fastlane-security-patched 2.216.0

data/spaceship/lib/spaceship/portal/spaceship.rb

@@ -0,0 +1,154 @@
+require_relative 'portal_client'
+require_relative 'app_service'
+
+module Spaceship
+  module Portal
+    class << self
+      # This client stores the default client when using the lazy syntax
+      # Spaceship.app instead of using the spaceship launcher
+      attr_accessor :client
+
+      # Authenticates with Apple's web services. This method has to be called once
+      # to generate a valid session. The session will automatically be used from then
+      # on.
+      #
+      # This method will automatically use the username from the Appfile (if available)
+      # and fetch the password from the Keychain (if available)
+      #
+      # @param user (String) (optional): The username (usually the email address)
+      # @param password (String) (optional): The password
+      #
+      # @raise InvalidUserCredentialsError: raised if authentication failed
+      #
+      # @return (Spaceship::Portal::Client) The client the login method was called for
+      def login(user = nil, password = nil)
+        @client = PortalClient.login(user, password)
+      end
+
+      # Open up the team selection for the user (if necessary).
+      #
+      # If the user is in multiple teams, a team selection is shown.
+      # The user can then select a team by entering the number
+      #
+      # Additionally, the team ID is shown next to each team name
+      # so that the user can use the environment variable `FASTLANE_TEAM_ID`
+      # for future user.
+      #
+      # @param team_id (String) (optional): The ID of a Developer Portal team
+      # @param team_name (String) (optional): The name of a Developer Portal team
+      #
+      # @return (String) The ID of the select team. You also get the value if
+      #   the user is only in one team.
+      def select_team(team_id: nil, team_name: nil)
+        @client.select_team(team_id: team_id, team_name: team_name)
+      end
+
+      # Helper methods for managing multiple instances of spaceship
+
+      # @return (Class) Access the apps for the spaceship
+      def app
+        Spaceship::Portal::App.set_client(@client)
+      end
+
+      # @return (Class) Access the pass types for the spaceship
+      def passbook
+        Spaceship::Portal::Passbook.set_client(@client)
+      end
+
+      # @return (Class) Access the website pushes for the spaceship
+      def website_push
+        Spaceship::Portal::WebsitePush.set_client(@client)
+      end
+
+      # @return (Class) Access the app groups for the spaceship
+      def app_group
+        Spaceship::Portal::AppGroup.set_client(@client)
+      end
+
+      # @return (Class) Access app services for the spaceship
+      def app_service
+        Spaceship::Portal::AppService
+      end
+
+      # @return (Class) Access the iCloud Containers for the spaceship
+      def cloud_container
+        Spaceship::Portal::CloudContainer.set_client(@client)
+      end
+
+      # @return (Class) Access the devices for the spaceship
+      def device
+        Spaceship::Portal::Device.set_client(@client)
+      end
+
+      # @return (Class) Access the certificates for the spaceship
+      def certificate
+        Spaceship::Portal::Certificate.set_client(@client)
+      end
+
+      # @return (Class) Access the provisioning profiles for the spaceship
+      def provisioning_profile
+        Spaceship::Portal::ProvisioningProfile.set_client(@client)
+      end
+
+      # @return (Class) Access the merchants for the spaceship
+      def merchant
+        Spaceship::Portal::Merchant.set_client(@client)
+      end
+    end
+  end
+
+  # Legacy code to support `Spaceship.app` without `Portal`
+  class << self
+    def login(user = nil, password = nil)
+      Spaceship::Portal.login(user, password)
+    end
+
+    def select_team(team_id: nil, team_name: nil)
+      Spaceship::Portal.select_team(team_id: team_id, team_name: team_name)
+    end
+
+    def app
+      Spaceship::Portal.app
+    end
+
+    def passbook
+      Spaceship::Portal.passbook
+    end
+
+    def website_push
+      Spaceship::Portal.website_push
+    end
+
+    def app_group
+      Spaceship::Portal.app_group
+    end
+
+    def app_service
+      Spaceship::Portal.app_service
+    end
+
+    def cloud_container
+      Spaceship::Portal.cloud_container
+    end
+
+    def device
+      Spaceship::Portal.device
+    end
+
+    def certificate
+      Spaceship::Portal.certificate
+    end
+
+    def provisioning_profile
+      Spaceship::Portal.provisioning_profile
+    end
+
+    def client
+      Spaceship::Portal.client
+    end
+
+    def merchant
+      Spaceship::Portal.merchant
+    end
+  end
+end

