From f16b64a6ebf1445c89c85a56bf1b0c76188496e1 Mon Sep 17 00:00:00 2001
From: u221711 <thomas.bomatter@sbb.ch>
Date: Mon, 5 Aug 2024 16:56:51 +0200
Subject: [PATCH] update pipeline

---
 .github/workflows/flutter_ios_build.yml | 53 ++++++++++++++++++++++---
 das_client/README.md                    |  2 +-
 2 files changed, 48 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/flutter_ios_build.yml b/.github/workflows/flutter_ios_build.yml
index 16b76d61..6be0f62c 100644
--- a/.github/workflows/flutter_ios_build.yml
+++ b/.github/workflows/flutter_ios_build.yml
@@ -32,26 +32,67 @@ jobs:
         flutter-version: '3.22.2'
     - name: Install the Apple certificate and provisioning profile
       env:
+        SBB_APPSTORE_BASE64: ${{ secrets.SBB_APPSTORE_BASE64 }}
+        SBB_APPSTORE_P12_PASSWORD: ${{ secrets.SBB_APPSTORE_P12_PASSWORD }}
+        DEV_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.DEV_BUILD_PROVISION_PROFILE_BASE64 }}
+        INT_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.INT_BUILD_PROVISION_PROFILE_BASE64 }}
+        PROD_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.PROD_BUILD_PROVISION_PROFILE_BASE64 }}
+        KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
         APPSTORE_CONNECT_PRIVATE_KEY_BASE64: ${{ secrets.APPSTORE_CONNECT_PRIVATE_KEY_BASE64 }}
       run: |
-        # decode appstore connect private key
-        echo -n "$APPSTORE_CONNECT_PRIVATE_KEY_BASE64" | base64 --decode -o ~/AuthKey.p8
+        # create variables
+        SBB_CERTIFICATE_PATH=$RUNNER_TEMP/sbb_appstore.p12
+        PP_DEV_PATH=$RUNNER_TEMP/build_dev_pp.mobileprovision
+        PP_INT_PATH=$RUNNER_TEMP/build_int_pp.mobileprovision
+        PP_PROD_PATH=$RUNNER_TEMP/build_prod_pp.mobileprovision
+        KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+        APPSTORE_CONNECT_PRIVATE_KEY_PATH=~/AuthKey.p8
+
+        # import certificate and provisioning profile from secrets
+        echo -n "$SBB_APPSTORE_BASE64" | base64 --decode -o $SBB_CERTIFICATE_PATH
+        echo -n "$DEV_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_DEV_PATH
+        echo -n "$INT_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_INT_PATH
+        echo -n "$PROD_BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_PROD_PATH
+        echo -n "$APPSTORE_CONNECT_PRIVATE_KEY_BASE64" | base64 --decode -o $APPSTORE_CONNECT_PRIVATE_KEY_PATH
+
+        # create temporary keychain
+        security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+        security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+        security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+        # import certificate to keychain
+        security import $SBB_CERTIFICATE_PATH -P "$SBB_APPSTORE_P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+        security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+        security list-keychain -d user -s $KEYCHAIN_PATH
+
+        # apply provisioning profile
+        mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
+        cp $PP_DEV_PATH ~/Library/MobileDevice/Provisioning\ Profiles
+        cp $PP_INT_PATH ~/Library/MobileDevice/Provisioning\ Profiles
+        cp $PP_PROD_PATH ~/Library/MobileDevice/Provisioning\ Profiles
     - run: |
         flutter pub get
         flutter pub run build_runner build --delete-conflicting-outputs
     - run: flutter test
     - name: Build and Deploy iOS App
       env:
-        APPSTORE_CONNECT_PRIVATE_KEY_BASE64: ${{ secrets.APPSTORE_CONNECT_PRIVATE_KEY_BASE64 }}
         APPSTORE_CONNECT_KEY_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ID }}
         APPSTORE_CONNECT_ISSUER_ID: ${{ secrets.APPSTORE_CONNECT_ISSUER_ID }}
       run: |
-        echo -n "$APPSTORE_CONNECT_PRIVATE_KEY_BASE64" | base64 --decode -o ~/AuthKey.p8
-        flutter build ipa --flavor dev -t lib/main_dev.dart --release --no-codesign
-        xcodebuild -exportArchive -archivePath "build/ios/archive/DAS Dev.xcarchive" -exportOptionsPlist ios/exportOptionsRelease.plist -allowProvisioningUpdates -authenticationKeyIssuerID "$APPSTORE_CONNECT_ISSUER_ID" -authenticationKeyID "$APPSTORE_CONNECT_KEY_ID" -authenticationKeyPath ~/AuthKey.p8
+        flutter build ipa --flavor dev -t lib/main_dev.dart --release
+        xcodebuild -exportArchive -archivePath "build/ios/archive/DAS Dev.xcarchive" -exportPath "build/ios/ipa/" -exportOptionsPlist ios/exportOptionsRelease.plist -authenticationKeyIssuerID "$APPSTORE_CONNECT_ISSUER_ID" -authenticationKeyID "$APPSTORE_CONNECT_KEY_ID" -authenticationKeyPath ~/AuthKey.p8
 #    - run: flutter build ios --flavor dev -t lib/main_dev.dart --release
 #    - run: flutter build ios --flavor dev -t lib/main_dev.dart --release
 #    - run: flutter build ios --flavor inte -t lib/main_inte.dart --release
 #    - run: flutter build ios --flavor prod -t lib/main_prod.dart --release
+    - name: Archive Apps
+      uses: actions/upload-artifact@v4
+      with:
+        name: Build
+        path: |
+          das_client/build/ios/archive/**
+          das_client/build/ios/ipa/**
+          das_client/build/ios/iphoneos/**
+        retention-days: 1
 
 
diff --git a/das_client/README.md b/das_client/README.md
index 48963477..c3e96850 100644
--- a/das_client/README.md
+++ b/das_client/README.md
@@ -13,4 +13,4 @@ A few resources to get you started if this is your first Flutter project:
 
 For help getting started with Flutter development, view the
 [online documentation](https://docs.flutter.dev/), which offers tutorials,
-samples, guidance on mobile development, and a full API reference.
\ No newline at end of file
+samples, guidance on mobile development, and a full API reference.