fastlane_iac_publish 0.1.0

data/gym/lib/gym/xcode.rb

@@ -0,0 +1,27 @@
+require_relative 'module'
+
+module Gym
+  class Xcode
+    class << self
+      def xcode_path
+        Helper.xcode_path
+      end
+
+      def xcode_version
+        Helper.xcode_version
+      end
+
+      # Below Xcode 7 (which offers a new nice API to sign the app)
+      def pre_7?
+        UI.user_error!("Unable to locate Xcode. Please make sure to have Xcode installed on your machine") if xcode_version.nil?
+        v = xcode_version
+        is_pre = v.split('.')[0].to_i < 7
+        is_pre
+      end
+
+      def legacy_api_deprecated?
+        FastlaneCore::Helper.xcode_at_least?('8.3')
+      end
+    end
+  end
+end

data/gym/lib/gym/xcodebuild_fixes/README.md

@@ -0,0 +1,9 @@
+## Fixes
+
+This directory contains all the (hopefully temporary) work-arounds to make the `ipa` export work. 
+
+`xcodebuild` doesn't get the same set of features as Xcode does (e.g. WatchKit app export, Swift export and more)
+
+This directory should be empty as soon as all those `xcodebuild` issues are fixed.
+
+In the mean-time we have all the workarounds in one central place

data/gym/lib/gym/xcodebuild_fixes/generic_archive_fix.rb

@@ -0,0 +1,35 @@
+require 'shellwords'
+
+require_relative '../module'
+require_relative '../generators/build_command_generator'
+
+module Gym
+  class XcodebuildFixes
+    class << self
+      # Determine IPAs for the Watch App which aren't inside of a containing
+      # iOS App and removes them.
+      #
+      # In the future it may be nice to modify the plist file for the archive
+      # itself so that it points to the correct IPA as well.
+      #
+      # This is a workaround for this bug
+      # https://github.com/CocoaPods/CocoaPods/issues/4178
+      def generic_archive_fix
+        UI.verbose("Looking For Orphaned WatchKit2 Applications")
+
+        Dir.glob("#{BuildCommandGenerator.archive_path}/Products/Applications/*.app").each do |app_path|
+          if is_watchkit_app?(app_path)
+            UI.verbose("Removing Orphaned WatchKit2 Application #{app_path}")
+            FileUtils.rm_rf(app_path)
+          end
+        end
+      end
+
+      # Does this application have a WatchKit target
+      def is_watchkit_app?(app_path)
+        plist_path = "#{app_path}/Info.plist"
+        `/usr/libexec/PlistBuddy -c 'Print :DTSDKName' #{plist_path.shellescape} 2>&1`.match(/^\s*watchos2\.\d+\s*$/) != nil
+      end
+    end
+  end
+end

data/match/README.md

@@ -0,0 +1,17 @@
+<h3 align="center">
+  <a href="https://docs.fastlane.tools/actions/match/">
+    <img src="https://raw.githubusercontent.com/fastlane/fastlane/master/fastlane/assets/fastlane.png" width="100" />
+    <br />
+    fastlane
+  </a>
+</h3>
+
+------
+
+<p align="center">
+  <a href="https://docs.fastlane.tools/actions/match/">
+    <img src="https://raw.githubusercontent.com/fastlane/fastlane/master/match/assets/match.png" height="110">
+  </a>
+</p>
+
+<h3 align="center">The <i>match</i> docs were moved to <a href='https://docs.fastlane.tools/actions/match/'>docs.fastlane.tools</a></h3>

data/match/lib/assets/MatchfileTemplate

@@ -0,0 +1,11 @@
+[[CONTENT]]
+
+type("development") # The default type, can be: appstore, adhoc, enterprise or development
+
+# app_identifier(["tools.fastlane.app", "tools.fastlane.app2"])
+# username("user@fastlane.tools") # Your Apple Developer Portal username
+
+# For all available options run `fastlane match --help`
+# Remove the # in the beginning of the line to enable the other options
+
+# The docs are available on https://docs.fastlane.tools/actions/match

