adsedare 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 97608657ad78aff5e5e2eb17331c109a2da49dd51a21896a62d46b17fae1f97c
-  data.tar.gz: f937d2f43ac6d13e3801326a88f2b947e7a0a24fce276524c2390a476e1d9085
+  metadata.gz: de6a221a878c99d756c8cb9779cc91145f061084c64f816e5476d4d16e297c84
+  data.tar.gz: 0c9afea95fdd8fa86ad25831528ee11591cdcf4a5557738767a7ad5d8dbdcd26
 SHA512:
-  metadata.gz: 312a6acc6df402f344f6c25b6fb83e04a447f78d3f0df550eb014f1a8897a0075efba50dd4d2813f3823f1ffd9e7c244dbdde790d63bfbe958b76aabedd60890
-  data.tar.gz: 48ac5c37a7c40278bc1c05fad1dba09e1e545d41887658863a8f0353e44bd332cdcff5914a9864aa855d1cc5a75c07d4825f20c127ff76bc41c5855f4de71c27
+  metadata.gz: 9178bc2fae2c7e1ff727702a9cd1fcc9b4fdc4b1ff51ae9e714a8ba44619108ce31b686a6e1e460d9f509d60b25e95d38b8de7f68d3a1c2053d7a291074f0bb0
+  data.tar.gz: aa57db0c849da84a65a18a58bb821a98e72facc91ef81df28f51d5050b4be08b927944d0b89b47a15c0562a09528f70b9785b3dd5d10f1f1d58fbdcc72fe22ee

data/adsedare.gemspec

@@ -31,6 +31,6 @@ Gem::Specification.new do |spec|
   spec.add_dependency "xcodeproj", "~> 1.27.0"
   spec.add_dependency "jwt", "~> 2.7"
   spec.add_dependency "faraday", "~> 2.7"
-  spec.add_dependency "faraday-cookie_jar", "~> 0.0.7" 
+  spec.add_dependency "faraday-cookie_jar", "~> 0.0.7"
   spec.add_dependency "plist", "~> 3.2.0"
 end

data/lib/adsedare/capabilities.rb

@@ -28,59 +28,60 @@ module Adsedare
     "com.apple.developer.family-controls" => "FAMILY_CONTROLS",
     "com.apple.developer.devicecheck.appattest-environment" => "APP_ATTEST",
     "com.apple.developer.game-center" => "GAME_CENTER",
-    "com.apple.developer.carplay-maps" => "CARPLAY_NAVIGATION"
+    "com.apple.developer.carplay-maps" => "CARPLAY_NAVIGATION",
   }
 
   class << self
     private
-    
+
     def parse_entitlements(path)
       raise Error, "Entitlements file not found: #{path}" unless File.exist?(path)
-      
+
       entitlements = Plist.parse_xml(path)
       capabilities = []
-      
+
       entitlements.each do |key, value|
         capability_type = ENTITLEMENTS_MAPPING[key]
         next unless capability_type
-        
+
         if key == "com.apple.security.application-groups"
           capabilities << AppGroupsCapability.new(capability_type, value)
         else
           capabilities << SimpleCapability.new(capability_type)
         end
       end
-      
+
       capabilities
     end
   end
-  
+
   class Capability
     attr_reader :type
-    
+
     def initialize(type)
       @type = type
     end
-    
+
     def check?(bundle_info)
-      bundle_info["included"].any? { 
-        |cap| cap["type"] == "capabilities" && cap["id"] == @type 
+      bundle_info["included"].any? {
+        |cap|
+        cap["type"] == "capabilities" && cap["id"] == @type
       }
     end
-    
+
     def to_bundle_capability(bundle_info, team_id)
       return {
-        "type" => "bundleIdCapabilities",
-        "attributes" => {
-          "enabled" => true,
-          "settings" => []
-        },
-        "relationships" => {
-          "capability" => {
-            "data" => { "type" => "capabilities", "id" => @type }
-          }
-        }
-      }
+               "type" => "bundleIdCapabilities",
+               "attributes" => {
+                 "enabled" => true,
+                 "settings" => [],
+               },
+               "relationships" => {
+                 "capability" => {
+                   "data" => { "type" => "capabilities", "id" => @type },
+                 },
+               },
+             }
     end
   end
 
