I found a workaround for an App Store Connect bug

Yesterday I published the blog post Apple again black-holed my App Store Connect bug report, which complained that Apple has twice given up on investigating my bug report without requesting additional information from me. This morning I spent some time investigating the bug myself. I believe that I’ve found the cause and a workaround. Funny, isn’t it, how a lone outside developer, in less than an hour and without the server-side source code, can do a better job at investigating an Apple bug than a team of Apple engineers? I actually had to use Google Chrome to diagnose the bug, because the Safari web inspector fails to show the full original HTTP request headers on a redirect. The odd thing about the bug is that App Store Connect redirects to the login page the first time you load a URL but successfully loads the same URL the second time, even if you’re still on the login page. I compared the two requests and found a crucial difference in the HTTP Cookie header. The two (long) Cookie:…