data/match/lib/assets/MatchfileTemplate.swift

@@ -0,0 +1,9 @@
+class Matchfile: MatchfileProtocol {
+    var gitUrl: String { return "[[GIT_URL]]" }
+    var type: String { return "development" } // The default type, can be: appstore, adhoc, enterprise or development
+    // var appIdentifier: [String] { return ["tools.fastlane.app", "tools.fastlane.app2"] }
+		// cat username:String { return "user@fastlane.tools" } // Your Apple Developer Portal username
+}
+
+// For all available options run `fastlane match --help`
+// Remove the // in the beginning of the line to enable the other options

data/match/lib/assets/READMETemplate.md

@@ -0,0 +1,56 @@
+## [fastlane match](https://docs.fastlane.tools/actions/match/)
+
+This repository contains all your certificates and provisioning profiles needed to build and sign your applications. They are encrypted using OpenSSL via a passphrase.
+
+**Important:** Make sure this repository is set to private and only your team members have access to this repo.
+
+Do not modify this file, as it gets overwritten every time you run _match_.
+
+### Installation
+
+Make sure you have the latest version of the Xcode command line tools installed:
+
+```
+xcode-select --install
+```
+
+Install _fastlane_ using
+
+```
+[sudo] gem install fastlane -NV
+```
+
+or alternatively using `brew cask install fastlane`
+
+### Usage
+
+Navigate to your project folder and run
+
+```
+fastlane match appstore
+```
+```
+fastlane match adhoc
+```
+```
+fastlane match development
+```
+```
+fastlane match enterprise
+```
+
+For more information open [fastlane match git repo](https://docs.fastlane.tools/actions/match/)
+
+### Content
+
+#### certs
+
+This directory contains all your certificates with their private keys
+
+#### profiles
+
+This directory contains all provisioning profiles
+
+------------------------------------
+
+For more information open [fastlane match git repo](https://docs.fastlane.tools/actions/match/)

data/match/lib/match.rb

@@ -0,0 +1,13 @@
+require_relative 'match/options'
+require_relative 'match/runner'
+require_relative 'match/nuke'
+require_relative 'match/utils'
+require_relative 'match/table_printer'
+require_relative 'match/generator'
+require_relative 'match/setup'
+require_relative 'match/spaceship_ensure'
+require_relative 'match/change_password'
+require_relative 'match/migrate'
+require_relative 'match/storage'
+require_relative 'match/encryption'
+require_relative 'match/module'

data/match/lib/match/change_password.rb

@@ -0,0 +1,70 @@
+require_relative 'module'
+
+require_relative 'storage'
+require_relative 'encryption'
+
+module Match
+  # These functions should only be used while in (UI.) interactive mode
+  class ChangePassword
+    def self.update(params: nil)
+      if params[:storage_mode] != "git"
+        # Only git supports changing the password
+        # All other storage options will most likely use more advanced
+        # ways to encrypt files
+        UI.user_error!("Only git-based match allows you to change your password, current `storage_mode` is #{params[:storage_mode]}")
+      end
+
+      ensure_ui_interactive
+
+      to = ChangePassword.ask_password(message: "New passphrase for Git Repo: ", confirm: true)
+
+      # Choose the right storage and encryption implementations
+      storage = Storage.for_mode(params[:storage_mode], {
+        git_url: params[:git_url],
+        shallow_clone: params[:shallow_clone],
+        skip_docs: params[:skip_docs],
+        git_branch: params[:git_branch],
+        git_full_name: params[:git_full_name],
+        git_user_email: params[:git_user_email],
+        clone_branch_directly: params[:clone_branch_directly]
+      })
+      storage.download
+
+      encryption = Encryption.for_storage_mode(params[:storage_mode], {
+        git_url: params[:git_url],
+        working_directory: storage.working_directory
+      })
+      encryption.decrypt_files
+
+      encryption.clear_password
+      encryption.store_password(to)
+
+      message = "[fastlane] Changed passphrase"
+      files_to_commit = encryption.encrypt_files
+      storage.save_changes!(files_to_commit: files_to_commit, custom_message: message)
+    end
+
+    # This method is called from both here, and from `openssl.rb`
+    def self.ask_password(message: "Passphrase for Git Repo: ", confirm: nil)
+      ensure_ui_interactive
+      loop do
+        password = UI.password(message)
+        if confirm
+          password2 = UI.password("Type passphrase again: ")
+          if password == password2
+            return password
+          end
+        else
+          return password
+        end
+        UI.error("Passphrases differ. Try again")
+      end
+    end
+
+    def self.ensure_ui_interactive
+      raise "This code should only run in interactive mode" unless UI.interactive?
+    end
+
+    private_class_method :ensure_ui_interactive
+  end
+end

