Grpc-web: mac os 10.15 notarized notification

[clovis818]

“protoc-gen-grpc-web” cannot be opened because the developer cannot be verified.
macOS cannot verify that this app is free from malware.

[stanley-cheung]

If this is true (I don't have a Catalina machine to test right now), we may not have enough resources to sustain going through the whole process to get this verified through the official channel going forward. We might not be able to support this (i.e. prebuilt binaries for MacOS for Catalina or above). We might only be able to support this through bazel build.

Will keep monitoring this development.

[clovis818]

There is a way to bypass this issue on mac os 10.15

1. Try to run "/usr/local/bin/protoc-gen-grpc-web --help"
2. Click Cancel when notified about an unverified developer
3. Go to Settings -> Security & Privacy -> General
4. Click on Allow Anyway
   And it should work from now on, you will need to do this again the next time you update.

[Yannic]

A similar issue was reported for Bazel in September [1]. The workaround seems to be to download the binary through, e.g, curl, which doesn't mark the binary as downloaded from the internet, hence isn't subject to the new restriction.

[1] https://github.com/bazelbuild/bazel/issues/9304#issuecomment-527936336

[stanley-cheung]

Looks like there's sufficient workaround for this. :)