app_permission_statistics 0.1.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 6cf028216ad0a5eb9e5db38cc608dfa4c52ff7df9cd4a3edbbb9e34a1c56af96
+  data.tar.gz: 0c2556087ea1bae27ddb2f0f175f34f503fff720c9bae41c6810f23cf24f9cb2
+SHA512:
+  metadata.gz: 624c434805872eeb40a78bdea1e743b5c62e71dc30f21577736efa06b2ab7af17c446c664aae43a6c6e8dbf41224fcaba60a9a39229b3e633f1596a56be33e1f
+  data.tar.gz: 6846d46f81aa9ce88667948dd379c19b3562356811898028fb9f1906fe5d9309caa72468067faba8f6d9dcbcb7352383ca336483a8a3f9a652199fbd41dbf3c2

data/.gitignore

@@ -0,0 +1,8 @@
+/.bundle/
+/.yardoc
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/

data/Gemfile

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+# Specify your gem's dependencies in app_permission_statistics.gemspec
+gemspec
+
+gem "rake", "~> 13.0"
+gem 'crimp'
+gem 'zip'

data/Gemfile.lock

@@ -0,0 +1,33 @@
+PATH
+  remote: .
+  specs:
+    app_permission_statistics (0.1.0)
+      CFPropertyList (>= 2.3.4, < 3.1.0)
+      crimp
+      yaml
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    CFPropertyList (3.0.5)
+      rexml
+    crimp (1.0.0)
+      deepsort
+    deepsort (0.4.5)
+    rake (13.0.6)
+    rexml (3.2.4)
+    yaml (0.1.1)
+    zip (2.0.2)
+
+PLATFORMS
+  x86_64-darwin-21
+
+DEPENDENCIES
+  app_permission_statistics!
+  bundler (>= 1.12)
+  crimp
+  rake (~> 13.0)
+  zip
+
+BUNDLED WITH
+   2.2.3

data/README.md

@@ -0,0 +1,124 @@
+# AppPermissionStatistics
+
+ 传入两个IPA包路径，统计分析权限，并输出报告文件 
+
+## Installation
+
+```shell
+$ sudo gem install app_permission_statistics
+```
+
+## Usage
+
+```shell
+# 命令行输入
+$ app_permission_statistics path/to/file1.ipa  path/to/file2.ipa 
+# 支持自定义报告输出路径
+# app_permission_statistics path/to/file1.ipa  path/to/file2.ipa  path/to/report
+```
+
+> 也可以作为cocoapods插件,集成进打包流程
+> 
+> 仓库地址：https://github.com/olaola-chat/cli-cocoapods-entitlements-statistics
+
+## 说明
+
+##### 版本权限统计
+
+默认会在 ~/appInfo-#{app_bundle_id}/ 下为每个版本建立权限统计文件
+
+```yaml
+
+├── appInfo-com.ola.chat
+│   ├── entitlements_5.2.0.yml
+│   ├── entitlements_5.3.0.yml
+│   └── entitlements_versions.yml
+```
+
+##### 报告内容如下: 
+
+* 权限变化对比分析(增、删、改)
+* (对比的各)版本权限列表详情
+
+```yaml
+
+compared 5.3.0  5.2.0
+
+modify capabilitys :
+5.3.0
+- items ..
+5.2.0
+- items ..
+------------------------------
+add capabilitys :
+- items ..
+------------------------------
+remove capabilitys :
+- items ..
+------------------------------
+
+5.3.0 entitlements list:
+...
+
+5.2.0 entitlements list:
+...
+
+```
+
+## iOS 项目权限
+
+#### 大致分类 Capabilitys、info.plist(Cocoa Keys)
+
+*  Capabilitys
+
+    > Xcode->Target->Signing&Capabilitys->Capabilitys 下添加和删除 Capabilitys , 这里不是随便添加的,需要首先在苹果开发者后台注册或者声明对应Capabilitys. 更新的Provisioning Profile文件,其中包含Entitlements 字段包含(几乎所有的)已注册Capabilitys, Xcode中添加Capabilitys后会同Profile文件校验。不匹配则无法通过编译签名。
+
+    Supported capabilities (iOS): 
+    https://developer.apple.com/help/account/reference/supported-capabilities-ios
+
+*  info.plist (Cocoa Key-Values)
+   *  NS{Permissions}UsageDescription
+      > info.plist 中声明使用相机、麦克风、摄像头..等权限的说明
+
+   *  其它权限声明Keys 
+      > info.plist 中也会包含一些权限的详细设置、声明，比如屏幕高刷、代理、后台模式...
+    
+    info.plist 涉及的所有 Cocoa Keys 
+    https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW1
+
+#### 涉及的文件 
+
+* info.plist 
+* Runner.entitlements  
+* {embedded/xxx-xx-xx}.mobileprovision
+embedded.mobileprovision 存在于IPA包中,被发送到Appstore，真正安装的app 却没有这个文件
+xxx-xx-xx.mobileprovision 在打包成IPA前用于工程签名的描述文件
+两者基本一致，包括里面的Entitlements字段, 保存一些 Capabilitys被添加后的 声明、设置
+* Runner.xcodeproj 
+工程文件SystemCapabilities字段包含了一些Capabilitys声明
+
+
+#### 文件说明：
+
+xx.mobileprovision
+  https://developer.apple.com/forums/thread/685723
+
+Runner.entitlements 
+  https://developer.apple.com/library/archive/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AboutEntitlements.html#//apple_ref/doc/uid/TP40011195-CH1-SW1
+
+#### 问题
+
+* IPA包中找不到 In-App Purchase 功能标记
+
+    > 一般Capabilitys添加后会在Runner.entitlements、xx.mobileprovision找到对应key:value声明、设置 
+
+   添加 In-App Purchase后, 仅在Runner.xcodeproj中有  "com.apple.InAppPurchase"=>{"enabled"=>"1"} 声明 
+
+*  Background Modes 属于 Capabilitys 中的异类
+    
+    > 一般Capabilitys添加后会在Runner.entitlements、xx.mobileprovision找到对应key:value声明、设置， 而Background Modes在这里没有任何记录
+    
+    Background Modes的声明位置: 
+    * Runner.xcodeproj : "com.apple.BackgroundModes"=>{"enabled"=>"1"}
+    * info.plist : "UIBackgroundModes"=>{"audio"、"remote-notification" ...}
+