data/spaceship/lib/spaceship/portal/ui/select_team.rb

@@ -0,0 +1,116 @@
+module Spaceship
+  class Client
+    class UserInterface
+      # Shows the UI to select a team
+      # @example teams value:
+      #  [{"status"=>"active",
+      #   "teamId"=>"5A997XAAAA",
+      #   "type"=>"Company/Organization",
+      #   "extendedTeamAttributes"=>{},
+      #   "teamAgent"=>{
+      #       "personId"=>15534241111,
+      #       "firstName"=>"Felix",
+      #       "lastName"=>"Krause",
+      #       "email"=>"spaceship@krausefx.com",
+      #       "developerStatus"=>"active",
+      #       "teamMemberId"=>"5Y354CXAAA"},
+      #   "memberships"=>
+      #    [{"membershipId"=>"HJ5WHYC5CE",
+      #      "membershipProductId"=>"ds1",
+      #      "status"=>"active",
+      #      "inDeviceResetWindow"=>false,
+      #      "inRenewalWindow"=>false,
+      #      "dateStart"=>"11/20/14 07:59",
+      #      "dateExpire"=>"11/20/15 07:59",
+      #      "platform"=>"ios",
+      #      "availableDeviceSlots"=>100,
+      #      "name"=>"iOS Developer Program"}],
+      #   "currentTeamMember"=>
+      #    {"personId"=>nil, "firstName"=>nil, "lastName"=>nil, "email"=>nil, "developerStatus"=>nil, "privileges"=>{}, "roles"=>["TEAM_ADMIN"], "teamMemberId"=>"HQR8N4GAAA"},
+      #   "name"=>"Company GmbH"},
+      #     {...}
+      #   ]
+
+      # rubocop:disable Require/MissingRequireStatement
+      def self.ci?
+        if Object.const_defined?("FastlaneCore") && FastlaneCore.const_defined?("Helper")
+          return FastlaneCore::Helper.ci?
+        end
+        return false
+      end
+
+      def self.interactive?
+        if Object.const_defined?("FastlaneCore") && FastlaneCore.const_defined?("UI")
+          return FastlaneCore::UI.interactive?
+        end
+        return true
+      end
+      # rubocop:enable Require/MissingRequireStatement
+
+      def select_team(team_id: nil, team_name: nil)
+        teams = client.teams
+
+        if teams.count == 0
+          puts("No teams available on the Developer Portal")
+          puts("You must accept an invitation to a team for it to be available")
+          puts("To learn more about teams and how to use them visit https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/ManagingYourTeam/ManagingYourTeam.html")
+          raise "Your account is in no teams"
+        end
+
+        team_id = (team_id || ENV['FASTLANE_TEAM_ID'] || '').strip
+        team_name = (team_name || ENV['FASTLANE_TEAM_NAME'] || '').strip
+
+        if team_id.length > 0
+          # User provided a value, let's see if it's valid
+          teams.each_with_index do |team, i|
+            # There are 2 different values - one from the login page one from the Dev Team Page
+            return team['teamId'] if team['teamId'].strip == team_id
+            return team['teamId'] if team['currentTeamMember']['teamMemberId'].to_s.strip == team_id
+          end
+          # Better message to inform user of misconfiguration as Apple now provides less friendly error as of 2019-02-12
+          # This is especially important as Developer Portal team IDs are deprecated and should be replaced with App Store Connect teamIDs
+          # "Access Unavailable - You currently don't have access to this membership resource. Contact your team's Account Holder, Josh Holtz, or an Admin."
+          # https://github.com/fastlane/fastlane/issues/14228
+          puts("Couldn't find team with ID '#{team_id}'. Make sure your are using the correct App Store Connect team ID and have the proper permissions for this team")
+        end
+
+        if team_name.length > 0
+          # User provided a value, let's see if it's valid
+          teams.each_with_index do |team, i|
+            return team['teamId'] if team['name'].strip == team_name
+          end
+          # Better message to inform user of misconfiguration as Apple now provides less friendly error as of 2019-02-12
+          # "Access Unavailable - You currently don't have access to this membership resource. Contact your team's Account Holder, Josh Holtz, or an Admin."
+          # https://github.com/fastlane/fastlane/issues/14228
+          puts("Couldn't find team with Name '#{team_name}. Make sure you have the proper permissions for this team'")
+        end
+
+        return teams[0]['teamId'] if teams.count == 1 # user is just in one team
+
+        unless self.class.interactive?
+          puts("Multiple teams found on the Developer Portal, Your Terminal is running in non-interactive mode! Cannot continue from here.")
+          puts("Please check that you set FASTLANE_TEAM_ID or FASTLANE_TEAM_NAME to the right value.")
+          puts("Available Teams:")
+          teams.each_with_index do |team, i|
+            puts("#{i + 1}) #{team['teamId']} \"#{team['name']}\" (#{team['type']})")
+          end
+          raise "Multiple Teams found; unable to choose, terminal not interactive!"
+        end
+
+        # User Selection
+        loop do
+          # Multiple teams, user has to select
+          puts("Multiple teams found on the " + "Developer Portal".yellow + ", please enter the number of the team you want to use: ")
+          teams.each_with_index do |team, i|
+            puts("#{i + 1}) #{team['teamId']} \"#{team['name']}\" (#{team['type']})")
+          end
+
+          selected = ($stdin.gets || '').strip.to_i - 1
+          team_to_use = teams[selected] if selected >= 0
+
+          return team_to_use['teamId'] if team_to_use
+        end
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/portal/website_push.rb

