Implement FIRAppCheck as a shim of GACAppCheck
#3291
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: auth | |
| on: | |
| pull_request: | |
| paths: | |
| - 'FirebaseAuth**' | |
| - 'FirebaseAuth/Interop/*.h' | |
| - '.github/workflows/auth.yml' | |
| - 'Gemfile*' | |
| schedule: | |
| # Run every day at 1am (PST) - cron uses UTC times | |
| - cron: '0 9 * * *' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| pod-lib-lint: | |
| # Don't run on private repo unless it is a PR. | |
| if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| runs-on: macos-12 | |
| strategy: | |
| matrix: | |
| target: [ios, tvos, macos, watchos] | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ruby/setup-ruby@v1 | |
| - name: Setup Bundler | |
| run: scripts/setup_bundler.sh | |
| - name: Configure test keychain | |
| run: scripts/configure_test_keychain.sh | |
| - name: Build and test | |
| run: | | |
| scripts/third_party/travis/retry.sh scripts/pod_lib_lint.rb FirebaseAuth.podspec --platforms=${{ matrix.target }} | |
| integration-tests: | |
| # Don't run on private repo unless it is a PR. | |
| if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| env: | |
| plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }} | |
| runs-on: macos-12 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126 | |
| with: | |
| cache_key: ${{ matrix.os }} | |
| - uses: ruby/setup-ruby@v1 | |
| - name: Setup Bundler | |
| run: scripts/setup_bundler.sh | |
| - name: Prereqs | |
| run: scripts/install_prereqs.sh Auth iOS | |
| - name: Install Secrets | |
| run: | | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthCredentials.h.gpg \ | |
| FirebaseAuth/Tests/Sample/ApiTests/AuthCredentials.h "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/Application.plist.gpg \ | |
| FirebaseAuth/Tests/Sample/Sample/Application.plist "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/AuthCredentials.h.gpg \ | |
| FirebaseAuth/Tests/Sample/Sample/AuthCredentials.h "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/GoogleService-Info.plist.gpg \ | |
| FirebaseAuth/Tests/Sample/Sample/GoogleService-Info.plist "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/GoogleService-Info_multi.plist.gpg \ | |
| FirebaseAuth/Tests/Sample/Sample/GoogleService-Info_multi.plist "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/Sample.entitlements.gpg \ | |
| FirebaseAuth/Tests/Sample/Sample/Sample.entitlements "$plist_secret" | |
| scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/Credentials.swift.gpg \ | |
| FirebaseAuth/Tests/Sample/SwiftApiTests/Credentials.swift "$plist_secret" | |
| - name: BuildAndTest # can be replaced with pod lib lint with CocoaPods 1.10 | |
| run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/build.sh Auth iOS) | |
| spm: | |
| # Don't run on private repo unless it is a PR. | |
| if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| runs-on: macos-12 | |
| strategy: | |
| matrix: | |
| target: [iOS, tvOS, macOS, catalyst, watchOS] | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126 | |
| with: | |
| cache_key: ${{ matrix.os }} | |
| - name: Initialize xcodebuild | |
| run: scripts/setup_spm_tests.sh | |
| - name: Unit Tests | |
| run: scripts/third_party/travis/retry.sh ./scripts/build.sh AuthUnit ${{ matrix.target }} spm | |
| catalyst: | |
| # Don't run on private repo unless it is a PR. | |
| if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| runs-on: macos-12 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126 | |
| with: | |
| cache_key: ${{ matrix.os }} | |
| - uses: ruby/setup-ruby@v1 | |
| - name: Setup Bundler | |
| run: scripts/setup_bundler.sh | |
| - name: Setup project and Build for Catalyst | |
| # Only build the unit tests on Catalyst. Their keychain reliance causes several failures. | |
| run: scripts/test_catalyst.sh FirebaseAuth build FirebaseAuth-Unit-unit | |
| quickstart: | |
| # Don't run on private repo unless it is a PR. | |
| if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| env: | |
| plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }} | |
| signin_secret: ${{ secrets.GHASecretsGPGPassphrase1 }} | |
| runs-on: macos-12 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ruby/setup-ruby@v1 | |
| - name: Setup quickstart | |
| run: scripts/setup_quickstart.sh authentication | |
| - name: Install Secret GoogleService-Info.plist | |
| run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-auth.plist.gpg \ | |
| quickstart-ios/authentication/GoogleService-Info.plist "$plist_secret" | |
| - name: Test swift quickstart | |
| run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart.sh Authentication false) | |
| # TODO(@sunmou99): currently have issue with this job, will re-enable it once the issue resolved. | |
| # quickstart-ftl-cron-only: | |
| # # Don't run on private repo. | |
| # if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request' | |
| # env: | |
| # plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }} | |
| # signin_secret: ${{ secrets.GHASecretsGPGPassphrase1 }} | |
| # runs-on: macos-12 | |
| # steps: | |
| # - uses: actions/checkout@v3 | |
| # - uses: ruby/setup-ruby@v1 | |
| # - name: Setup quickstart | |
| # run: scripts/setup_quickstart.sh authentication | |
| # - name: Install Secret GoogleService-Info.plist | |
| # run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-auth.plist.gpg \ | |
| # quickstart-ios/authentication/GoogleService-Info.plist "$plist_secret" | |
| # - name: Build swift quickstart | |
| # run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart_ftl.sh Authentication) | |
| # - id: ftl_test | |
| # uses: FirebaseExtended/github-actions/[email protected] | |
| # with: | |
| # credentials_json: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_CREDENTIALS }} | |
| # testapp_dir: quickstart-ios/build-for-testing | |
| # test_type: "xctest" | |
| auth-cron-only: | |
| # Don't run on private repo. | |
| if: github.event_name == 'schedule' && github.repository == 'Firebase/firebase-ios-sdk' | |
| runs-on: macos-12 | |
| strategy: | |
| matrix: | |
| # The macos and tvos tests can hang, and watchOS doesn't have tests. | |
| target: [ios, tvos --skip-tests, macos --skip-tests, watchos --skip-tests] | |
| flags: [ | |
| '--use-static-frameworks' | |
| ] | |
| needs: pod-lib-lint | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ruby/setup-ruby@v1 | |
| - name: Setup Bundler | |
| run: scripts/setup_bundler.sh | |
| - name: Configure test keychain | |
| run: scripts/configure_test_keychain.sh | |
| - name: PodLibLint Auth Cron | |
| run: scripts/third_party/travis/retry.sh scripts/pod_lib_lint.rb FirebaseAuth.podspec --platforms=${{ matrix.target }} ${{ matrix.flags }} |