data/Rakefile

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+task default: %i[]

data/analyze_report

@@ -0,0 +1,481 @@
+
+compared 5.3.0  5.2.0
+
+add capabilitys : 
+- ClassKit: {"com.apple.developer.ClassKit-environment"=>"development"}
+- MDM Managed Associated Domains: {"com.apple.developer.associated-domains.mdm-managed"=>true}
+- AutoFill Credential Provider: {"com.apple.developer.authentication-services.autofill-credential-provider"=>true}
+- Data Protection: {"com.apple.developer.default-data-protection"=>"NSFileProtectionComplete"}
+- App Attest: {"com.apple.developer.devicecheck.appattest-environment"=>"development"}
+- Game Center: {"com.apple.developer.game-center"=>true}
+- HealthKit: {"com.apple.developer.healthkit"=>true, "com.apple.developer.healthkit.access"=>["health-records"]}
+- HomeKit: {"com.apple.developer.homekit"=>true}
+- iCloud: {"com.apple.developer.icloud-services"=>["CloudKit"], "com.apple.developer.icloud-container-identifiers"=>[]}
+- Apple Pay: {"com.apple.developer.in-app-payments"=>["merchant.xxxx"]}
+- Extended Virtual Address Space: {"com.apple.developer.kernel.extended-virtual-addressing"=>true}
+- Hotspot: {"com.apple.developer.networking.HotspotConfiguration"=>true}
+- Multipath: {"com.apple.developer.networking.multipath"=>true}
+- Network Extensions: {"com.apple.developer.networking.networkextension"=>["app-proxy-provider"]}
+- Personal VPN: {"com.apple.developer.networking.vpn.api"=>["allow-vpn"]}
+- Access WiFi Information: {"com.apple.developer.networking.wifi-info"=>true}
+- NFC Tag Reading: {"com.apple.developer.nfc.readersession.formats"=>["TAG"]}
+- Wallet: {"com.apple.developer.pass-type-identifiers"=>["$(TeamIdentifierPrefix)*"]}
+- SiriKit: {"com.apple.developer.siri"=>true}
+- Fonts: {"com.apple.developer.user-fonts"=>["system-installation"]}
+- Wireless Accessory Configuration: {"com.apple.external-accessory.wireless-configuration"=>true}
+- Inter-App Audio: {"inter-app-audio"=>true}
+- Keychain sharing: {"keychain-access-groups"=>["$(AppIdentifierPrefix)com.ola.chat"]}
+------------------------------
+
+
+5.3.0 entitlements list: 
+
+---
+
+Capabilities_Summary:
+
+  In-App Purchase: 6413cfeb7a89f7e0a8872f82b919c0d9
+
+  Push Notifications: 3250c7ff60c20cfc4aaf7f6791f621df
+
+  ClassKit: 0ab2c8bb2a021beda00a0d4e6a65093a
+
+  Sign In with Apple: 6642376617933be4ae31b129fe403e45
+
+  Associated Domains: fa57cad0e93096199dfdefff0b6e8b92
+
+  MDM Managed Associated Domains: d479f7996a4c3f82893b79d2361311f1
+
+  AutoFill Credential Provider: 316f5abc6e0273338046ebb32ed076db
+
+  Data Protection: b94eb6e40823b5c674de4ad4dd1c9734
+
+  App Attest: 3e66df09c974344e2c16c3e875ade176
+
+  Game Center: dd324a9aec2a55ca5573f5cb810b58e8
+
+  HealthKit: 94ab8d6e039b1c6b135cf70e0fa9240d
+
+  HomeKit: 68dfbc37633b4583a3c2ec50dc1c59c6
+
+  iCloud: 2f650c9ade273e460d54789666112ae8
+
+  Apple Pay: 2187796935490abf56a2ba4b93da459c
+
+  Extended Virtual Address Space: f88e975f4f6b323f956df612ca056eec
+
+  Hotspot: ee58dbfd5c0acc611961dc56f8219ddf
+
+  Multipath: 659f7b23b5dcbb1044502b01eac16dbd
+
+  Network Extensions: ce506e239bec78bd2ba9b26550fd4c4d
+