@@ -89,34 +90,38 @@ module Adsedare
 
   class AppGroupsCapability < Capability
     attr_reader :groups
-    
+
     def initialize(type, groups)
       super(type)
       @groups = groups
     end
-    
+
     def check?(bundle_info)
-      have_capability = bundle_info["included"].any? { 
-        |cap| cap["type"] == "capabilities" && cap["id"] == @type 
+      have_capability = bundle_info["included"].any? {
+        |cap|
+        cap["type"] == "capabilities" && cap["id"] == @type
       }
       return false unless have_capability
 
-      registered_groups = bundle_info["included"].select { 
-        |cap| cap["type"] == "appGroups"
-      }.map { 
-        |cap| cap["attributes"]["identifier"]
+      registered_groups = bundle_info["included"].select {
+        |cap|
+        cap["type"] == "appGroups"
+      }.map {
+        |cap|
+        cap["attributes"]["identifier"]
       }
-      
+
       return @groups.all? { |group| registered_groups.include?(group) }
     end
-    
+
     def to_bundle_capability(bundle_info, team_id)
       registered_app_groups = {}
-      
+
       Starship::Client.get_app_groups(team_id).each {
-        |app_group| registered_app_groups[app_group["identifier"]] = app_group["applicationGroup"]
+        |app_group|
+        registered_app_groups[app_group["identifier"]] = app_group["applicationGroup"]
       }
-      
+
       @groups.each do |group|
         if not registered_app_groups.include?(group)
           new_app_group = Starship::Client.create_app_group(group, team_id)
@@ -127,11 +132,11 @@ module Adsedare
       bundle_capability = super(bundle_info, team_id)
 
       app_groups = {
-        "data" => @groups.map { |group| { "type" => "appGroups", "id" => registered_app_groups[group] } } 
+        "data" => @groups.map { |group| { "type" => "appGroups", "id" => registered_app_groups[group] } },
       }
 
       bundle_capability["relationships"]["appGroups"] = app_groups
-      
+
       return bundle_capability
     end
   end

data/lib/adsedare/export_options.rb

@@ -0,0 +1,90 @@
+require "xcodeproj"
+require "plist"
+
+require_relative "../appstoreconnect"
+
+module Adsedare
+  class << self
+    def make_export_options(project_path = nil, export_path = nil, team_id = nil, options = {})
+      raise "Project path is not set" unless project_path
+      raise "Export path is not set" unless export_path
+
+      project = Xcodeproj::Project.open(project_path)
+      export_options = {
+        "method" => "ad-hoc",
+        "destination" => "export",
+        "signingStyle" => "manual",
+        "signingCertificate" => "Apple Distribution",
+        "provisioningProfiles" => {},
+      }.merge(options)
+
+      project_bundles = []
+
+      project.targets.each do |target|
+        target.build_configurations.each do |config|
+          team_id ||= config.build_settings["DEVELOPMENT_TEAM"]
+          project_bundles << config.build_settings["PRODUCT_BUNDLE_IDENTIFIER"]
+        end
+      end
+
+      export_options["teamID"] = team_id
+
+      logger.info "Fetching bundles with profiles for team ID '#{team_id}'"
+
+      bundles_with_profiles = AppStoreConnect::Client.get_bundles_with_profiles(project_bundles)
+      bundle_by_identifier = {}
+      profiles_by_id = {}
+
+      bundles_with_profiles["data"].each do |bundle_id|
+        bundle_by_identifier[bundle_id["attributes"]["identifier"]] = bundle_id
+      end
+
+      bundles_with_profiles["included"].each do |profile|
+        profiles_by_id[profile["id"]] = profile
+      end
+
+      project_bundles.each do |bundle_identifier|
+        bundle_id = bundle_by_identifier[bundle_identifier]
+        unless bundle_id
+          logger.warn "Bundle '#{bundle_identifier}' is missing in App Store Connect. Skipping."
+          next
+        end
+
+        logger.info "Bundle '#{bundle_identifier}' resolved to Bundle ID '#{bundle_id["id"]}'"
+
+        profiles = bundle_id["relationships"]["profiles"]["data"]
+        unless profiles
+          logger.warn "Profile for Bundle ID '#{bundle_id["id"]}' is missing in App Store Connect. Skipping."
+          next
+        end
+
+        ad_hoc_profile = nil
+        profiles.each do |profile|
+          profile_id = profile["id"]
+          profile = profiles_by_id[profile_id]
+
+          if profile["attributes"]["profileType"] == "IOS_APP_ADHOC" && profile["attributes"]["profileState"] == "ACTIVE"
+            ad_hoc_profile = profile
+            break
+          end
+        end
+
+        unless ad_hoc_profile
+          logger.warn "Profile for Bundle ID '#{bundle_id["id"]}' is missing in App Store Connect. Skipping."
+          next
+        end
+
+        logger.info "Profile for Bundle ID '#{bundle_id["id"]}' resolved to Profile '#{ad_hoc_profile["attributes"]["name"]}'"
+
+        profile_name = ad_hoc_profile["attributes"]["name"]
+
+        export_options["provisioningProfiles"][bundle_identifier] = profile_name
+      end
+
+      options_plist = Plist::Emit.dump(export_options)
+      File.write(File.expand_path(export_path), options_plist)
+
+      return export_options
+    end
+  end
+end

