 macOS app cannot be opened: "contains malware" with Apple Development Certificate, or notarization blocked with Apple Distribution Certificate for IAP testing
 
 
Q