fastlane_iac_publish 0.1.0

data/spaceship/lib/spaceship/portal/app_service.rb

@@ -0,0 +1,87 @@
+module Spaceship
+  module Portal
+    # Represents a single application service (its state to be more precise) on the Apple Dev Portal
+    class AppService
+      # @return (String) The identifier used by the Dev Portal to represent this service
+      # @example
+      #   "homeKit"
+      attr_accessor :service_id
+
+      # @return (Object) The current value for this service
+      # @example
+      #   false
+      attr_accessor :value
+
+      # @return (String) The service URI for this service
+      # @example
+      #    "account/ios/identifiers/updateService.action"
+      attr_accessor :service_uri
+
+      def initialize(service_id, value)
+        @service_id = service_id
+        @value = value
+
+        if @service_id == "push"
+          # Push notifications have a special URI
+          @service_uri = "account/ios/identifiers/updatePushService.action"
+        else
+          # Default service URI
+          @service_uri = "account/ios/identifiers/updateService.action"
+        end
+      end
+
+      def self.new_service(id, values: { on: true, off: false })
+        m = Module.new
+        values.each do |k, v|
+          m.define_singleton_method(k) do
+            AppService.new(id, v)
+          end
+        end
+        return m
+      end
+
+      AccessWifi = AppService.new_service("AWEQ28MY3E")
+      AppGroup = AppService.new_service("APG3427HIY")
+      ApplePay = AppService.new_service("OM633U5T5G")
+      AssociatedDomains = AppService.new_service("SKC3T5S89Y")
+      ClassKit = AppService.new_service("PKTJAN2017")
+      AutoFillCredential = AppService.new_service("CPEQ28MX4E")
+      DataProtection = AppService.new_service("dataProtection", values: { off: "", complete: "complete", unless_open: "unlessopen", until_first_auth: "untilfirstauth" })
+      GameCenter = AppService.new_service("gameCenter")
+      HealthKit = AppService.new_service("HK421J6T7P")
+      HomeKit = AppService.new_service("homeKit")
+      Hotspot = AppService.new_service("HSC639VEI8")
+      Cloud = AppService.new_service("iCloud")
+      CloudKit = AppService.new_service("cloudKitVersion", values: { xcode5_compatible: 1, cloud_kit: 2 })
+      InAppPurchase = AppService.new_service("inAppPurchase")
+      InterAppAudio = AppService.new_service("IAD53UNK2F")
+      Multipath = AppService.new_service("MP49FN762P")
+      NetworkExtension = AppService.new_service("NWEXT04537")
+      NFCTagReading = AppService.new_service("NFCTRMAY17")
+      PersonalVPN = AppService.new_service("V66P55NK2I")
+      Passbook = AppService.new_service("pass")
+      PushNotification = AppService.new_service("push")
+      SiriKit = AppService.new_service("SI015DKUHP")
+      VPNConfiguration = AppService.new_service("V66P55NK2I")
+      Wallet = AppService.new_service("pass")
+      WirelessAccessory = AppService.new_service("WC421J6T7P")
+
+      constants.each do |c|
+        name = c.to_s
+                .gsub(/([A-Z0-9]+)([A-Z][a-z])/, '\1_\2') # ABBRVString -> ABBRV_String
+                .gsub(/([a-z0-9])([A-Z])/, '\1_\2')       # CamelCase -> Camel_Case
+                .downcase
+        self.class.send(:define_method, name) do
+          AppService.const_get(c)
+        end
+      end
+
+      def ==(other)
+        self.class == other.class &&
+          self.service_id == other.service_id &&
+          self.value == other.value &&
+          self.service_uri == other.service_uri
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/portal/certificate.rb

@@ -0,0 +1,351 @@
+require 'openssl'
+
+require_relative 'app'
+require_relative 'website_push'
+
+module Spaceship
+  module Portal
+    # Represents a certificate from the Apple Developer Portal.
+    #
+    # This can either be a code signing identity or a push profile
+    class Certificate < PortalBase
+      # @return (String) The ID given from the developer portal. You'll probably not need it.