data/lib/adsedare/keychain.rb

@@ -0,0 +1,131 @@
+# frozen_string_literal: true
+
+require "xcodeproj"
+require "base64"
+require "fileutils"
+require "tempfile"
+
+module Adsedare
+  APPLE_CERTS = [
+    "AppleWWDRCAG2.cer",
+    "AppleWWDRCAG3.cer",
+    "AppleWWDRCAG4.cer",
+    "AppleWWDRCAG5.cer",
+    "AppleWWDRCAG6.cer",
+    "AppleWWDRCAG7.cer",
+    "AppleWWDRCAG8.cer",
+    "DeveloperIDG2CA.cer",
+  ]
+  APPLE_CERTS_URL = "https://www.apple.com/certificateauthority"
+
+  APPLE_WWDRCA = "https://developer.apple.com/certificationauthority/AppleWWDRCA.cer"
+
+  class << self
+    def create_keychain(keychain_path = nil, keychain_password = nil, make_default = true)
+      raise "Keychain path is not set" unless keychain_path
+      raise "Keychain password is not set" unless keychain_password
+
+      keychain_path = File.expand_path(keychain_path)
+
+      logger.info "Creating keychain at '#{keychain_path}'"
+
+      FileUtils.mkdir_p(File.dirname(keychain_path))
+      status = system("security create-keychain -p #{keychain_password} #{keychain_path}")
+      unless status
+        logger.error "Failed to create keychain at '#{keychain_path}'"
+        return
+      end
+
+      APPLE_CERTS.each do |cert|
+        logger.info "Downloading certificate '#{cert}'"
+
+        response = Faraday.get(
+          "#{APPLE_CERTS_URL}/#{cert}"
+        )
+        unless response.status == 200
+          logger.error "Failed to download certificate '#{cert}'"
+          next
+        end
+
+        file = Tempfile.new(cert)
+        file.write(response.body)
+        file.close
+
+        install_certificate(file.path, keychain_path)
+
+        file.unlink
+      end
+
+      logger.info "Downloading certificate 'AppleWWDRCA.cer'"
+      response = Faraday.get(
+        APPLE_WWDRCA
+      )
+      unless response.status == 200
+        logger.error "Failed to download certificate 'AppleWWDRCA.cer'"
+      else
+        file = Tempfile.new("AppleWWDRCA.cer")
+        file.write(response.body)
+        file.close
+
+        install_certificate(file.path, keychain_path)
+
+        file.unlink
+      end
+
+      ad_hoc_certificate = ENV["AD_HOC_CERTIFICATE"]
+      ad_hoc_private_key = ENV["AD_HOC_PRIVATE_KEY"]
+      ad_hoc_key_password = ENV["AD_HOC_KEY_PASSWORD"]
+
+      unless ad_hoc_certificate || ad_hoc_private_key || ad_hoc_key_password
+        logger.warn "AD_HOC_CERTIFICATE, AD_HOC_PRIVATE_KEY, or AD_HOC_KEY_PASSWORD is not set"
+        return
+      end
+
+      install_certificate(ad_hoc_private_key, keychain_path, ad_hoc_key_password, "priv")
+      install_certificate(ad_hoc_certificate, keychain_path, "", "cert")
+
+      if make_default
+        status = system("security default-keychain -d user -s #{keychain_path}")
+        unless status
+          logger.warn "Failed to set default keychain"
+          return
+        end
+      end
+
+      status = system("security set-keychain-settings #{keychain_path}")
+      unless status
+        logger.error "Failed to set keychain settings"
+        return
+      end
+
+      status = system("security set-key-partition-list -S apple-tool:,apple: -k #{keychain_password} #{keychain_path}")
+      unless status
+        logger.error "Failed to set keychain partition list"
+        return
+      end
+
+      status = system("security unlock-keychain -p #{keychain_password} #{keychain_path}")
+      unless status
+        logger.error "Failed to unlock keychain"
+        return
+      end
+
+      logger.info "Keychain created at '#{keychain_path}'"
+    end
+
+    private
+
+    def install_certificate(certificate_path, keychain_path, certificate_password = "", certificate_type = "cert")
+      certificate_name = File.basename(certificate_path)
+      logger.info "Installing certificate '#{certificate_name}' to keychain '#{keychain_path}'"
+
+      status = system("security import #{certificate_path} -k #{keychain_path} -t #{certificate_type} -A -P #{certificate_password} -T /usr/bin/codesign -T /usr/bin/security -T /usr/bin/productbuild")
+      unless status
+        logger.error "Failed to install certificate '#{certificate_name}' to keychain '#{keychain_path}'"
+        return
+      end
+
+      logger.info "Certificate '#{certificate_name}' installed to keychain '#{keychain_path}'"
+    end
+  end
+end