@@ -0,0 +1,88 @@
+require_relative 'portal_base'
+
+module Spaceship
+  module Portal
+    # Represents an Website Push ID from the Developer Portal
+    class WebsitePush < PortalBase
+      # @return (String) The identifier of this website push, provided by the Dev Portal
+      # @example
+      #   "RGAWZGXSAA"
+      attr_accessor :website_id
+
+      # @return (String) The name you provided for this website push
+      # @example
+      #   "Spaceship"
+      attr_accessor :name
+
+      # @return (String) the supported platform of this website push
+      # @example
+      #   "ios"
+      attr_accessor :platform
+
+      # Prefix provided by the Dev Portal
+      # @example
+      #   "5A997XSHK2"
+      attr_accessor :prefix
+
+      # @return (String) The bundle_id (website identifier) of website push id
+      # @example
+      #   "web.com.krausefx.app"
+      attr_accessor :bundle_id
+
+      # @return (String) Status of the website push
+      # @example
+      #   "current"
+      attr_accessor :status
+
+      attr_mapping(
+        'websitePushId' => :website_id,
+        'name' => :name,
+        'prefix' => :prefix,
+        'identifier' => :bundle_id,
+        'status' => :status
+      )
+
+      alias app_id website_id # must be after attr_mapping
+
+      class << self
+        # @param mac [Bool] Fetches Mac website push if true
+        # @return (Array) Returns all website push available for this account
+        def all(mac: false)
+          client.website_push(mac: mac).map { |website_push| self.new(website_push) }
+        end
+
+        # Creates a new Website Push ID on the Apple Dev Portal
+        #
+        # @param bundle_id [String] the bundle id (website_push_identifier) of the website push
+        # @param name [String] the name of the Website Push
+        # @param mac [Bool] is this a Mac Website Push?
+        # @return (Website Push) The Website Push you just created
+        def create!(bundle_id: nil, name: nil, mac: false)
+          new_website_push = client.create_website_push!(name, bundle_id, mac: mac)
+          self.new(new_website_push)
+        end
+
+        # Find a specific Website Push ID based on the bundle_id
+        # @param mac [Bool] Searches Mac website pushes if true
+        # @return (Website Push) The website push you're looking for. This is nil if the website push can't be found.
+        def find(bundle_id, mac: false)
+          all(mac: mac).find do |website_push|
+            website_push.bundle_id == bundle_id
+          end
+        end
+      end
+
+      # Delete this Website Push ID.
+      # @return (Website Push) The website you just deleted
+      def delete!
+        client.delete_website_push!(website_id, mac: mac?)
+        self
+      end
+
+      # @return (Bool) Is this a Mac website push?
+      def mac?
+        platform == 'mac'
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/provider.rb