data/match/lib/match/commands_generator.rb

@@ -0,0 +1,175 @@
+require 'commander'
+
+require 'fastlane_core/configuration/configuration'
+
+require_relative 'nuke'
+require_relative 'change_password'
+require_relative 'setup'
+require_relative 'runner'
+require_relative 'options'
+require_relative 'migrate'
+
+require_relative 'storage'
+require_relative 'encryption'
+
+require_relative 'module'
+
+HighLine.track_eof = false
+
+module Match
+  class CommandsGenerator
+    include Commander::Methods
+
+    def self.start
+      self.new.run
+    end
+
+    def run
+      program :name, 'match'
+      program :version, Fastlane::VERSION
+      program :description, Match::DESCRIPTION
+      program :help, 'Author', 'Felix Krause <match@krausefx.com>'
+      program :help, 'Website', 'https://fastlane.tools'
+      program :help, 'Documentation', 'https://docs.fastlane.tools/actions/match/'
+      program :help_formatter, :compact
+
+      global_option('--verbose') { FastlaneCore::Globals.verbose = true }
+
+      command :run do |c|
+        c.syntax = 'fastlane match'
+        c.description = Match::DESCRIPTION
+
+        FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+        c.action do |args, options|
+          if args.count > 0
+            FastlaneCore::UI.user_error!("Please run `fastlane match [type]`, allowed values: development, adhoc, enterprise  or appstore")
+          end
+
+          params = FastlaneCore::Configuration.create(Match::Options.available_options, options.__hash__)
+          params.load_configuration_file("Matchfile")
+          Match::Runner.new.run(params)
+        end
+      end
+
+      Match.environments.each do |type|
+        command type do |c|
+          c.syntax = "fastlane match #{type}"
+          c.description = "Run match for a #{type} provisioning profile"
+
+          FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+          c.action do |args, options|
+            params = FastlaneCore::Configuration.create(Match::Options.available_options, options.__hash__)
+            params.load_configuration_file("Matchfile") # this has to be done *before* overwriting the value
+            params[:type] = type.to_s
+            Match::Runner.new.run(params)
+          end
+        end
+      end
+
+      command :init do |c|
+        c.syntax = 'fastlane match init'
+        c.description = 'Create the Matchfile for you'
+        c.action do |args, options|
+          containing = FastlaneCore::Helper.fastlane_enabled_folder_path
+          is_swift_fastfile = args.include?("swift")
+
+          if is_swift_fastfile
+            path = File.join(containing, "Matchfile.swift")
+          else
+            path = File.join(containing, "Matchfile")
+          end
+
+          if File.exist?(path)
+            FastlaneCore::UI.user_error!("You already have a Matchfile in this directory (#{path})")
+            return 0
+          end
+
+          Match::Setup.new.run(path, is_swift_fastfile: is_swift_fastfile)
+        end
+      end
+
+      command :change_password do |c|
+        c.syntax = 'fastlane match change_password'
+        c.description = 'Re-encrypt all files with a different password'
+
+        FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+        c.action do |args, options|
+          params = FastlaneCore::Configuration.create(Match::Options.available_options, options.__hash__)
+          params.load_configuration_file("Matchfile")
+
+          Match::ChangePassword.update(params: params)
+          UI.success("Successfully changed the password. Make sure to update the password on all your clients and servers by running `fastlane match [environment]`")
+        end
+      end
+
+      command :decrypt do |c|
+        c.syntax = "fastlane match decrypt"
+        c.description = "Decrypts the repository and keeps it on the filesystem"
+
+        FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+        c.action do |args, options|
+          params = FastlaneCore::Configuration.create(Match::Options.available_options, options.__hash__)
+          params.load_configuration_file("Matchfile")
+
+          storage = Storage.for_mode(params[:storage_mode], {
+            git_url: params[:git_url],
+            shallow_clone: params[:shallow_clone],
+            git_branch: params[:git_branch],
+            clone_branch_directly: params[:clone_branch_directly]
+          })
+          storage.download
+
+          encryption = Encryption.for_storage_mode(params[:storage_mode], {
+            git_url: params[:git_url],
+            working_directory: storage.working_directory
+          })
+          encryption.decrypt_files if encryption
+          UI.success("Repo is at: '#{storage.working_directory}'")
+        end
+      end
+
+      command :migrate do |c|
+        c.syntax = "fastlane match migrate"
+        c.description = "Migrate from one storage backend to another one"
+
+        FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+        c.action do |args, options|
+          Match::Migrate.new.migrate(args, options)
+        end
+      end
+
+      command "nuke" do |c|
+        # We have this empty command here, since otherwise the normal `match` command will be executed
+        c.syntax = "fastlane match nuke"
+        c.description = "Delete all certificates and provisioning profiles from the Apple Dev Portal"
+        c.action do |args, options|
+          FastlaneCore::UI.user_error!("Please run `fastlane match nuke [type], allowed values: development, distribution and enterprise. For the 'adhoc' type, please use 'distribution' instead.")
+        end
+      end
+
+      ["development", "distribution", "enterprise"].each do |type|
+        command "nuke #{type}" do |c|
+          c.syntax = "fastlane match nuke #{type}"
+          c.description = "Delete all certificates and provisioning profiles from the Apple Dev Portal of the type #{type}"
+
+          FastlaneCore::CommanderGenerator.new.generate(Match::Options.available_options, command: c)
+
+          c.action do |args, options|
+            params = FastlaneCore::Configuration.create(Match::Options.available_options, options.__hash__)
+            params.load_configuration_file("Matchfile")
+            Match::Nuke.new.run(params, type: type.to_s)
+          end
+        end
+      end
+
+      default_command(:run)
+
+      run!
+    end
+  end
+end