+  Personal VPN: ee79bdeedc8217160a331bc326034774
+
+  Access WiFi Information: e98b72e88cbd24b0639b7f9e684e0d8c
+
+  NFC Tag Reading: 60016cce4b8845b0f777a731f06c2ef1
+
+  Wallet: fefc7cf9c4f7b017d060ca5561215c9c
+
+  SiriKit: ce40d86d84b2e46b4158ba77c3170f12
+
+  Fonts: bfcebec5a589a962d019ef3a2755f1c8
+
+  Wireless Accessory Configuration: d9ce63e447005bf4a4c936e718597637
+
+  App Groups: 0b5c02cd472237b540efda80297cbe79
+
+  Inter-App Audio: 7abecaa3b35ccaf065573d44a34fc67c
+
+  Keychain sharing: e86942b735901fee337fc5f4a57401e3
+
+  BackgroundModes: d741c9bb5ce83f8ac40d365ae4a92c5b
+
+  DisableMinimumFrameDurationOnPhone: 00c4662d62ca111b7a420649beaf5bf7
+
+  RequiredDeviceCapabilities: ce80d3d730b0bea7ffd2bfc2f2d8f4a4
+
+  AppTransportSecurity: 931810d61eb28fc7e1b358fb592e7ecc
+
+Capabilities:
+
+  In-App Purchase: true
+
+  Push Notifications:
+
+    aps-environment: development
+
+  ClassKit:
+
+    com.apple.developer.ClassKit-environment: development
+
+  Sign In with Apple:
+
+    com.apple.developer.applesignin:
+
+    - Default
+
+  Associated Domains:
+
+    com.apple.developer.associated-domains:
+
+    - applinks:partyhub.onelink.me
+
+    - applinks:partying-ios-alternate.app.link
+
+    - applinks:partying-ios.app.link
+
+  MDM Managed Associated Domains:
+
+    com.apple.developer.associated-domains.mdm-managed: true
+
+  AutoFill Credential Provider:
+
+    com.apple.developer.authentication-services.autofill-credential-provider: true
+
+  Data Protection:
+
+    com.apple.developer.default-data-protection: NSFileProtectionComplete
+
+  App Attest:
+
+    com.apple.developer.devicecheck.appattest-environment: development
+
+  Game Center:
+
+    com.apple.developer.game-center: true
+
+  HealthKit:
+
+    com.apple.developer.healthkit: true
+
+    com.apple.developer.healthkit.access:
+
+    - health-records
+
+  HomeKit:
+
+    com.apple.developer.homekit: true
+
+  iCloud:
+
+    com.apple.developer.icloud-services:
+
+    - CloudKit
+
+    com.apple.developer.icloud-container-identifiers: []
+
+  Apple Pay:
+
+    com.apple.developer.in-app-payments:
+
+    - merchant.xxxx
+
+  Extended Virtual Address Space:
+
+    com.apple.developer.kernel.extended-virtual-addressing: true
+
+  Hotspot:
+
+    com.apple.developer.networking.HotspotConfiguration: true
+
+  Multipath:
+
+    com.apple.developer.networking.multipath: true
+
+  Network Extensions:
+
+    com.apple.developer.networking.networkextension:
+
+    - app-proxy-provider
+
+  Personal VPN:
+
+    com.apple.developer.networking.vpn.api:
+
+    - allow-vpn
+
+  Access WiFi Information:
+
+    com.apple.developer.networking.wifi-info: true
+
+  NFC Tag Reading:
+
+    com.apple.developer.nfc.readersession.formats:
+
+    - TAG
+
+  Wallet:
+
+    com.apple.developer.pass-type-identifiers:
+
+    - "$(TeamIdentifierPrefix)*"
+
+  SiriKit:
+
+    com.apple.developer.siri: true
+
+  Fonts:
+
+    com.apple.developer.user-fonts:
+
+    - system-installation
+
+  Wireless Accessory Configuration:
+
+    com.apple.external-accessory.wireless-configuration: true
+
+  App Groups:
+
+    com.apple.security.application-groups:
+
+    - group.com.ola.chat.app
