505 lines
26 KiB
JavaScript
505 lines
26 KiB
JavaScript
|
"use strict";
|
||
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
||
|
|
const bluebird_lst_1 = require("bluebird-lst");
|
||
|
|
const builder_util_1 = require("builder-util");
|
||
|
|
const osx_sign_1 = require("@electron/osx-sign");
|
||
|
|
const promises_1 = require("fs/promises");
|
||
|
|
const lazy_val_1 = require("lazy-val");
|
||
|
|
const path = require("path");
|
||
|
|
const fs_1 = require("builder-util/out/fs");
|
||
|
|
const promise_1 = require("builder-util/out/promise");
|
||
|
|
const appInfo_1 = require("./appInfo");
|
||
|
|
const macCodeSign_1 = require("./codeSign/macCodeSign");
|
||
|
|
const core_1 = require("./core");
|
||
|
|
const platformPackager_1 = require("./platformPackager");
|
||
|
|
const ArchiveTarget_1 = require("./targets/ArchiveTarget");
|
||
|
|
const pkg_1 = require("./targets/pkg");
|
||
|
|
const targetFactory_1 = require("./targets/targetFactory");
|
||
|
|
const macosVersion_1 = require("./util/macosVersion");
|
||
|
|
const pathManager_1 = require("./util/pathManager");
|
||
|
|
const fs = require("fs/promises");
|
||
|
|
const notarize_1 = require("@electron/notarize");
|
||
|
|
class MacPackager extends platformPackager_1.PlatformPackager {
|
||
|
|
constructor(info) {
|
||
|
|
super(info, core_1.Platform.MAC);
|
||
|
|
this.codeSigningInfo = new lazy_val_1.Lazy(() => {
|
||
|
|
const cscLink = this.getCscLink();
|
||
|
|
if (cscLink == null || process.platform !== "darwin") {
|
||
|
|
return Promise.resolve({ keychainFile: process.env.CSC_KEYCHAIN || null });
|
||
|
|
}
|
||
|
|
return (0, macCodeSign_1.createKeychain)({
|
||
|
|
tmpDir: this.info.tempDirManager,
|
||
|
|
cscLink,
|
||
|
|
cscKeyPassword: this.getCscPassword(),
|
||
|
|
cscILink: (0, platformPackager_1.chooseNotNull)(this.platformSpecificBuildOptions.cscInstallerLink, process.env.CSC_INSTALLER_LINK),
|
||
|
|
cscIKeyPassword: (0, platformPackager_1.chooseNotNull)(this.platformSpecificBuildOptions.cscInstallerKeyPassword, process.env.CSC_INSTALLER_KEY_PASSWORD),
|
||
|
|
currentDir: this.projectDir,
|
||
|
|
}).then(result => {
|
||
|
|
const keychainFile = result.keychainFile;
|
||
|
|
if (keychainFile != null) {
|
||
|
|
this.info.disposeOnBuildFinish(() => (0, macCodeSign_1.removeKeychain)(keychainFile));
|
||
|
|
}
|
||
|
|
return result;
|
||
|
|
});
|
||
|
|
});
|
||
|
|
this._iconPath = new lazy_val_1.Lazy(() => this.getOrConvertIcon("icns"));
|
||
|
|
}
|
||
|
|
get defaultTarget() {
|
||
|
|
return this.info.framework.macOsDefaultTargets;
|
||
|
|
}
|
||
|
|
// eslint-disable-next-line @typescript-eslint/no-unused-vars
|
||
|
|
prepareAppInfo(appInfo) {
|
||
|
|
// codesign requires the filename to be normalized to the NFD form
|
||
|
|
return new appInfo_1.AppInfo(this.info, this.platformSpecificBuildOptions.bundleVersion, this.platformSpecificBuildOptions, true);
|
||
|
|
}
|
||
|
|
async getIconPath() {
|
||
|
|
return this._iconPath.value;
|
||
|
|
}
|
||
|
|
createTargets(targets, mapper) {
|
||
|
|
for (const name of targets) {
|
||
|
|
switch (name) {
|
||
|
|
case core_1.DIR_TARGET:
|
||
|
|
break;
|
||
|
|
case "dmg": {
|
||
|
|
// eslint-disable-next-line @typescript-eslint/no-var-requires
|
||
|
|
const { DmgTarget } = require("dmg-builder");
|
||
|
|
mapper(name, outDir => new DmgTarget(this, outDir));
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case "zip":
|
||
|
|
// https://github.com/electron-userland/electron-builder/issues/2313
|
||
|
|
mapper(name, outDir => new ArchiveTarget_1.ArchiveTarget(name, outDir, this, true));
|
||
|
|
break;
|
||
|
|
case "pkg":
|
||
|
|
mapper(name, outDir => new pkg_1.PkgTarget(this, outDir));
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
mapper(name, outDir => (name === "mas" || name === "mas-dev" ? new targetFactory_1.NoOpTarget(name) : (0, targetFactory_1.createCommonTarget)(name, outDir, this)));
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
async doPack(outDir, appOutDir, platformName, arch, platformSpecificBuildOptions, targets) {
|
||
|
|
var _a;
|
||
|
|
switch (arch) {
|
||
|
|
default: {
|
||
|
|
return super.doPack(outDir, appOutDir, platformName, arch, platformSpecificBuildOptions, targets);
|
||
|
|
}
|
||
|
|
case builder_util_1.Arch.universal: {
|
||
|
|
const outDirName = (arch) => `${appOutDir}-${builder_util_1.Arch[arch]}-temp`;
