fastlane 1.111.0 → 2.0.1

data/spaceship/lib/spaceship/tunes/user_detail.rb

@@ -0,0 +1,19 @@
+module Spaceship
+  module Tunes
+    class UserDetail < TunesBase
+      attr_accessor :content_provider_id
+      attr_accessor :ds_id # used for the team selection (https://github.com/fastlane/fastlane/issues/6711)
+
+      attr_mapping(
+        'contentProviderId' => :content_provider_id,
+        'sessionToken.dsId' => :ds_id
+      )
+
+      class << self
+        def factory(attrs)
+          self.new(attrs)
+        end
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/tunes/version_set.rb

@@ -0,0 +1,35 @@
+module Spaceship
+  module Tunes
+    # Represents a version set inside of an application
+    class VersionSet < TunesBase
+      #####################################################
+      # @!group General metadata
+      #####################################################
+
+      # @return (String) The type of the version set. So far only APP
+      attr_accessor :type
+
+      # @return (Spaceship::Tunes::Application) A reference to the application the version_set is contained in
+      attr_accessor :application
+
+      # @return (String)
+      attr_accessor :platform
+
+      attr_mapping(
+        'type' => :type,
+        'platformString' => :platform
+      )
+
+      class << self
+        # Create a new object based on a hash.
+        # This is used to create a new object based on the server response.
+        def factory(attrs)
+          self.new(attrs)
+        end
+      end
+    end
+  end
+end
+
+#
+#