@@ -0,0 +1,13 @@
+module Spaceship
+  class Provider
+    attr_accessor :provider_id
+    attr_accessor :name
+    attr_accessor :content_types
+
+    def initialize(provider_hash: nil)
+      self.provider_id = provider_hash['providerId']
+      self.name = provider_hash['name']
+      self.content_types = provider_hash['contentTypes']
+    end
+  end
+end

data/spaceship/lib/spaceship/spaceauth_runner.rb

@@ -0,0 +1,97 @@
+require 'colored'
+require 'credentials_manager/appfile_config'
+require 'yaml'
+require 'fastlane_core'
+
+require_relative 'tunes/tunes_client'
+
+module Spaceship
+  class SpaceauthRunner
+    def initialize(username: nil, copy_to_clipboard: nil)
+      @username = username
+      @username ||= CredentialsManager::AppfileConfig.try_fetch_value(:apple_id)
+      @username ||= ask("Username: ")
+      @copy_to_clipboard = copy_to_clipboard
+    end
+
+    def run
+      begin
+        puts("Logging into to App Store Connect (#{@username})...") unless Spaceship::Globals.check_session
+        Spaceship::Tunes.login(@username)
+        puts("Successfully logged in to App Store Connect".green)
+        puts("")
+      rescue => ex
+        puts("Could not login to App Store Connect".red)
+        puts("Please check your credentials and try again.".yellow)
+        puts("This could be an issue with App Store Connect,".yellow)
+        puts("Please try unsetting the FASTLANE_SESSION environment variable by calling 'unset FASTLANE_SESSION'".yellow)
+        puts("(if it is set) and re-run `fastlane spaceauth`".yellow)
+        puts("")
+        puts("Exception type: #{ex.class}")
+        raise ex
+      end
+
+      itc_cookie_content = Spaceship::Tunes.client.store_cookie
+
+      # The only value we actually need is the "DES5c148586daa451e55afb017aa62418f91" cookie
+      # We're not sure if the key changes
+      #
+      # Example:
+      # name: DES5c148586daa451e55afb017aa62418f91
+      # value: HSARMTKNSRVTWFlaF/ek8asaa9lymMA0dN8JQ6pY7B3F5kdqTxJvMT19EVEFX8EQudB/uNwBHOHzaa30KYTU/eCP/UF7vGTgxs6PAnlVWKscWssOVHfP2IKWUPaa4Dn+I6ilA7eAFQsiaaVT
+      cookies = load_cookies(itc_cookie_content)
+
+      # We remove all the un-needed cookies
+      cookies.select! do |cookie|
+        cookie.name.start_with?("myacinfo") || cookie.name == "dqsid" || cookie.name.start_with?("DES")
+      end
+
+      @yaml = cookies.to_yaml.gsub("\n", "\\n")
+
+      puts("---")
+      puts("")
+      puts("Pass the following via the FASTLANE_SESSION environment variable:")
+      puts(@yaml.cyan.underline)
+      puts("")
+      puts("")
+      puts("Example:")
+      puts("export FASTLANE_SESSION='#{@yaml}'".cyan.underline)
+
+      if @copy_to_clipboard == false
+        puts("Skipped asking to copy the session string into your clipboard ⏭️".green)
+      elsif @copy_to_clipboard || (mac? && Spaceship::Client::UserInterface.interactive? && agree("🙄 Should fastlane copy the cookie into your clipboard, so you can easily paste it? (y/n)", true))
+        FastlaneCore::Clipboard.copy(content: @yaml)
+        puts("Successfully copied the session string into your clipboard 🎨".green)
+      end
+
+      return self
+    end
+
+    def load_cookies(content)
+      # When Ruby 2.5 support is dropped, we can safely get rid of the latter branch.
+      if YAML.name == 'Psych' && Gem::Version.new(Psych::VERSION) >= Gem::Version.new('3.1')
+        YAML.safe_load(
+          content,
+          permitted_classes: [HTTP::Cookie, Time],
+          aliases: true
+        )
+      else
+        YAML.safe_load(
+          content,
+          [HTTP::Cookie, Time], # classes allowlist
+          [],                   # symbols allowlist
+          true                  # allow YAML aliases
+        )
+      end
+    end
+
+    def session_string
+      FastlaneCore::UI.user_error!("`#{__method__}` method called before calling `run` in `SpaceauthRunner`") unless @yaml
+      @yaml
+    end
+
+    def mac?
+      (/darwin/ =~ RUBY_PLATFORM) != nil
+    end
+  end
+end

