Apple blocks IPA uploads via app-specific passwords with error -22938
Around October 28, 2026, Apple stopped accepting IPA uploads authenticated with an Apple ID and app-specific password, returning error -22938 at the gateway instead of JSON. The documented workaround is the App Store Connect Build Uploads API with an API key (JWT) and chunked 5 MB uploads.
- Error -22938 comes from the daiquiri/5 gateway before reaching the backend
- Affected tools include ios-uploader and CI scripts on Windows and Linux
- Build Uploads API uses POST /v1/buildUploads and presigned upload URLs
- Valid assetType values are ASSET, ASSET_DESCRIPTION and ASSET_SPI, not IPA
Read next
Software