Provide Privacy Manifest support for AFNetworking

[LittleWangYe]

Provide Privacy Manifest support for AFNetworking

[mithleshgomotive]

I tried yesterday to upload a TestFlight build containing privacy changes for my app, and I was using AFNetworking since very long time. This time I did not get any warning for privacy APIs.

Also, confirmed by @jshier that AFNetworking doesn't use any privacy APIs & myself also confirmed just searching code.

[jshier]

You'd have to ask Apple. If you link AFNetworking statically, the linked targets manifest will cover it anyway.

[mohsinbmwm3]

wlxo0401 you can fork it in your personal repo

[FernandoReynoso]

Hmm so what could be the point of having it? Even Apple suggests to avoid adding empty Privacy Manifests if SDK does not require it.

https://forums.developer.apple.com/forums/thread/746481

Thanks @jshier
Just seeking clarity on the web as one of our project continues to utilize AFNetworking, and we're actively collecting essential details to align with upcoming guidelines.

[wlxo0401]

@mithleshgomotive

Create a simple project that is empty and add AFNetworking.

And submit the test flight external distribution.

If you have a problem, you can receive the mail content and add Privacy Manifest.

If you don't have a problem, you can add an empty Privacy Manifest.

However, Apple is recommending that Privacy Manifest be removed if it is empty.

[GH-Ong]

+1 for privacymanifest and code signing requirements for AFNetworking

[abhistin]

@mithleshgomotive so according to apple it means if we include any listed SDK and then send the update to app store connect or we create a brand new app with listed SDKs and submitting it to apple, only in those two scenarios we need to include manifest file for those SDKs?
But if our app is 6-7 years old already using AFNetworking, and already on the app store, so after 1 May 2024, if we do not include a manifest file in that for the listed SDK, then Apple can reject our app.?

[jshier]

AFNetworking will not be receiving any update. It hasn't been updated in four years and I deprecated it a year ago. Apple obviously didn't look at the state of the project when it was added to any lists. As recommended when it was deprecated, either upgrade to Alamofire or copy AFNetworking into your project.

[wlxo0401]

@jshier
Does copying AFNetworking networking to the project mean using the code as a direct declaration to the project rather than installing it in the form of a library???

[FernandoReynoso]

@mohsinbmwm3 I know AFNetworking is in Apple's list but does it use any of the listed APIs?

[jshier]

I don't believe so.

[ptlCoder]

AFNetworking is being used by so many people that it would be nice to add a private list to make it easier for all developers. I hope the author can see it.

[wlxo0401]

If there are any types you need to add, add them to PrivacyInfo on the app.

[abhistin]

Even in my project, AFNetworking is being used, and not sure what to do, should upgrade to Alamofire, or is there another way?
Could someone please let me know...

[jenhausu]

@abhistin Upgrading to Alamofire takes a lot of effort, so I fork AFNetworking to my organization and add privacy manifest myself.

[mithleshgomotive]

@jenhausu can you share privacy manifest file here - what all APIs it has ?

[abhistin]

@jenhausu Yes please if you could share the privacy manifest for AFNetworking, otherwise I think I need to dig into its code.

[abhistin]

Hi I just saw Sean Allen video on privacy manifest and got a doubt at this timestamp https://youtu.be/T6IvImk66m8?si=SY8iapTOIDs-J-j1&t=153
If I have an app 6-7 years old using AFNetworking, then the rule(to include manifest file for AFNetworking) doesn't apply to my app?
Is it for If I include the AFNetworking library now in my project and if I am creating a brand new app with AFNetworking?

Could any body please give me a confirmation on it.

[mithleshgomotive]

@abhistin this is as per Apple.

Starting in spring 2024, you must include the privacy manifest for any SDK listed below when you submit new apps in App Store Connect that include those SDKs, or when you submit an app update that adds one of the listed SDKs as part of the update.

[rahul-sysquare]

@abhistin In the youtube video of Sean Allen he mentioned in comments that older apps also have to do this even the older app haven't added any SDK

[rahul-sysquare]

I'm trying to figure out that do I have to work on this or not as we are not getting any warning emails. We released an update today but no warning mails are coming for privacy manifest.

[PasqualePuzio]

I'm trying to figure out that do I have to work on this or not as we are not getting any warning emails. We released an update today but no warning mails are coming for privacy manifest.

Same here. We also use AFNetworking and haven't received so far any warning. We're a bit confused :)