chore(ios): setup notarization

Author: gustavotoyota

apps/client/package.json

@@ -50,6 +50,7 @@
     "compression": "1.7.4",
     "cookie": "0.5.0",
     "crypto-js": "^4.1.1",
+    "dotenv": "16.0.3",
     "dotenv-expand": "9.0.0",
     "downloadjs": "^1.4.7",
     "electron-log": "^4.4.8",
@@ -90,6 +91,7 @@
     "zod": "3.19.1"
   },
   "devDependencies": {
+    "@electron/notarize": "^2.1.0",
     "@intlify/vite-plugin-vue-i18n": "3.4.0",
     "@quasar/app-vite": "^1.4.3",
     "@types/argon2-browser": "^1.18.1",
@@ -105,7 +107,6 @@
     "@types/zxcvbn": "4.4.1",
     "@vue/devtools": "6.4.5",
     "autoprefixer": "10.4.13",
-    "dotenv": "16.0.3",
     "electron": "25.2.0",
     "electron-builder": "^24.4.0",
     "electron-packager": "^17.1.1",

apps/client/quasar.config.js

@@ -327,13 +327,25 @@ module.exports = configure(function (ctx) {
 
         mac: {
           target: 'dmg',
+
+          hardenedRuntime: true,
+          gatekeeperAssess: false,
+          entitlements: 'src-capacitor/ios/App/App/entitlements.mac.plist',
+          entitlementsInherit:
+            'src-capacitor/ios/App/App/entitlements.mac.plist',
         },
         linux: {
           target: 'AppImage',
         },
         win: {
           target: 'nsis',
         },
+
+        dmg: {
+          sign: false,
+        },
+
+        afterSign: 'src-electron/notarize.js',
       },
     },
 

apps/client/src-capacitor/ios/App/App/entitlements.mac.plist

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+  </dict>
+</plist>

apps/client/src-electron/notarize.js

@@ -0,0 +1,19 @@
+require('dotenv').config();
+const { notarize } = require('@electron/notarize');
+
+exports.default = async function notarizing(context) {
+  const { electronPlatformName, appOutDir } = context;
+  if (electronPlatformName !== 'darwin') {
+    return;
+  }
+
+  const appName = context.packager.appInfo.productFilename;
+
+  return await notarize({
+    appBundleId: 'app.deepnotes',
+    appPath: `${appOutDir}/${appName}.app`,
+    appleId: process.env.APPLE_ID,
+    appleIdPassword: process.env.APPLE_ID_PASSWORD,
+    teamId: process.env.TEAM_ID,
+  });
+};