+      # @example
+      #   "P577TH3PAA"
+      attr_accessor :id
+
+      # @return (String) The name of the certificate
+      # @example Company
+      #   "SunApps GmbH"
+      # @example Push Profile
+      #   "Apple Push Services"
+      attr_accessor :name
+
+      # @return (String) Status of the certificate
+      # @example
+      #   "Issued"
+      attr_accessor :status
+
+      # @return (Date) The date and time when the certificate was created
+      # @example
+      #   2015-04-01 21:24:00 UTC
+      attr_accessor :created
+
+      # @return (Date) The date and time when the certificate will expire
+      # @example
+      #   2016-04-01 21:24:00 UTC
+      attr_accessor :expires
+
+      # @return (String) The owner type that defines if it's a push profile
+      #  or a code signing identity
+      #
+      # @example Code Signing Identity
+      #   "team"
+      # @example Push Certificate
+      #   "bundle"
+      attr_accessor :owner_type
+
+      # @return (String) The name of the owner
+      #
+      # @example Code Signing Identity (usually the company name)
+      #   "SunApps Gmbh"
+      # @example Push Certificate (the bundle identifier)
+      #   "tools.fastlane.app"
+      attr_accessor :owner_name
+
+      # @return (String) The ID of the owner, that can be used to
+      #  fetch more information
+      # @example
+      #   "75B83SPLAA"
+      attr_accessor :owner_id
+
+      # Indicates the type of this certificate
+      # which is automatically used to determine the class of
+      # the certificate. Available values listed in CERTIFICATE_TYPE_IDS
+      # @return (String) The type of the certificate
+      # @example Production Certificate
+      #   "R58UK2EWSO"
+      # @example Development Certificate
+      #   "5QPB9NHCEI"
+      attr_accessor :type_display_id
+
+      # @return (Bool) Whether or not the certificate can be downloaded
+      attr_accessor :can_download
+
+      attr_mapping({
+        'certificateId' => :id,
+        'name' => :name,
+        'statusString' => :status,
+        'dateCreated' => :created,
+        'expirationDate' => :expires,
+        'ownerType' => :owner_type,
+        'ownerName' => :owner_name,
+        'ownerId' => :owner_id,
+        'certificateTypeDisplayId' => :type_display_id,
+        'canDownload' => :can_download
+      })
+
+      #####################################################
+      # Certs are not associated with apps
+      #####################################################
+
+      # A development code signing certificate used for development environment
+      class Development < Certificate; end
+
+      # A production code signing certificate used for distribution environment
+      class Production < Certificate; end
+
+      # An In House code signing certificate used for enterprise distributions
+      class InHouse < Certificate; end
+
+      # A Mac development code signing certificate used for development environment
+      class MacDevelopment < Certificate; end
+
+      # A Mac production code signing certificate for building .app bundles
+      class MacAppDistribution < Certificate; end
+
+      # A Mac production code signing certificate for building .pkg installers
+      class MacInstallerDistribution < Certificate; end
+
+      # A Mac Developer ID signing certificate for building .app bundles
+      class DeveloperIdApplication < Certificate; end
+
+      # A Mac Developer ID signing certificate for building .pkg installers
+      class DeveloperIdInstaller < Certificate; end
+
+      #####################################################
+      # Certs that are specific for one app
+      #####################################################
+
+      # Abstract class for push certificates. Check out the subclasses
+      # DevelopmentPush, ProductionPush, WebsitePush and VoipPush
+      class PushCertificate < Certificate; end
+
+      # A push notification certificate for development environment
+      class DevelopmentPush < PushCertificate; end
+
+      # A push notification certificate for production environment
+      class ProductionPush < PushCertificate; end
+
+      # A push notification certificate for websites
+      class WebsitePush < PushCertificate
+        def self.portal_type
+          Spaceship::Portal::WebsitePush
+        end
+      end
+
+      # A push notification certificate for the VOIP environment
+      class VoipPush < PushCertificate; end
+
+      # Passbook certificate
+      class Passbook < Certificate; end
+
+      # ApplePay certificate
+      class ApplePay < Certificate; end
+
+      # ApplePayMerchantIdentity certificate
+      class ApplePayMerchantIdentity < Certificate; end
+
+      # A Mac push notification certificate for development environment
+      class MacDevelopmentPush < PushCertificate; end
+
+      # A Mac push notification certificate for production environment
+      class MacProductionPush < PushCertificate; end
+
+      IOS_CERTIFICATE_TYPE_IDS = {
+        "5QPB9NHCEI" => Development,
+        "R58UK2EWSO" => Production,
+        "9RQEK7MSXA" => InHouse,
+        "LA30L5BJEU" => Certificate,
+        "BKLRAVXMGM" => DevelopmentPush,