data/spaceship/lib/spaceship/stats_middleware.rb

@@ -0,0 +1,65 @@
+require 'faraday'
+
+require_relative 'globals'
+
+module Spaceship
+  class StatsMiddleware < Faraday::Middleware
+    ServiceOption = Struct.new(:name, :url, :auth_type)
+    URLLog = Struct.new(:url, :auth_type)
+    class << self
+      def services
+        return @services if @services
+
+        require_relative 'tunes/tunes_client'
+        require_relative 'portal/portal_client'
+        require_relative 'connect_api/testflight/client'
+        require_relative 'connect_api/provisioning/client'
+
+        @services ||= [
+          ServiceOption.new("App Store Connect API (official)", "api.appstoreconnect.apple.com", "JWT"),
+          ServiceOption.new("App Store Connect API (web session)", Spaceship::ConnectAPI::TestFlight::Client.hostname.gsub("https://", ""), "Web session"),
+          ServiceOption.new("App Store Connect API (web session)", Spaceship::ConnectAPI::Provisioning::Client.hostname.gsub("https://", ""), "Web session"),
+          ServiceOption.new("Legacy iTunesConnect Auth", "idmsa.apple.com", "Web session"),
+          ServiceOption.new("Legacy iTunesConnect Auth", "appstoreconnect.apple.com/olympus/v1/", "Web session"),
+          ServiceOption.new("Legacy iTunesConnect", Spaceship::TunesClient.hostname.gsub("https://", ""), "Web session"),
+          ServiceOption.new("Legacy iTunesConnect Developer Portal", Spaceship::PortalClient.hostname.gsub("https://", ""), "Web session")
+        ]
+      end
+
+      def service_stats
+        @service_stats ||= Hash.new(0)
+      end
+
+      def request_logs
+        @request_logs ||= []
+        @request_logs
+      end
+    end
+
+    def initialize(app)
+      super(app)
+    end
+
+    def call(env)
+      log(env)
+      @app.call(env)
+    end
+
+    def log(env)
+      return false unless env && env.url && (uri = URI.parse(env.url.to_s))
+      service = StatsMiddleware.services.find do |s|
+        uri.to_s.include?(s.url)
+      end
+
+      service = ServiceOption.new("Unknown", uri.host, "Unknown") if service.nil?
+      StatsMiddleware.service_stats[service] += 1
+
+      StatsMiddleware.request_logs << URLLog.new(uri.to_s, service.auth_type)
+
+      return true
+    rescue => e
+      puts("Failed to log spaceship stats - #{e.message}") if Spaceship::Globals.verbose?
+      return false
+    end
+  end
+end