+
+    - group.com.ola.chat
+
+  Inter-App Audio:
+
+    inter-app-audio: true
+
+  Keychain sharing:
+
+    keychain-access-groups:
+
+    - "$(AppIdentifierPrefix)com.ola.chat"
+
+  BackgroundModes:
+
+    UIBackgroundModes:
+
+    - audio
+
+    - remote-notification
+
+  DisableMinimumFrameDurationOnPhone:
+
+    CADisableMinimumFrameDurationOnPhone: true
+
+  RequiredDeviceCapabilities:
+
+    UIRequiredDeviceCapabilities:
+
+    - arm64
+
+  AppTransportSecurity:
+
+    NSAppTransportSecurity:
+
+      NSAllowsArbitraryLoads: true
+
+PermissionsUsageDescription_Summary:
+
+  NSLocationAlwaysUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSCameraUsageDescription: bbeb85d0f3fd621d9714ffa815e13c3b
+
+  NSUserTrackingUsageDescription: 12cb2c4dff6b2542557e4c63788abe32
+
+  NSLocalNetworkUsageDescription: 25e593f988484c58666bc7e433939d15
+
+  NSAppleMusicUsageDescription: 374bb55b8c4d5af37fca0d78ccdbd01c
+
+  NSLocationUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSMicrophoneUsageDescription: f872cbada940e9081aeb4119d2b33cda
+
+  NSLocationWhenInUseUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSFaceIDUsageDescription: ac6a6855c7284a2abf6c2c2c443eb9b8
+
+  NSContactsUsageDescription: 134bc1e1ab2794bbe4211aa8e01df7ed
+
+  NSPhotoLibraryUsageDescription: adb704f39c8b7b5f80946ac67b238274
+
+PermissionsUsageDescription:
+
+  NSLocationAlwaysUsageDescription: Access to your location is required to provide
+
+    results near your area and find friends around you
+
+  NSCameraUsageDescription: Access to your camera is required to take photos or videos
+
+    in Partying.
+
+  NSUserTrackingUsageDescription: 拒绝Partying将无法精准推送您喜欢的内容。
+
+  NSLocalNetworkUsageDescription: Allow Flutter tools on your computer to connect
+
+    and debug your application. This prompt will not appear on release builds.
+
+  NSAppleMusicUsageDescription: Access to your Apple Music is required to share music
+
+    files in Partying.
+
+  NSLocationUsageDescription: Access to your location is required to provide results
+
+    near your area and find friends around you
+
+  NSMicrophoneUsageDescription: Access to your microphone is required to join voice
+
+    chatroom, send voice message or make voice calls.
+
+  NSLocationWhenInUseUsageDescription: Access to your location is required to provide
+
+    results near your area and find friends around you
+
+  NSFaceIDUsageDescription: Turn on FaceID service to use FaceID to log in.
+
+  NSContactsUsageDescription: 若不允许，你将无法在伴伴中发现手机通讯录好友
+
+  NSPhotoLibraryUsageDescription: Access to your photo library is required to share
+
+    photos and save ones in Partying.
+
+----------------------------------------
+
+5.2.0 entitlements list: 
+
+---
+
+Capabilities_Summary:
+
+  In-App Purchase: 6413cfeb7a89f7e0a8872f82b919c0d9
+
+  Push Notifications: 3250c7ff60c20cfc4aaf7f6791f621df
+
+  Sign In with Apple: 6642376617933be4ae31b129fe403e45
+
+  Associated Domains: fa57cad0e93096199dfdefff0b6e8b92
+
+  App Groups: 0b5c02cd472237b540efda80297cbe79
+
+  BackgroundModes: d741c9bb5ce83f8ac40d365ae4a92c5b
+
+  DisableMinimumFrameDurationOnPhone: 00c4662d62ca111b7a420649beaf5bf7