+        "UPV3DW712I" => ProductionPush,
+        "Y3B2F3TYSI" => Passbook,
+        "3T2ZP62QW8" => WebsitePush,
+        "E5D663CMZW" => VoipPush,
+        "4APLUP237T" => ApplePay,
+        "MD8Q2VRT6A" => ApplePayMerchantIdentity
+      }
+
+      OLDER_IOS_CERTIFICATE_TYPES = [
+        # those are also sent by the browser, but not sure what they represent
+        "T44PTHVNID",
+        "DZQUP8189Y",
+        "FGQUP4785Z",
+        "S5WE21TULA",
+        "3BQKVH9I2X", # ProductionPush,
+        "FUOY7LWJET"
+      ]
+
+      MAC_CERTIFICATE_TYPE_IDS = {
+        "749Y1QAGU7" => MacDevelopment,
+        "HXZEUKP0FP" => MacAppDistribution,
+        "2PQI8IDXNH" => MacInstallerDistribution,
+        "OYVN2GW35E" => DeveloperIdInstaller,
+        "W0EURJRMC5" => DeveloperIdApplication,
+        "CDZ7EMXIZ1" => MacProductionPush,
+        "HQ4KP3I34R" => MacDevelopmentPush,
+        "DIVN2GW3XT" => DeveloperIdApplication
+      }
+
+      CERTIFICATE_TYPE_IDS = IOS_CERTIFICATE_TYPE_IDS.merge(MAC_CERTIFICATE_TYPE_IDS)
+
+      # Class methods
+      class << self
+        # Create a new code signing request that can be used to
+        # generate a new certificate
+        # @example
+        #  Create a new certificate signing request
+        #  csr, pkey = Spaceship.certificate.create_certificate_signing_request
+        #
+        #  # Use the signing request to create a new distribution certificate
+        #  Spaceship.certificate.production.create!(csr: csr)
+        def create_certificate_signing_request
+          key = OpenSSL::PKey::RSA.new(2048)
+          csr = OpenSSL::X509::Request.new
+          csr.version = 0
+          csr.subject = OpenSSL::X509::Name.new([
+                                                  ['CN', 'PEM', OpenSSL::ASN1::UTF8STRING]
+                                                ])
+          csr.public_key = key.public_key
+          csr.sign(key, OpenSSL::Digest::SHA1.new)
+          return [csr, key]
+        end
+
+        # Create a new object based on a hash.
+        # This is used to create a new object based on the server response.
+        def factory(attrs)
+          # Example:
+          # => {"name"=>"iOS Distribution: SunApps GmbH",
+          #  "certificateId"=>"XC5PH8DAAA",
+          #  "serialNumber"=>"797E732CCE8B7AAA",
+          #  "status"=>"Issued",
+          #  "statusCode"=>0,
+          #  "expirationDate"=>#<DateTime: 2015-11-25T22:45:50+00:00 ((2457352j,81950s,0n),+0s,2299161j)>,
+          #  "certificatePlatform"=>"ios",
+          #  "certificateType"=>
+          #   {"certificateTypeDisplayId"=>"R58UK2EAAA",
+          #    "name"=>"iOS Distribution",
+          #    "platform"=>"ios",
+          #    "permissionType"=>"distribution",
+          #    "distributionType"=>"store",
+          #    "distributionMethod"=>"app",
+          #    "ownerType"=>"team",
+          #    "daysOverlap"=>364,
+          #    "maxActive"=>2}}
+
+          if attrs['certificateType']
+            # On some accounts this is nested, so we need to flatten it
+            attrs.merge!(attrs['certificateType'])
+            attrs.delete('certificateType')
+          end
+
+          # Parse the dates
+          # rubocop:disable Style/RescueModifier
+          attrs['expirationDate'] = (Time.parse(attrs['expirationDate']) rescue attrs['expirationDate'])
+          attrs['dateCreated'] = (Time.parse(attrs['dateCreated']) rescue attrs['dateCreated'])
+          # rubocop:enable Style/RescueModifier
+
+          # Here we go
+          klass = CERTIFICATE_TYPE_IDS[attrs['certificateTypeDisplayId']]
+          klass ||= Certificate
+          klass.client = @client
+          klass.new(attrs)
+        end
+
+        # @param mac [Bool] Fetches Mac certificates if true. (Ignored if called from a subclass)
+        # @return (Array) Returns all certificates of this account.
+        #  If this is called from a subclass of Certificate, this will
+        #  only include certificates matching the current type.
+        def all(mac: false)
+          if self == Certificate # are we the base-class?
+            type_ids = mac ? MAC_CERTIFICATE_TYPE_IDS : IOS_CERTIFICATE_TYPE_IDS
+            types = type_ids.keys
+            types += OLDER_IOS_CERTIFICATE_TYPES unless mac
+          else
+            types = [CERTIFICATE_TYPE_IDS.key(self)]
+            mac = MAC_CERTIFICATE_TYPE_IDS.values.include?(self)
+          end
+
+          client.certificates(types, mac: mac).map do |cert|
+            factory(cert)
+          end
+        end
+
+        # @param mac [Bool] Searches Mac certificates if true
+        # @return (Certificate) Find a certificate based on the ID of the certificate.
+        def find(certificate_id, mac: false)
+          all(mac: mac).find do |c|
+            c.id == certificate_id
+          end
+        end
+
+        # Generate a new certificate based on a code certificate signing request
+        # @param csr (OpenSSL::X509::Request) (required): The certificate signing request to use. Get one using
+        #   `create_certificate_signing_request`
+        # @param bundle_id (String) (optional): The app identifier this certificate is for.