data/spaceship/lib/spaceship/two_step_client.rb

@@ -0,0 +1,195 @@
+module Spaceship
+  class Client
+    def handle_two_step(response)
+      @x_apple_id_session_id = response["x-apple-id-session-id"]
+      @scnt = response["scnt"]
+
+      r = request(:get) do |req|
+        req.url "https://idmsa.apple.com/appleauth/auth"
+        req.headers["scnt"] = @scnt
+        req.headers["X-Apple-Id-Session-Id"] = @x_apple_id_session_id
+        req.headers["Accept"] = "application/json"
+      end
+
+      if r.body.kind_of?(Hash) && r.body["trustedDevices"].kind_of?(Array)
+        if r.body.fetch("securityCode", {})["tooManyCodesLock"].to_s.length > 0
+          raise ITunesConnectError.new, "Too many verification codes have been sent. Enter the last code you received, use one of your devices, or try again later."
+        end
+
+        old_client = (begin
+                        Tunes::RecoveryDevice.client
+                      rescue
+                        nil # since client might be nil, which raises an exception
+                      end)
+        Tunes::RecoveryDevice.client = self # temporary set it as it's required by the factory method
+        devices = r.body["trustedDevices"].collect do |current|
+          Tunes::RecoveryDevice.factory(current)
+        end
+        Tunes::RecoveryDevice.client = old_client
+
+        puts "Two Step Verification for account '#{self.user}' is enabled"
+        puts "Please select a device to verify your identity"
+        available = devices.collect do |c|
+          "#{c.name}\t#{c.model_name || 'SMS'}\t(#{c.device_id})"
+        end
+        result = choose(*available)
+        device_id = result.match(/.*\t.*\t\((.*)\)/)[1]
+        select_device(r, device_id)
+      elsif r.body.kind_of?(Hash) && r.body["phoneNumberVerification"].kind_of?(Hash)
+        handle_two_factor(r)
+      else
+        raise "Invalid 2 step response #{r.body}"
+      end
+    end
+
+    def handle_two_factor(response)
+      two_factor_url = "https://github.com/fastlane/fastlane/tree/master/spaceship#2-step-verification"
+      puts "Two Factor Authentication for account '#{self.user}' is enabled"
+      puts "If you're running this in a non-interactive session (e.g. server or CI)"
+      puts "check out #{two_factor_url}"
+
+      security_code = response.body["phoneNumberVerification"]["securityCode"]
+      # {"length"=>6,
+      #  "tooManyCodesSent"=>false,
+      #  "tooManyCodesValidated"=>false,
+      #  "securityCodeLocked"=>false}
+      code_length = security_code["length"]
+      code = ask("Please enter the #{code_length} digit code: ")
+      puts "Requesting session..."
+
+      # Send securityCode back to server to get a valid session
+      r = request(:post) do |req|
+        req.url "https://idmsa.apple.com/appleauth/auth/verify/trusteddevice/securitycode"
+        req.headers["Accept"] = "application/json"
+        req.headers['Content-Type'] = 'application/json'
+        req.headers["scnt"] = @scnt
+        req.headers["X-Apple-Id-Session-Id"] = @x_apple_id_session_id
+        req.body = { "securityCode" => { "code" => code.to_s } }.to_json
+      end
+
+      # we use `Spaceship::TunesClient.new.handle_itc_response`
+      # since this might be from the Dev Portal, but for 2 step
+      Spaceship::TunesClient.new.handle_itc_response(r.body)
+
+      store_session
+
+      return true
+    end
+
+    # Only needed for 2 step
+    def load_session_from_file
+      if File.exist?(persistent_cookie_path)
+        puts "Loading session from '#{persistent_cookie_path}'" if $verbose
+        @cookie.load(persistent_cookie_path)
+        return true
+      end
+      return false
+    end
+
+    def load_session_from_env
