This repository is a PHP library for creating Apple Wallet passes (.pkpass files) and related functionality. It provides classes to generate, sign, and package passes according to Apple's Wallet specifications, including support for boarding passes, store cards, event tickets, and financial orders. The library handles certificate-based signing, file inclusion, localization, and pass creation through a clean object-oriented interface. The architecture centers around the PKPass class which implements the core pass creation logic, including manifest generation, signature creation using OpenSSL, and ZIP packaging. FinanceOrder extends PKPass for financial transaction orders with order-specific constants and SHA-256 hashing. PKPassBundle enables combining multiple passes into a single .pkpasses file for bulk distribution. The Push class handles Apple Push Notification Service (APNS) integration for sending pass updates to devices. Key features include flexible data input (arrays or JSON strings), file management (local, remote, and string content), localization support, and proper error handling through custom exceptions. The library requires PHP 7.0+ with ZIP, JSON, and OpenSSL extensions, and includes comprehensive testing via PHPUnit.
This repository is the content and configuration backend for the WSF iOS sideloading service, centered on the Portal app. It contains no application source code; instead it stores static distribution assets: an AltStore-compatible app repository manifest (repo/app-repo.json), pre-signed IPA binaries for Portal under various enterprise certificates (portal/signed/), JSON configuration files consumed by the Portal app (portal/configurationfiles/), markdown installation and usage guides (portal/guides/), and DNS allow/deny lists designed to block Apple's certificate-revocation endpoints (documents/dns/). In production, the Portal iOS app fetches updates, downloads, guide listings, and app metadata from this repository via raw GitHub or a Netlify-hosted website, while users sideload the signed IPAs directly. The architecture is a flat static-file distribution model: no servers, no build pipeline, and no runtime logic exist in this repo. The most notable technical asset is the curated DNS filter list that blocks Apple OCSP/CRL/App Attest domains while allowlisting essential services like push notifications, iCloud, and the App Store — a circumvention technique to prevent certificate revocations. The repository also includes legal documents (privacy policy and terms of service) governing the sale of signing certificates, which are processed through Stripe and supported via Discord. As a software asset, this repo has no code to build, test, or refactor; its value lies in the structured JSON, the domain-specific DNS lists, and the curated guides. It is functional and organized for its niche purpose, but has minimal reusability beyond serving as a template for similar sideloading distribution repos.