REST Gateway · Unified Response · Bearer Auth

Turn App Store Connect capabilities into stable, controllable internal APIs

Unify authentication, standardize response payloads, and rely on built-in retries with observability logs so your release, signing, device, and TestFlight automations are more reliable.

View Source Repository

Module Capabilities

Organized around common App Store Connect automation workflows, with clear endpoint naming for easy internal integration.

Token

Generate ES256 JWT tokens for upstream Apple API calls.

Apps

App listing, app details, and version queries.

Devices

Device registration, updates, deletion, and paginated queries.

Bundle IDs

Bundle ID lifecycle management.

Certificates

Certificate listing, details, and deletion operations.

Profiles

Profile creation, querying, and deletion.

TestFlight

Beta Groups, Testers, and Builds queries.

Localizations

CRUD operations for App Store version localizations.

Quick Start

Get running in three steps: start the service, create a token, and call protected endpoints.

1. Start Local Gateway

php -S 127.0.0.1:8080 v1/index.php

2. Create JWT

curl -X POST http://127.0.0.1:8080/v1/token \
  -H "Content-Type: application/json" \
  -d '{"iss":"<issuer-id>","kid":"<key-id>"}'

3. Call Business Endpoint

curl http://127.0.0.1:8080/v1/apps \
  -H "Authorization: Bearer <jwt-token>"

Unified Response Shape

{
  "success": true,
  "request_id": "84744b77baefc0c3",
  "data": { }
}

Request Flow

Production-ready observability: end-to-end request IDs, upstream attempt/result logs, and traceable failures.

STEP 1

A client request enters the gateway, then request_id is generated and propagated.

STEP 2

Validate Bearer token and input parameters, and reject invalid requests.

STEP 3

Call Apple API and apply idempotent retries with exponential backoff.

STEP 4

Return unified JSON responses and record inbound/outbound logs.