+      yaml_text = ENV["FASTLANE_SESSION"] || ENV["SPACESHIP_SESSION"]
+      return if yaml_text.to_s.length == 0
+      puts "Loading session from environment variable" if $verbose
+
+      file = Tempfile.new('cookie.yml')
+      file.write(yaml_text.gsub("\\n", "\n"))
+      file.close
+
+      begin
+        @cookie.load(file.path)
+      rescue => ex
+        puts "Error loading session from environment"
+        puts "Make sure to pass the session in a valid format"
+        raise ex
+      ensure
+        file.unlink
+      end
+    end
+
+    def select_device(r, device_id)
+      # Request Token
+      r = request(:put) do |req|
+        req.url "https://idmsa.apple.com/appleauth/auth/verify/device/#{device_id}/securitycode"
+        req.headers["Accept"] = "application/json"
+        req.headers["scnt"] = @scnt
+        req.headers["X-Apple-Id-Session-Id"] = @x_apple_id_session_id
+      end
+
+      # we use `Spaceship::TunesClient.new.handle_itc_response`
+      # since this might be from the Dev Portal, but for 2 step
+      Spaceship::TunesClient.new.handle_itc_response(r.body)
+
+      puts "Successfully requested notification"
+      code = ask("Please enter the 4 digit code: ")
+      puts "Requesting session..."
+
+      # Send token back to server to get a valid session
+      r = request(:post) do |req|
+        req.url "https://idmsa.apple.com/appleauth/auth/verify/device/#{device_id}/securitycode"
+        req.headers["Accept"] = "application/json"
+        req.headers["scnt"] = @scnt
+        req.headers["X-Apple-Id-Session-Id"] = @x_apple_id_session_id
+        req.body = { "code" => code.to_s }.to_json
+        req.headers['Content-Type'] = 'application/json'
+      end
+
+      begin
+        Spaceship::TunesClient.new.handle_itc_response(r.body) # this will fail if the code is invalid
+      rescue => ex
+        # If the code was entered wrong
+        # {
+        #   "securityCode": {
+        #     "code": "1234"
+        #   },
+        #   "securityCodeLocked": false,
+        #   "recoveryKeyLocked": false,
+        #   "recoveryKeySupported": true,
+        #   "manageTrustedDevicesLinkName": "appleid.apple.com",
+        #   "suppressResend": false,
+        #   "authType": "hsa",
+        #   "accountLocked": false,
+        #   "validationErrors": [{
+        #     "code": "-21669",
+        #     "title": "Incorrect Verification Code",
+        #     "message": "Incorrect verification code."
+        #   }]
+        # }
+        if ex.to_s.include?("verification code") # to have a nicer output
+          puts "Error: Incorrect verification code"
+          return select_device(r, device_id)
+        end
+
+        raise ex
+      end
+
+      store_session
+
+      return true
+    end
+
+    def store_session
+      # If the request was successful, r.body is actually nil
+      # The previous request will fail if the user isn't on a team
+      # on iTunes Connect, but it still works, so we're good
+
+      # Tell iTC that we are trustworthy (obviously)
+      # This will update our local cookies to something new
+      # They probably have a longer time to live than the other poor cookies
+      # Changed Keys
+      # - myacinfo
+      # - DES5c148586dfd451e55afb0175f62418f91
+      # We actually only care about the DES value
+
+      request(:get) do |req|
+        req.url "https://idmsa.apple.com/appleauth/auth/2sv/trust"
+        req.headers["scnt"] = @scnt
+        req.headers["X-Apple-Id-Session-Id"] = @x_apple_id_session_id
+      end
+      # This request will fail if the user isn't added to a team on iTC
+      # However we don't really care, this request will still return the
+      # correct DES... cookie
+
+      self.store_cookie
+    end
+  end
+end

