interoperability.yml

---

name: Interoperability

on:  # yamllint disable-line rule:truthy
  push:
    branches: ['**']
    paths-ignore:
      - '**.md'
      - '**.yml'
  pull_request:
    branches: [master, release-*]
    paths-ignore:
      - '**.md'
      - '**.yml'
  workflow_dispatch:

jobs:
  edugain:
    name: "Interoperability tests, PHP ${{ matrix.php-versions }}, ${{ matrix.operating-system }}"
    runs-on: ${{ matrix.operating-system }}
    strategy:
      fail-fast: false
      matrix:
        operating-system: [ubuntu-latest]
        php-versions: ['8.2']

    steps:
      - name: Setup PHP, with composer and extensions
        # https://github.com/shivammathur/setup-php
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php-versions }}
          extensions: ctype, date, dom, hash, mbstring, openssl, pcre, spl, xml
          tools: composer:v2
          ini-values: error_reporting=E_ALL, memory_limit=-1
          coverage: none

      - name: Setup problem matchers for PHP
        run: echo "::add-matcher::${{ runner.tool_cache }}/php.json"

      - name: Setup problem matchers for PHPUnit
        run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"

      - name: Set git to use LF
        run: |
          git config --global core.autocrlf false
          git config --global core.eol lf

      - uses: actions/checkout@v4

      - name: Cache composer dependencies
        uses: actions/cache@v4
        with:
          path: $(composer config cache-files-dir)
          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
          restore-keys: ${{ runner.os }}-composer-

      - name: Validate composer.json and composer.lock
        run: composer validate

      - name: Install Composer dependencies
        run: composer install --no-progress --prefer-dist --optimize-autoloader

      - name: Get current date
        id: date
        run: |
          echo "{date}={$(date +'%Y-%m-%d')}" >> "$GITHUB_STATE"

      - name: Cache metadata
        id: cache-metadata
        uses: actions/cache@v4
        with:
          path: /tmp/metadata
          key: ${{ runner.os }}-metadata-${{ env.date }}
          restore-keys: ${{ runner.os }}-metadata-

      - name: Download eduGAIN metadata & public key
        if: steps.cache-metadata.outputs.cache-hit != 'true'
        run: |
            mkdir -p /tmp/metadata
            wget https://mds.edugain.org/edugain-v2.xml -O /tmp/metadata/edugain.xml
            wget https://technical.edugain.org/mds-v2.cer -O /tmp/metadataedugain-pub.crt


      - name: Download GRNET metadata
        if: steps.cache-metadata.outputs.cache-hit != 'true'
        run: |
            mkdir -p /tmp/metadata
            wget https://md.aai.grnet.gr/aggregates/grnet-metadata.xml -O /tmp/metadata/grnet.xml

      - name: Download MicrosoftOnline metadata
        if: steps.cache-metadata.outputs.cache-hit != 'true'
        run: |
            mkdir -p /tmp/metadata
            wget https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml \
              -O /tmp/metadata/microsoftonline.xml

      - name: Run unit tests
        run: |
          ./vendor/bin/phpunit -c phpunit-interoperability.xml