data/match/lib/match/encryption.rb

@@ -0,0 +1,45 @@
+require_relative 'encryption/interface'
+require_relative 'encryption/openssl'
+
+module Match
+  module Encryption
+    class << self
+      def backends
+        @backends ||= {
+          "git" => lambda { |params|
+            # OpenSSL is storage agnostic so this maps git_url
+            # to keychain_name for the name of the keychain entry
+            params[:keychain_name] = params[:git_url]
+            return Encryption::OpenSSL.configure(params)
+          },
+          "google_cloud" => lambda { |params|
+            return nil
+          }
+        }
+      end
+
+      def register_backend(type: nil, encryption_class: nil, &configurator)
+        UI.user_error!("No type specified for encryption backend") if type.nil?
+
+        normalized_name = type.to_s
+        UI.message("Replacing Match::Encryption backend for type '#{normalized_name}'") if backends.include?(normalized_name)
+
+        if configurator
+          @backends[normalized_name] = configurator
+        elsif encryption_class
+          @backends[normalized_name] = ->(params) { return encryption_class.configure(params) }
+        else
+          UI.user_error!("Specify either a `encryption_class` or a configuration block when registering a encryption backend")
+        end
+      end
+
+      # Returns the class to be used for a given `storage_mode`
+      def for_storage_mode(storage_mode, params)
+        configurator = backends[storage_mode.to_s]
+        return configurator.call(params) if configurator
+
+        UI.user_error!("No encryption backend for storage mode '#{storage_mode}'")
+      end
+    end
+  end
+end