data/spaceship/lib/spaceship/ui.rb

@@ -0,0 +1,27 @@
+paths = Dir[File.expand_path "**/ui/*.rb", File.dirname(__FILE__)]
+raise "Could not find UI classes to import" unless paths.count > 0
+paths.each do |file|
+  require file
+end
+
+module Spaceship
+  class Client
+    # Public getter for all UI related code
+    # rubocop:disable Style/MethodName
+    def UI
+      UserInterface.new(self)
+    end
+    # rubocop:enable Style/MethodName
+
+    # All User Interface related code lives in this class
+    class UserInterface
+      # Access the client this UserInterface object is for
+      attr_reader :client
+
+      # Is called by the client to generate one instance of UserInterface
+      def initialize(c)
+        @client = c
+      end
+    end
+  end
+end

data/supply/README.md

@@ -0,0 +1,214 @@
+<h3 align="center">
+  <a href="https://github.com/fastlane/fastlane/tree/master/fastlane">
+    <img src="../fastlane/assets/fastlane.png" width="150" />
+    <br />
+    fastlane
+  </a>
+</h3>
+<p align="center">
+  <a href="https://github.com/fastlane/fastlane/tree/master/deliver">deliver</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/snapshot">snapshot</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/frameit">frameit</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/pem">pem</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/sigh">sigh</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/produce">produce</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/cert">cert</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/spaceship">spaceship</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/pilot">pilot</a> &bull;
+  <a href="https://github.com/fastlane/boarding">boarding</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/gym">gym</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/scan">scan</a> &bull;
+  <a href="https://github.com/fastlane/fastlane/tree/master/match">match</a>
+</p>
+-------
+
+<p align="center">
+  <img src="assets/supply.png" height="110">
+</p>
+
+supply
+============
+
+[![Twitter: @FastlaneTools](https://img.shields.io/badge/contact-@FastlaneTools-blue.svg?style=flat)](https://twitter.com/FastlaneTools)
+[![License](https://img.shields.io/badge/license-MIT-green.svg?style=flat)](https://github.com/fastlane/fastlane/blob/master/supply/LICENSE)
+[![Gem](https://img.shields.io/gem/v/supply.svg?style=flat)](http://rubygems.org/gems/supply)
+
+###### Command line tool for updating Android apps and their metadata on the Google Play Store
+
+`supply` uploads app metadata, screenshots and binaries to Google Play. You can also select tracks for builds and promote builds to production.
+
+Get in contact with the developer on Twitter: [@FastlaneTools](https://twitter.com/FastlaneTools)
+
+
+-------
+<p align="center">
+    <a href="#features">Features</a> &bull;
+    <a href="#installation">Installation</a> &bull;
+    <a href="#setup">Setup</a> &bull;
+    <a href="#quick-start">Quick Start</a> &bull;
+    <a href="#available-commands">Commands</a> &bull;
+    <a href="#uploading-an-apk">Uploading an APK</a> &bull;
+    <a href="#images-and-screenshots">Images</a>
+</p>
+
+-------
+
+<h5 align="center"><code>supply</code> is part of <a href="https://fastlane.tools">fastlane</a>: The easiest way to automate beta deployments and releases for your iOS and Android apps.</h5>
+
+## Features
+- Update existing Android applications on Google Play via the command line
+- Upload new builds (APKs)
+- Retrieve and edit metadata, such as title and description, for multiple languages
+- Upload the app icon, promo graphics and screenshots for multiple languages
+- Have a local copy of the metadata in your git repository
+
+##### [Like this tool? Be the first to know about updates and new fastlane tools](https://tinyletter.com/krausefx)
+
+## Installation
+
+Install the gem
+
+    sudo gem install fastlane
+
+## Setup
+
+Setup consists of setting up your Google Developers Service Account
+
+1. Open the [Google Play Console](https://play.google.com/apps/publish/)
+1. Select **Settings** tab, followed by the **API access** tab
+1. Click the **Create Service Account** button and follow the **Google API Console** link in the dialog
+1. Click the **Create Service account** button at the top of the developers console screen
+1. Provide a name for the service account
+1. Click **Select a role** and choose **Project > Service Account Actor**
+1. Check the **Furnish a new private key** checkbox
+1. Select **JSON** as the Key type
+1. Click **Create** to close the dialog
+1. Make a note of the file name of the JSON file downloaded to your computer
+1. Back on the Google Play developer console, click **Done** to close the dialog
+1. Click on **Grant Access** for the newly added service account
+1. Choose **Release Manager** from the **Role** dropdown
+1. Click **Add user** to close the dialog
+
+### Migrating Google credential format (from .p12 key file to .json)
+
+In previous versions of supply, credentials to your Play Console were stored as `.p12` files. Since version 0.4.0, supply now supports the recommended `.json` key Service Account credential files. If you wish to upgrade:
+
+- follow the <a href="#setup">Setup</a> procedure once again to make sure you create the appropriate JSON file
+- update your fastlane configuration or your command line invocation to use the appropriate argument if necessary.
+  Note that you don't need to take note nor pass the `issuer` argument anymore.
+
+
+The previous p12 configuration is still currently supported.
+
+
+## Quick Start
+
+- `cd [your_project_folder]`
+- `fastlane supply init`
+- Make changes to the downloaded metadata, add images, screenshots and/or an APK
