Use shared github actions

Author: louischan-oursky

.github/workflows/ci.yaml

@@ -107,59 +107,22 @@ jobs:
     - run: make example-flutter-test
     - run: make example-flutter-analyze
     - run: make example-dart-format
-    - name: Prepare certificate and provisioning profile
-      env:
-        IOS_CERTIFICATE_PASSWORD: ${{ secrets.IOS_CERTIFICATE_PASSWORD }}
-        IOS_CERTIFICATE_BASE64: ${{ secrets.IOS_CERTIFICATE_BASE64 }}
-        IOS_PROVISIONING_PROFILE_BASE64: ${{ secrets.IOS_PROVISIONING_PROFILE_BASE64 }}
-        IOS_KEYCHAIN_PASSWORD: ${{ secrets.IOS_KEYCHAIN_PASSWORD }}
-      run: |
-        CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
-        PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision
-        KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
-
-        # import certificate and provisioning profile from secrets
-        echo -n "$IOS_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH
-
-        echo -n "$IOS_PROVISIONING_PROFILE_BASE64" | base64 --decode -o $PP_PATH
-
-        # create temporary keychain
-        security create-keychain -p "$IOS_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-        security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
-        security unlock-keychain -p "$IOS_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-
-        # import certificate to keychain
-        security import $CERTIFICATE_PATH -P "$IOS_CERTIFICATE_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
-        security set-key-partition-list -S apple-tool:,apple: -k "$IOS_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-        security list-keychain -d user -s $KEYCHAIN_PATH
-
-        # apply provisioning profile
-        mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
-        cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles
-    - name: Install App Store Connect API key
-      env:
-        IOS_API_KEY_BASE64: ${{ secrets.IOS_API_KEY_BASE64 }}
-        IOS_API_KEY_ID: ${{ secrets.IOS_API_KEY_ID }}
-      run: |
-        API_KEY_PATH=$RUNNER_TEMP/AuthKey_${IOS_API_KEY_ID}.p8
-        echo -n "$IOS_API_KEY_BASE64" | base64 --decode -o $API_KEY_PATH
-    - name: Create fastlane api key json
-      env:
-        API_ISSUER: ${{ secrets.IOS_API_KEY_ISSUER }}
-        API_KEY: ${{ secrets.IOS_API_KEY_ID }}
-      run: |
-        export API_KEY_PATH=$RUNNER_TEMP/AuthKey_${API_KEY}.p8
-        make fastlane-api-key-json
+    - uses: authgear/gh-actions-install-apple-certificate-and-provisioning-profile@v1
+      with:
+        certificate_base64: ${{ secrets.IOS_CERTIFICATE_BASE64 }}
+        certificate_password: ${{ secrets.IOS_CERTIFICATE_PASSWORD }}
+        provisioning_profile_base64: ${{ secrets.IOS_PROVISIONING_PROFILE_BASE64 }}
+    - uses: authgear/gh-actions-create-fastlane-api-key-json-file@v1
+      with:
+        api_key_id: ${{ secrets.IOS_API_KEY_ID }}
+        api_key_issuer: ${{ secrets.IOS_API_KEY_ISSUER }}
+        api_key_base64: ${{ secrets.IOS_API_KEY_BASE64 }}
+        output_path: ./build/fastlane-api-key.json
     - run: make example-pod-install
     - run: make example-build-ios-app
     - name: Upload to TestFlight
       if: ${{ github.ref == 'refs/heads/main' }}
       run: make example-upload-ios-app
-    - name: Clean up keychain and provisioning profile
-      if: ${{ always() }}
-      run: |
-        security delete-keychain $RUNNER_TEMP/app-signing.keychain-db
-        rm ~/Library/MobileDevice/Provisioning\ Profiles/build_pp.mobileprovision
 
   deploy-android:
     runs-on: macos-14

Makefile

@@ -1,16 +1,3 @@
-API_ISSUER ?= "invalid"
-API_KEY ?= "invalid"
-API_KEY_PATH ?= ./AuthKey_invalid.p8
-
-.PHONY: fastlane-api-key-json
-fastlane-api-key-json:
-	mkdir -p ./build
-	jq --slurp --raw-input > ./build/fastlane-api-key.json \
-		--arg key_id $(API_KEY) \
-		--arg issuer_id $(API_ISSUER) \
-		'{key_id: $$key_id, issuer_id: $$issuer_id, key: .}' \
-		$(API_KEY_PATH)
-
 .PHONY: example-flutter-pub-get
 example-flutter-pub-get:
 	cd ./example; flutter pub get