firebase-ios-sdk/.github/workflows/auth.yml

name: auth

permissions:
  contents: read

on:
  workflow_dispatch:
  pull_request:
    paths:
    - 'FirebaseAuth**'
    - 'FirebaseAuth/Interop/*.h'
    - '.github/workflows/auth.yml'
    - '.github/workflows/common.yml'
    - '.github/workflows/common_cocoapods.yml'
    - '.github/workflows/common_catalyst.yml'
    - '.github/workflows/common_quickstart.yml'
    - '.github/workflows/common_cocoapods_cron.yml'
    - 'scripts/gha-encrypted/AuthSample/SwiftApplication.plist.gpg'
    - 'Gemfile*'
  schedule:
    # Run every day at 2am (PDT) / 5am (EDT) - cron uses UTC times
    - cron:  '0 9 * * *'

env:
  FIREBASE_CI: true

concurrency:
    group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
    cancel-in-progress: true

jobs:
  # spm:
  #   uses: ./.github/workflows/common.yml
  #   with:
  #     target: AuthUnit
  #     buildonly_platforms: macOS

  # catalyst:
  #   uses: ./.github/workflows/common_catalyst.yml
  #   with:
  #     product: FirebaseAuth
  #     target: FirebaseAuth-Unit-unit
  #     buildonly: true

  # pod_lib_lint:
  #   strategy:
  #     matrix:
  #       product: [FirebaseAuthInterop, FirebaseAuth]
  #   uses: ./.github/workflows/common_cocoapods.yml
  #   with:
  #     product: ${{  matrix.product }}
  #     buildonly_platforms: macOS

  # integration-tests:
  #   # Don't run on private repo unless it is a PR.
  #   if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'
  #   needs: spm
  #   strategy:
  #     matrix:
  #       scheme: [ObjCApiTests, SwiftApiTests, AuthenticationExampleUITests]
  #   env:
  #     plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
  #     FIREBASECI_USE_LATEST_GOOGLEAPPMEASUREMENT: 1
  #   runs-on: macos-15
  #   steps:
  #   - uses: actions/checkout@v4
  #   - uses: actions/cache/restore@v4
  #     with:
  #       path: .build
  #       key: ${{ needs.spm.outputs.cache_key }}
  #   - name: Install Secrets
  #     run: |
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthCredentials.h.gpg \
  #         FirebaseAuth/Tests/SampleSwift/ObjCApiTests/AuthCredentials.h "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/SwiftApplication.plist.gpg \
  #         FirebaseAuth/Tests/SampleSwift/AuthenticationExample/SwiftApplication.plist "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/AuthCredentials.h.gpg \
  #         FirebaseAuth/Tests/SampleSwift/AuthCredentials.h "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/GoogleService-Info.plist.gpg \
  #         FirebaseAuth/Tests/SampleSwift/GoogleService-Info.plist "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/GoogleService-Info_multi.plist.gpg \
  #         FirebaseAuth/Tests/SampleSwift/GoogleService-Info_multi.plist "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/Sample.entitlements.gpg \
  #         FirebaseAuth/Tests/SampleSwift/Sample.entitlements "$plist_secret"
  #       scripts/decrypt_gha_secret.sh scripts/gha-encrypted/AuthSample/Credentials.swift.gpg \
  #         FirebaseAuth/Tests/SampleSwift/SwiftApiTests/Credentials.swift "$plist_secret"
  #   - name: Xcode
  #     run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
  #   - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
  #     with:
  #       timeout_minutes: 15
  #       max_attempts: 3
  #       retry_wait_seconds: 120
  #       command: ([ -z $plist_secret ] || scripts/build.sh Auth iOS ${{ matrix.scheme }})

  quickstart:
    uses: ./.github/workflows/common_quickstart.yml
    with:
      product: Authentication
      setup_command: scripts/setup_quickstart_spm.sh authentication
      plist_src_path: scripts/gha-encrypted/qs-authentication.plist.gpg
      plist_dst_path: quickstart-ios/authentication/GoogleService-Info.plist
      run_tests: false
    secrets:
      plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}

  # TODO(@sunmou99): currently have issue with this job, will re-enable it once the issue resolved.
  # quickstart-ftl-cron-only:
  #   # Don't run on private repo.
  #   if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'

  #   env:
  #     plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
  #   runs-on: macos-14
  #   steps:
  #   - uses: actions/checkout@v4
  #   - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
  #   - uses: actions/setup-python@v5
  #     with:
  #      python-version: '3.11'
  #   - name: Setup quickstart
  #     run: scripts/setup_quickstart.sh authentication
  #   - name: Install Secret GoogleService-Info.plist
  #     run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-authentication.plist.gpg \
  #         quickstart-ios/authentication/GoogleService-Info.plist "$plist_secret"
  #   - name: Build swift quickstart
  #     run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart_ftl.sh Authentication)
  #   - id: ftl_test
  #     uses: FirebaseExtended/github-actions/firebase-test-lab@v1.4
  #     with:
  #       credentials_json: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_CREDENTIALS }}
  #       testapp_dir: quickstart-ios/build-for-testing
  #       test_type: "xctest"

  # auth-cron-only:
  #   needs: pod_lib_lint
  #   uses: ./.github/workflows/common_cocoapods_cron.yml
  #   with:
  #     product: FirebaseAuth
  #     platforms: '[ "ios", "tvos --skip-tests", "macos --skip-tests", "watchos --skip-tests" ]'
  #     flags: '[ "--use-static-frameworks" ]'
  #     setup_command: scripts/configure_test_keychain.sh
  #   secrets:
  #     plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}