+- `fastlane supply run`
+
+## Available Commands
+
+- `fastlane supply`: update an app with metadata, a build, images and screenshots
+- `fastlane supply init`: download metadata for an existing app to a local directory
+- `fastlane supply --help`: show information on available commands, arguments and environment variables
+
+You can either run `supply` on its own and use it interactively, or you can pass arguments or specify environment variables for all the options to skip the questions.
+
+## Uploading an APK
+
+To upload a new binary to Google Play, simply run
+
+```
+fastlane supply --apk path/to/app.apk
+```
+
+This will also upload app metadata if you previously ran `fastlane supply init`.
+
+To gradually roll out a new build use
+
+```
+fastlane supply --apk path/app.apk --track rollout --rollout 0.5
+```
+
+Expansion files (obbs) found under the same directory as your APK will also be uploaded together with your APK as long as:
+
+- they are identified as type 'main' or 'patch' (by containing 'main' or 'patch' in their file name)
+- you have at most one of each type
+
+## Images and Screenshots
+
+After running `fastlane supply init`, you will have a metadata directory. This directory contains one or more locale directories (e.g. en-US, en-GB, etc.), and inside this directory are text files such as `title.txt` and `short_description.txt`.
+
+Here you can supply images with the following file names (extension can be png, jpg or jpeg):
+
+- `featureGraphic`
+- `icon`
+- `promoGraphic`
+- `tvBanner`
+
+And you can supply screenshots by creating directories with the following names, containing PNGs or JPEGs (image names are irrelevant):
+
+- `phoneScreenshots/`
+- `sevenInchScreenshots/` (7-inch tablets)
+- `tenInchScreenshots/` (10-inch tablets)
+- `tvScreenshots/`
+- `wearScreenshots/`
+
+Note that these will replace the current images and screenshots on the play store listing, not add to them.
+
+## Changelogs (What's new)
+
+You can add changelog files under the `changelogs/` directory for each locale. The filename should exactly match the version code of the APK that it represents. `fastlane supply init` will populate changelog files from existing data on Google Play if no `metadata/` directory exists when it is run.
+
+```
+└── fastlane
+    └── metadata
+        └── android
+            ├── en-US
+            │   └── changelogs
+            │       ├── 100000.txt
+            │       └── 100100.txt
+            └── fr-FR
+                └── changelogs
+                    └── 100100.txt
+```
+
+## Track Promotion
+
+A common Play publishing scenario might involve uploading an APK version to a test track, testing it, and finally promoting that version to production.
+
+This can be done using the `--track_promote_to` parameter.  The `--track_promote_to` parameter works with the `--track` parameter to command the Play API to promote existing Play track APK version(s) (those active on the track identified by the `--track` param value) to a new track (`--track_promote_to` value).
+
+## Tips
+
+### [`fastlane`](https://fastlane.tools) Toolchain
+
+- [`fastlane`](https://fastlane.tools): The easiest way to automate beta deployments and releases for your iOS and Android apps
+- [`deliver`](https://github.com/fastlane/fastlane/tree/master/deliver): Upload screenshots, metadata and your app to the App Store
+- [`snapshot`](https://github.com/fastlane/fastlane/tree/master/snapshot): Automate taking localized screenshots of your iOS app on every device
+- [`frameit`](https://github.com/fastlane/fastlane/tree/master/frameit): Quickly put your screenshots into the right device frames
+- [`pem`](https://github.com/fastlane/fastlane/tree/master/pem): Automatically generate and renew your push notification profiles
+- [`sigh`](https://github.com/fastlane/fastlane/tree/master/sigh): Because you would rather spend your time building stuff than fighting provisioning
+- [`produce`](https://github.com/fastlane/fastlane/tree/master/produce): Create new iOS apps on iTunes Connect and Dev Portal using the command line
+- [`cert`](https://github.com/fastlane/fastlane/tree/master/cert): Automatically create and maintain iOS code signing certificates
+- [`spaceship`](https://github.com/fastlane/fastlane/tree/master/spaceship): Ruby library to access the Apple Dev Center and iTunes Connect
+- [`pilot`](https://github.com/fastlane/fastlane/tree/master/pilot): The best way to manage your TestFlight testers and builds from your terminal
+- [`boarding`](https://github.com/fastlane/boarding): The easiest way to invite your TestFlight beta testers
+- [`gym`](https://github.com/fastlane/fastlane/tree/master/gym): Building your iOS apps has never been easier
+- [`match`](https://github.com/fastlane/fastlane/tree/master/match): Easily sync your certificates and profiles across your team using git
+
+##### [Like this tool? Be the first to know about updates and new fastlane tools](https://tinyletter.com/krausefx)
+
+# Need help?
+Please submit an issue on GitHub and provide information about your setup
+
+# Code of Conduct
+Help us keep `supply` open and inclusive. Please read and follow our [Code of Conduct](https://github.com/fastlane/fastlane/blob/master/CODE_OF_CONDUCT.md).
+
+## License
+
+This project is licensed under the terms of the MIT license. See the LICENSE file.
+
+> This project and all fastlane tools are in no way affiliated with Apple Inc. This project is open source under the MIT license, which means you have full access to the source code and can modify it to fit your own needs. All fastlane tools run on your own computer or server, so your credentials or other sensitive information will never leave your own computer. You are responsible for how you use fastlane tools.