+        #  This value is only needed if you create a push profile. For normal code signing
+        #  certificates, you must only pass a certificate signing request.
+        # @example
+        #  # Create a new certificate signing request
+        #  csr, pkey = Spaceship::Certificate.create_certificate_signing_request
+        #
+        #  # Use the signing request to create a new distribution certificate
+        #  Spaceship::Certificate::Production.create!(csr: csr)
+        # @return (Certificate): The newly created certificate
+        def create!(csr: nil, bundle_id: nil)
+          type = CERTIFICATE_TYPE_IDS.key(self)
+          mac = MAC_CERTIFICATE_TYPE_IDS.include?(type)
+
+          # look up the app_id by the bundle_id
+          if bundle_id
+            app = portal_type.set_client(client).find(bundle_id)
+            raise "Could not find app with bundle id '#{bundle_id}'" unless app
+            app_id = app.app_id
+          end
+
+          # ensure csr is a OpenSSL::X509::Request
+          csr = OpenSSL::X509::Request.new(csr) if csr.kind_of?(String)
+
+          # if this succeeds, we need to save the .cer and the private key in keychain access or wherever they go in linux
+          response = client.create_certificate!(type, csr.to_pem, app_id, mac)
+          # munge the response to make it work for the factory
+          response['certificateTypeDisplayId'] = response['certificateType']['certificateTypeDisplayId']
+          self.new(response)
+        end
+
+        # Default portal class to use when finding by bundle_id
+        # @return (Class): The class this type of certificate belongs to
+        def portal_type
+          Spaceship::Portal::App
+        end
+      end
+
+      # instance methods
+
+      # @return (String) Download the raw data of the certificate without parsing
+      def download_raw
+        client.download_certificate(id, type_display_id, mac: mac?)
+      end
+
+      # @return (OpenSSL::X509::Certificate) Downloads and parses the certificate
+      def download
+        OpenSSL::X509::Certificate.new(download_raw)
+      end
+
+      # Revoke the certificate. You shouldn't use this method probably.
+      def revoke!
+        client.revoke_certificate!(id, type_display_id, mac: mac?)
+      end
+
+      # @return (Bool): Is this certificate a push profile for apps?
+      def is_push?
+        self.kind_of?(PushCertificate)
+      end
+
+      # @return (Bool) Is this a Mac profile?
+      def mac?
+        MAC_CERTIFICATE_TYPE_IDS.include?(type_display_id)
+      end
+    end
+  end
+end

data/spaceship/lib/spaceship/portal/cloud_container.rb

@@ -0,0 +1,74 @@
+require_relative 'portal_base'
+
+module Spaceship
+  module Portal
+    # Represents an iCloud Container of the Apple Dev Portal
+    class CloudContainer < PortalBase
+      # @return (String) The identifier assigned to this container
+      # @example
+      #   "iCloud.com.example.application"
+      attr_accessor :identifier
+
+      # @return (String) The prefix assigned to this container
+      # @example
+      #   "9J57U9392R"
+      attr_accessor :prefix
+
+      # @return (String) The name of this container
+      # @example
+      #   "iCloud com example application"
+      attr_accessor :name
+
+      # @return (String) Status of the container
+      # @example
+      #   "current"
+      attr_accessor :status
+
+      # @return (String) The identifier of this iCloud container, provided by the Dev Portal
+      # @example
+      #   "2MAY7NPHAA"
+      attr_accessor :cloud_container
+
+      # @return (Bool) Is the container editable?
+      attr_accessor :can_edit
+
+      # @return (Bool) Is the container deletable?
+      attr_accessor :can_delete
+
+      attr_mapping(
+        'identifier' => :identifier,
+        'prefix' => :prefix,
+        'name' => :name,
+        'cloudContainer' => :cloud_container,
+        'status' => :status,
+        'canEdit' => :can_edit,
+        'canDelete' => :can_delete
+      )
+
+      class << self
+        # @return (Array) Returns all iCloud containers available for this account
+        def all
+          client.cloud_containers.map { |container| self.factory(container) }
+        end
+
+        # Creates a new iCloud Container on the Apple Dev Portal
+        #
+        # @param identifier [String] the identifier to assign to this container
+        # @param name [String] the name of the container
+        # @return (CloudContainer) The container you just created
+        def create!(identifier: nil, name: nil)
+          new_container = client.create_cloud_container!(name, identifier)
+          self.new(new_container)
+        end
+
+        # Find a specific iCloud Container identifier
+        # @return (CloudContainer) The iCloud Container you're looking for. This is nil if the container can't be found.
+        def find(identifier)
+          all.find do |container|
+            container.identifier == identifier
+          end
+        end
+      end
+    end
+  end
+end