+
+  RequiredDeviceCapabilities: ce80d3d730b0bea7ffd2bfc2f2d8f4a4
+
+  AppTransportSecurity: 931810d61eb28fc7e1b358fb592e7ecc
+
+Capabilities:
+
+  In-App Purchase: true
+
+  Push Notifications:
+
+    aps-environment: development
+
+  Sign In with Apple:
+
+    com.apple.developer.applesignin:
+
+    - Default
+
+  Associated Domains:
+
+    com.apple.developer.associated-domains:
+
+    - applinks:partyhub.onelink.me
+
+    - applinks:partying-ios-alternate.app.link
+
+    - applinks:partying-ios.app.link
+
+  App Groups:
+
+    com.apple.security.application-groups:
+
+    - group.com.ola.chat.app
+
+    - group.com.ola.chat
+
+  BackgroundModes:
+
+    UIBackgroundModes:
+
+    - audio
+
+    - remote-notification
+
+  DisableMinimumFrameDurationOnPhone:
+
+    CADisableMinimumFrameDurationOnPhone: true
+
+  RequiredDeviceCapabilities:
+
+    UIRequiredDeviceCapabilities:
+
+    - arm64
+
+  AppTransportSecurity:
+
+    NSAppTransportSecurity:
+
+      NSAllowsArbitraryLoads: true
+
+PermissionsUsageDescription_Summary:
+
+  NSLocationAlwaysUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSCameraUsageDescription: bbeb85d0f3fd621d9714ffa815e13c3b
+
+  NSUserTrackingUsageDescription: 12cb2c4dff6b2542557e4c63788abe32
+
+  NSLocalNetworkUsageDescription: 25e593f988484c58666bc7e433939d15
+
+  NSAppleMusicUsageDescription: 374bb55b8c4d5af37fca0d78ccdbd01c
+
+  NSLocationUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSMicrophoneUsageDescription: f872cbada940e9081aeb4119d2b33cda
+
+  NSLocationWhenInUseUsageDescription: 4277cee74bdb7e834578f98269d61c83
+
+  NSFaceIDUsageDescription: ac6a6855c7284a2abf6c2c2c443eb9b8
+
+  NSContactsUsageDescription: 134bc1e1ab2794bbe4211aa8e01df7ed
+
+  NSPhotoLibraryUsageDescription: adb704f39c8b7b5f80946ac67b238274
+
+PermissionsUsageDescription:
+
+  NSLocationAlwaysUsageDescription: Access to your location is required to provide
+
+    results near your area and find friends around you
+
+  NSCameraUsageDescription: Access to your camera is required to take photos or videos
+
+    in Partying.
+
+  NSUserTrackingUsageDescription: 拒绝Partying将无法精准推送您喜欢的内容。
+
+  NSLocalNetworkUsageDescription: Allow Flutter tools on your computer to connect
+
+    and debug your application. This prompt will not appear on release builds.
+
+  NSAppleMusicUsageDescription: Access to your Apple Music is required to share music
+
+    files in Partying.
+
+  NSLocationUsageDescription: Access to your location is required to provide results
+
+    near your area and find friends around you
+
+  NSMicrophoneUsageDescription: Access to your microphone is required to join voice
+
+    chatroom, send voice message or make voice calls.
+
+  NSLocationWhenInUseUsageDescription: Access to your location is required to provide
+
+    results near your area and find friends around you
+
+  NSFaceIDUsageDescription: Turn on FaceID service to use FaceID to log in.
+
+  NSContactsUsageDescription: 若不允许，你将无法在伴伴中发现手机通讯录好友
+
+  NSPhotoLibraryUsageDescription: Access to your photo library is required to share
+
+    photos and save ones in Partying.
+
+----------------------------------------