问题
I am building an Apple developer analytics app, which displays info stored in itunesconnect Daily Sales Reports. Thus I would like to automatically download these Daily Sales Reports (which I achieved by using this script). This app will be released on the Mac App Store and is sandboxed.
Am I allowed to ask for and store a user's itunesconnect password?
If so, what is the correct way to do it?
EDIT: Thank you James and Michael, Keychain Services is definitely the way to go.
I do have one follow up question.
回答1:
The answer is yes, thank you James and Michael, and the correct way to store it is with Keychain Services. I used an objective-c wrapper that you can find here.
回答2:
Disregard my earlier comment, I misunderstood your question (I thought you were trying to access a database). If the user gives you the information willingly, there is not problem; the issues would arise if you tried to trick the users into giving you the information. As for the correct way to do this, you could just ask them to put in their password, giving them the ways you would use them. There would, however, possibly be legal issues down the road if you use the passwords in a different way then you tell the user.
来源：https://stackoverflow.com/questions/12450866/am-i-allowed-to-ask-for-and-store-a-users-itunesconnect-password