flutter_ios_build.yml

# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

name: Flutter iOS Build

defaults:
  run:
    working-directory: das_client
    
on:
  push:
    paths:
      - 'das_client/**'
    branches: [ "feature/ios-signing" ]

jobs:
  build:
    runs-on: macos-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-java@v4
      with:
        distribution: 'temurin'
        java-version: '17'
    - uses: subosito/flutter-action@v2
      with:
        flutter-version: '3.22.2'
    - name: Install the Apple certificate and provisioning profile
      env:
        SBB_APPSTORE_BASE64: ${{ secrets.SBB_APPSTORE_BASE64 }}
        SBB_APPSTORE_P12_PASSWORD: ${{ secrets.SBB_APPSTORE_P12_PASSWORD }}
        DEV_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.DEV_BUILD_PROVISION_PROFILE_BASE64 }}
        INT_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.INT_BUILD_PROVISION_PROFILE_BASE64 }}
        PROD_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.PROD_BUILD_PROVISION_PROFILE_BASE64 }}
        KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
        APPSTORE_CONNECT_PRIVATE_KEY_BASE64: ${{ secrets.APPSTORE_CONNECT_PRIVATE_KEY_BASE64 }}
      run: |
        # create variables
        SBB_CERTIFICATE_PATH=$RUNNER_TEMP/sbb_appstore.p12
        PP_DEV_PATH=$RUNNER_TEMP/build_dev_pp.mobileprovision
        PP_INT_PATH=$RUNNER_TEMP/build_int_pp.mobileprovision
        PP_PROD_PATH=$RUNNER_TEMP/build_prod_pp.mobileprovision
        KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
        APPSTORE_CONNECT_PRIVATE_KEY_PATH=~/AuthKey.p8

        # import certificate and provisioning profile from secrets
        echo -n "$SBB_APPSTORE_BASE64" | base64 --decode -o $SBB_CERTIFICATE_PATH
        echo -n "$DEV_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_DEV_PATH
        echo -n "$INT_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_INT_PATH
        echo -n "$PROD_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_PROD_PATH
        echo -n "$APPSTORE_CONNECT_PRIVATE_KEY_BASE64" | base64 --decode -o $APPSTORE_CONNECT_PRIVATE_KEY_PATH

        # create temporary keychain
        security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
        security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
        security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH

        # import certificate to keychain
        security import $SBB_CERTIFICATE_PATH -P "$SBB_APPSTORE_P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
        security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
        security list-keychain -d user -s $KEYCHAIN_PATH

        # apply provisioning profile
        mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
        cp $PP_DEV_PATH ~/Library/MobileDevice/Provisioning\ Profiles
        cp $PP_INT_PATH ~/Library/MobileDevice/Provisioning\ Profiles
        cp $PP_PROD_PATH ~/Library/MobileDevice/Provisioning\ Profiles
    - run: |
        flutter pub get
        flutter pub run build_runner build --delete-conflicting-outputs
    - run: flutter test
    - name: Build and Deploy iOS App
      env:
        APPSTORE_CONNECT_KEY_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ID }}
        APPSTORE_CONNECT_ISSUER_ID: ${{ secrets.APPSTORE_CONNECT_ISSUER_ID }}
      run: |
        flutter build ipa --flavor dev -t lib/main_dev.dart --release
        xcodebuild -exportArchive -archivePath "build/ios/archive/DAS Dev.xcarchive" -exportPath "build/ios/ipa/" -exportOptionsPlist ios/exportOptionsRelease.plist -authenticationKeyIssuerID "$APPSTORE_CONNECT_ISSUER_ID" -authenticationKeyID "$APPSTORE_CONNECT_KEY_ID" -authenticationKeyPath ~/AuthKey.p8
#    - run: flutter build ios --flavor dev -t lib/main_dev.dart --release
#    - run: flutter build ios --flavor dev -t lib/main_dev.dart --release
#    - run: flutter build ios --flavor inte -t lib/main_inte.dart --release
#    - run: flutter build ios --flavor prod -t lib/main_prod.dart --release
    - name: Archive Apps
      uses: actions/upload-artifact@v4
      with:
        name: Build
        path: |
          das_client/build/ios/archive/**
          das_client/build/ios/ipa/**
          das_client/build/ios/iphoneos/**
        retention-days: 1