Verification for flathub

Summary

Eclipse SUMO gets published as a flatpak on flathub https://flathub.org/apps/org.eclipse.sumo and wants to get a verification badge there to show that we do the real thing (TM). This requires changes to the eclipse.org web server for the validation, see https://docs.flathub.org/docs/for-app-authors/verification. Essentially the web server would need to deliver a file under the URL https://eclipse.org/.well-known/org.flathub.VerifiedApps.txt containing a unique token provided by flathub. This issue is mainly to check whether this is possible at all or whether we can do this only on eclipse.dev (which would require us to rename the app on flathub, loosing all the history) or not even there.

The issue might be relevant for other projects too, e.g. the IDE is also on flathub https://flathub.org/apps/org.eclipse.Java and is labelled unverified. Furthermore as the whole Linux ecosystems seems to move in the direction of sandboxed apps (ubuntu snaps are another example), flathub is getting more traction recently.

Steps to reproduce

Look at https://flathub.org/apps/org.eclipse.sumo and find the "unverified" badge at the very top.

Priority

• Urgent
• High
• Medium
• Low

Severity

• Blocker
• Major
• Normal
• Low

Impact

Currently low impact