Skip to content

Commit ae5b95e

Browse files
committed
feat: replace deprecated Firebase token with service account authentication
- Update deploy-staging.yml to use FIREBASE_SERVICE_ACCOUNT_STAGING - Update deploy-prod.yml to use FIREBASE_SERVICE_ACCOUNT_PROD - Remove deprecated --token authentication method - Implement GOOGLE_APPLICATION_CREDENTIALS for secure authentication
1 parent 6f55393 commit ae5b95e

File tree

2 files changed

+20
-4
lines changed

2 files changed

+20
-4
lines changed

.github/workflows/deploy-prod.yml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,8 +30,16 @@ jobs:
3030
cache: 'pnpm'
3131
- run: pnpm install && pnpm build
3232
- run: pnpm release
33-
- run: cd functions && pnpm install && pnpm deploy:config:prod --token ${{ secrets.FIREBASE_TOKEN }}
34-
- run: pnpm deploy:prod --token ${{ secrets.FIREBASE_TOKEN }}
33+
- name: Setup Firebase service account
34+
run: |
35+
echo '${{ secrets.FIREBASE_SERVICE_ACCOUNT_PROD }}' > /tmp/gcp-key.json
36+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
37+
- run: |
38+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
39+
cd functions && pnpm install && pnpm deploy:config:prod
40+
- run: |
41+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
42+
pnpm deploy:prod
3543
- name: Upload Release Asset
3644
id: upload-release-asset
3745
uses: shogo82148/actions-upload-release-asset@v1

.github/workflows/deploy-staging.yml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,18 @@ jobs:
2626
cache: 'pnpm'
2727
- run: pnpm install && pnpm build
2828
- run: pnpm release
29-
- run: cd functions && pnpm install && pnpm deploy:config:staging --token ${{ secrets.FIREBASE_TOKEN }}
29+
- name: Setup Firebase service account
30+
run: |
31+
echo '${{ secrets.FIREBASE_SERVICE_ACCOUNT_STAGING }}' > /tmp/gcp-key.json
32+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
33+
- run: |
34+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
35+
cd functions && pnpm install && pnpm deploy:config:staging
3036
- name: Deploy to staging
3137
if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' # This conditional will skip the step for Dependabot PRs
32-
run: pnpm deploy:staging --token ${{ secrets.FIREBASE_TOKEN }}
38+
run: |
39+
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp-key.json
40+
pnpm deploy:staging
3341
- name: Upload artifacts # Find artifacts under actions/jobs
3442
uses: actions/upload-artifact@v4
3543
with:

0 commit comments

Comments
 (0)