Working on iOS GitHub CI

Author: matthew-carroll

.github/workflows/pr_validation.yaml

@@ -79,29 +79,38 @@ jobs:
         working-directory: ./packages/flutter_test_runners/example_deep_links
 
     steps:
-      - name: Decode Provisioning Profile and Certificate
-        working-directory: ~
+      - name: Install the Apple certificate and provisioning profile
         env:
-          PROVISIONING_PROFILE: ${{ secrets.PROVISIONING_PROFILE }}
-          SIGNING_CERTIFICATE: ${{ secrets.SIGNING_CERTIFICATE }}
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.SIGNING_CERTIFICATE }}
+          P12_PASSWORD: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }}
+          BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.PROVISIONING_PROFILE }}
+          EXPORT_OPTIONS_PLIST: ${{ secrets.EXPORT_OPTIONS_PLIST }}
         run: |
-          echo "$PROVISIONING_PROFILE" | base64 --decode > provisioning.mobileprovision
-          echo "$SIGNING_CERTIFICATE" | base64 --decode > certificate.p12
-
-      - name: Install Certificate and Provisioning Profile
-        working-directory: ~
-        env:
-          SIGNING_CERTIFICATE_PASSWORD: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }}
-        run: |
-          # Install the signing certificate
-          security import certificate.p12 -k ~/Library/Keychains/login.keychain-db -P "$SIGNING_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
+          # create variables
+          CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
+          PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision
+          KEYCHAIN_PATH=~/Library/Keychains/login.keychain-db
+          
+          # import certificate and provisioning profile from secrets
+          echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH
+          echo -n "$BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_PATH
           
-          # Move the provisioning profile to the correct location
+          # create temporary keychain
+          #security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          #security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          #security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          
+          # import certificate to keychain
+          security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
+          
+          # apply provisioning profile
           mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
-          mv provisioning.mobileprovision ~/Library/MobileDevice/Provisioning\ Profiles/
-      
-          # Verify the certificate
-          security find-identity -p codesigning -v
+          cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles
+          
+          # Save ExportOptions.plist from Base64 to file
+          EXPORT_OPTS_PATH=$RUNNER_TEMP/ExportOptions.plist
+          echo -n "$EXPORT_OPTIONS_PLIST" | base64 --decode -o $EXPORT_OPTS_PATH
 
       - name: Checkout repository
         uses: actions/checkout@v3
@@ -134,7 +143,7 @@ jobs:
         run: flutter pub get
 
       - name: Build iOS App
-        run: flutter build ios --debug
+        run: flutter build ios --debug --export-options-plist=$EXPORT_OPTS_PATH
 
       - name: Install iOS App
         run: flutter install ipa