data/lib/adsedare/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Adsedare
-  VERSION = "0.0.1"
+  VERSION = "0.0.2"
 end

data/lib/adsedare/xcodeproj.rb

@@ -0,0 +1,76 @@
+require "xcodeproj"
+require "plist"
+
+require_relative "../appstoreconnect"
+
+module Adsedare
+  class << self
+    def patch_project(project_path, team_id = nil)
+      raise "Project path is not set" unless project_path
+
+      project = Xcodeproj::Project.open(project_path)
+
+      project_bundles = project.targets.map do |target|
+        target.build_configurations.map do |config|
+          config.build_settings["PRODUCT_BUNDLE_IDENTIFIER"]
+        end
+      end.flatten.uniq
+
+      bundles_with_profiles = AppStoreConnect::Client.get_bundles_with_profiles(project_bundles)
+      bundle_by_identifier = {}
+      profiles_by_id = {}
+
+      bundles_with_profiles["data"].each do |bundle_id|
+        bundle_by_identifier[bundle_id["attributes"]["identifier"]] = bundle_id
+      end
+
+      bundles_with_profiles["included"].each do |profile|
+        profiles_by_id[profile["id"]] = profile
+      end
+
+      project.targets.each do |target|
+        target.build_configurations.each do |config|
+          bundle_identifier = config.build_settings["PRODUCT_BUNDLE_IDENTIFIER"]
+          bundle_id = bundle_by_identifier[bundle_identifier]
+          unless bundle_id
+            logger.warn "Bundle '#{bundle_identifier}' is missing in App Store Connect. Skipping."
+            next
+          end
+
+          logger.info "Bundle '#{bundle_identifier}' resolved to Bundle ID '#{bundle_id["id"]}'"
+
+          profiles = bundle_id["relationships"]["profiles"]["data"]
+          unless profiles
+            logger.warn "Profile for Bundle ID '#{bundle_id["id"]}' is missing in App Store Connect. Skipping."
+            next
+          end
+
+          ad_hoc_profile = nil
+          profiles.each do |profile|
+            profile_id = profile["id"]
+            profile = profiles_by_id[profile_id]
+
+            if profile["attributes"]["profileType"] == "IOS_APP_ADHOC" && profile["attributes"]["profileState"] == "ACTIVE"
+              ad_hoc_profile = profile
+              break
+            end
+          end
+
+          unless ad_hoc_profile
+            logger.warn "Profile for Bundle ID '#{bundle_id["id"]}' is missing in App Store Connect. Skipping."
+            next
+          end
+
+          config.build_settings["CODE_SIGN_IDENTITY"] = "iPhone Distribution"
+          config.build_settings["CODE_SIGN_STYLE"] = "Manual"
+          if team_id
+            config.build_settings["DEVELOPMENT_TEAM"] = team_id
+          end
+          config.build_settings["PROVISIONING_PROFILE_SPECIFIER"] = ad_hoc_profile["attributes"]["name"]
+        end
+      end
+
+      project.save
+    end
+  end
+end