data/spaceship/lib/spaceship/test_flight/app_test_info.rb

@@ -0,0 +1,40 @@
+require_relative 'base'
+require_relative 'test_info'
+require_relative 'beta_review_info'
+
+module Spaceship::TestFlight
+  class AppTestInfo < Base
+    # AppTestInfo wraps a test_info and beta_review_info in the format required to manage test_info
+    # for an application. Note that this structure, although looking similar to build test_info
+    # is test information about the application
+
+    attr_accessor :test_info
+    attr_accessor :beta_review_info
+
+    def self.find(app_id: nil)
+      raw_app_test_info = client.get_app_test_info(app_id: app_id)
+      self.new(raw_app_test_info)
+    end
+
+    def test_info
+      Spaceship::TestFlight::TestInfo.new(raw_data['details'])
+    end
+
+    def test_info=(value)
+      raw_data.set(['details'], value.raw_data)
+    end
+
+    def beta_review_info
+      Spaceship::TestFlight::BetaReviewInfo.new(raw_data['betaReviewInfo'])
+    end
+
+    def beta_review_info=(value)
+      raw_data.set(['betaReviewInfo'], value.raw_data)
+    end
+
+    # saves the changes to the App Test Info object to TestFlight
+    def save_for_app!(app_id: nil)
+      client.put_app_test_info(app_id: app_id, app_test_info: self)
+    end
+  end
+end

data/spaceship/lib/spaceship/test_flight/base.rb

@@ -0,0 +1,39 @@
+require_relative '../base'
+require_relative '../tunes/tunes_client'
+
+module Spaceship
+  module TestFlight
+    class Base < Spaceship::Base
+      def self.client
+        # Verify there is a client that can be used
+        if Spaceship::Tunes.client
+          # Initialize new client if new or if team changed
+          if @client.nil? || @client.team_id != Spaceship::Tunes.client.team_id
+            @client = Client.client_with_authorization_from(Spaceship::Tunes.client)
+          end
+        end
+
+        # Need to handle not having a client but this shouldn't ever happen
+        raise "Please login using `Spaceship::Tunes.login('user', 'password')`" unless @client
+
+        @client
+      end
+
+      ##
+      # Have subclasses inherit the client from their superclass
+      #
+      # Essentially, we are making a class-inheritable-accessor as described here:
+      # https://apidock.com/rails/v4.2.7/Class/class_attribute
+      def self.inherited(subclass)
+        this_class = self
+        subclass.define_singleton_method(:client) do
+          this_class.client
+        end
+      end
+
+      def to_json
+        raw_data.to_json
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/test_flight/beta_review_info.rb

@@ -0,0 +1,19 @@
+require_relative 'base'
+
+module Spaceship::TestFlight
+  class BetaReviewInfo < Base
+    attr_accessor :contact_first_name, :contact_last_name, :contact_phone, :contact_email
+    attr_accessor :demo_account_name, :demo_account_password, :demo_account_required, :notes
+
+    attr_mapping({
+      'contactFirstName' => :contact_first_name,
+      'contactLastName' => :contact_last_name,
+      'contactPhone' => :contact_phone,
+      'contactEmail' => :contact_email,
+      'demoAccountName' => :demo_account_name,
+      'demoAccountPassword' => :demo_account_password,
+      'demoAccountRequired' => :demo_account_required,
+      'notes' => :notes
+    })
+  end
+end