Build a Flutter macOS project with TestFlight deployment

[bvoq]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Flutter (Dart)

Steps to reproduce

Hello, first thanks for creating this cool tool called codemagic!

Our problem is the following.
Take any Flutter project and try to publish it to the mac store.

 scripts:
      - name: Get Flutter Dependencies for jplus_pilot
        working_directory: $WORKING_DIRECTORY
        script: flutter pub get
      - name: Set up keychain
        script: keychain initialize
      - name: Setup Mac Provisioning Profile from Environmental Variables
        script: |
          PROFILES_HOME="$HOME/Library/MobileDevice/Provisioning Profiles"
          mkdir -p "$PROFILES_HOME"
          PROFILE_PATH="$(mktemp "$PROFILES_HOME"/$(uuidgen).provisionprofile)"
          echo $MAC_APP_STORE_PROVISIONING_PROFILE | base64 --decode > "$PROFILE_PATH"
          echo "the name of the profile can be read from the name argument of: security cms -D -i $PROFILE_PATH"
          MAC_APP_STORE_PROVISIONING_PROFILE_NAME="juice mac app store profile"

      - name: Setup Mac Certificate Keys from Environmental Variables
        script: |  
          echo $APP_STORE_DISTRIBUTION_CERTIFICATE | base64 --decode > /tmp/app_store_distribution_certificate.p12
          keychain add-certificates --certificate /tmp/app_store_distribution_certificate.p12
          APP_STORE_DISTRIBUTION_CERTIFICATE_NAME=$(keychain list-certificates \
            | jq '.[]
            | select(.common_name
            | contains("a"))
            | .common_name' \
            | xargs)
          echo "app distribution cert name: $APP_STORE_DISTRIBUTION_CERTIFICATE_NAME"
          echo $MAC_APP_DISTRIBUTION_CERTIFICATE  | base64 --decode > /tmp/mac_app_distribution_certificate.p12
          keychain add-certificates --certificate /tmp/mac_app_distribution_certificate.p12
          MAC_APP_DISTRIBUTION_CERTIFICATE_NAME=$(keychain list-certificates \
            | jq '.[]
            | select(.common_name
            | contains("Mac Developer Application"))
            | .common_name' \
            | xargs)
          echo "mac app distribution cert name: $MAC_APP_DISTRIBUTION_CERTIFICATE_NAME"

          echo $MAC_INSTALLER_DISTRIBUTION_CERTIFICATE | base64 --decode > /tmp/mac_installer_distribution_certificate.p12
          keychain add-certificates --certificate /tmp/mac_installer_distribution_certificate.p12
          MAC_INSTALLER_DISTRIBUTION_CERTIFICATE_NAME=$(keychain list-certificates \
            | jq '.[]
            | select(.common_name
            | contains("Mac Developer Installer"))
            | .common_name' \
            | xargs)
          echo "mac installer distribution cert name: $MAC_INSTALLER_DISTRIBUTION_CERTIFICATE_NAME"

      # https://docs.codemagic.io/yaml-code-signing/signing-macos/
      - name: Flutter Build MacOS Stage App
        working_directory: $WORKING_DIRECTORY
        script: |
          set -e
          INCREMENTED_BUILD_NUMBER=$(($PROJECT_BUILD_NUMBER + 10000))
          flutter build macos --build-name=2 --build-number=$INCREMENTED_BUILD_NUMBER --release --flavor stage -t lib/main_stage.dart

      - name: Create MacOS .pkg and sign it using installer certificate
        working_directory: $WORKING_DIRECTORY
        script: | 
          set -x
          ## Command to find the path to your generated app, may be different
          APP_NAME=$(find $(pwd) -name "*.app")  
          echo "Found $APP_NAME"
          cd $(dirname "$APP_NAME")
          
          # Create and unsigned package
          PACKAGE_NAME=$(basename "$APP_NAME" .app).pkg

          xcrun productbuild --component "$(pwd)/$(basename "$APP_NAME")" /Applications/ unsigned.pkg

          ## Find the installer certificate common name in keychain
          INSTALLER_CERT_NAME=$(keychain list-certificates \
            | jq '.[]
            | select(.common_name
            | contains("Mac Developer Installer"))
            | .common_name' \
            | xargs)

          ## Sign the package
          xcrun productsign --sign "$INSTALLER_CERT_NAME" unsigned.pkg "$PACKAGE_NAME"
          rm -f unsigned.pkg
    artifacts:
      - $WORKING_DIRECTORY/**/*.pkg

    integrations:
      app_store_connect: juice_pipeline_appstore_connect_api

    publishing:
      app_store_connect:
        auth: integration
        submit_to_testflight: true

This works, however we get the following issue:

This is likely, because we did not configure the provisioning profile. I was struggling to get the provisioning profile to work.
Your macOS signing guide gives no information about this.

I have made two attempts to solve this so far.
Manually creating the app, signing it, packaging it then uploading it (build-id: 64b78f3d10046192d7fd0aae)
Manually creating the pkg directly from an archive (build-id: 64b7976910046192d7fd2542)

Expected results

For it to upload on Testflight as well.

Actual results

Testflight is blocked.

Build id (optional)

64b79e2010046192d7fd36a5

[icarusdust]

Hi @bvoq, first and foremost, please note that your team is on a paid plan which means that you have access to the private chat widget in the UI, please use that widget next time for quicker responses.
As for the issue, it looks like an issue related to how you are setting up code signing for your macOS apps. Some users also reported the same here. Though, I can suggest you a couple of things to try:

1. I do not see that you are setting up code signing settings with the given provisioning profile
2. You are setting your profile manually, try letting Codemagic configure it through the automatic code signing method as shown here in the sample project. I believe it is a Flutter macOS app, not using Electron correct ?

[icarusdust]

This discussion is being closed due to no activity in the last 14 days. You can reopen the discussion at any time if needed.