|
||
|
|
const x64Arch = builder_util_1.Arch.x64;
|
||
|
|
const x64AppOutDir = outDirName(x64Arch);
|
||
|
|
await super.doPack(outDir, x64AppOutDir, platformName, x64Arch, platformSpecificBuildOptions, targets, false, true);
|
||
|
|
const arm64Arch = builder_util_1.Arch.arm64;
|
||
|
|
const arm64AppOutPath = outDirName(arm64Arch);
|
||
|
|
await super.doPack(outDir, arm64AppOutPath, platformName, arm64Arch, platformSpecificBuildOptions, targets, false, true);
|
||
|
|
const framework = this.info.framework;
|
||
|
|
builder_util_1.log.info({
|
||
|
|
platform: platformName,
|
||
|
|
arch: builder_util_1.Arch[arch],
|
||
|
|
[`${framework.name}`]: framework.version,
|
||
|
|
appOutDir: builder_util_1.log.filePath(appOutDir),
|
||
|
|
}, `packaging`);
|
||
|
|
const appFile = `${this.appInfo.productFilename}.app`;
|
||
|
|
const { makeUniversalApp } = require("@electron/universal");
|
||
|
|
await makeUniversalApp({
|
||
|
|
x64AppPath: path.join(x64AppOutDir, appFile),
|
||
|
|
arm64AppPath: path.join(arm64AppOutPath, appFile),
|
||
|
|
outAppPath: path.join(appOutDir, appFile),
|
||
|
|
force: true,
|
||
|
|
mergeASARs: (_a = platformSpecificBuildOptions.mergeASARs) !== null && _a !== void 0 ? _a : true,
|
||
|
|
singleArchFiles: platformSpecificBuildOptions.singleArchFiles,
|
||
|
|
x64ArchFiles: platformSpecificBuildOptions.x64ArchFiles,
|
||
|
|
});
|
||
|
|
await fs.rm(x64AppOutDir, { recursive: true, force: true });
|
||
|
|
await fs.rm(arm64AppOutPath, { recursive: true, force: true });
|
||
|
|
// Give users a final opportunity to perform things on the combined universal package before signing
|
||
|
|
const packContext = {
|
||
|
|
appOutDir,
|
||
|
|
outDir,
|
||
|
|
arch,
|
||
|
|
targets,
|
||
|
|
packager: this,
|
||
|
|
electronPlatformName: platformName,
|
||
|
|
};
|
||
|
|
await this.info.afterPack(packContext);
|
||
|
|
await this.doSignAfterPack(outDir, appOutDir, platformName, arch, platformSpecificBuildOptions, targets);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
async pack(outDir, arch, targets, taskManager) {
|
||
|
|
const hasMas = targets.length !== 0 && targets.some(it => it.name === "mas" || it.name === "mas-dev");
|
||
|
|
const prepackaged = this.packagerOptions.prepackaged;
|
||
|
|
for (const target of targets) {
|
||
|
|
const targetName = target.name;
|
||
|
|
if (!(targetName === "mas" || targetName === "mas-dev")) {
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
const masBuildOptions = (0, builder_util_1.deepAssign)({}, this.platformSpecificBuildOptions, this.config.mas);
|
||
|
|
if (targetName === "mas-dev") {
|
||
|
|
(0, builder_util_1.deepAssign)(masBuildOptions, this.config.masDev, {
|
||
|
|
type: "development",
|
||
|
|
});
|
||
|
|
}
|
||
|
|
const targetOutDir = path.join(outDir, `${targetName}${(0, builder_util_1.getArchSuffix)(arch, this.platformSpecificBuildOptions.defaultArch)}`);
|
||
|
|
if (prepackaged == null) {
|
||
|
|
await this.doPack(outDir, targetOutDir, "mas", arch, masBuildOptions, [target]);
|
||
|
|
await this.sign(path.join(targetOutDir, `${this.appInfo.productFilename}.app`), targetOutDir, masBuildOptions, arch);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
await this.sign(prepackaged, targetOutDir, masBuildOptions, arch);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!hasMas || targets.length > 1) {
|
||
|
|
const appPath = prepackaged == null ? path.join(this.computeAppOutDir(outDir, arch), `${this.appInfo.productFilename}.app`) : prepackaged;
|
||
|
|
if (prepackaged == null) {
|
||
|
|
await this.doPack(outDir, path.dirname(appPath), this.platform.nodeName, arch, this.platformSpecificBuildOptions, targets);
|
||
|
|
}
|
||
|
|
this.packageInDistributableFormat(appPath, arch, targets, taskManager);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
async sign(appPath, outDir, masOptions, arch) {
|
||
|
|
if (!(0, macCodeSign_1.isSignAllowed)()) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
const isMas = masOptions != null;
|
||
|
|
const options = masOptions == null ? this.platformSpecificBuildOptions : masOptions;
|
||
|
|
const qualifier = options.identity;
|
||
|
|
if (qualifier === null) {
|
||
|
|
if (this.forceCodeSigning) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError("identity explicitly is set to null, but forceCodeSigning is set to true");
|
||
|
|
}
|
||
|
|
builder_util_1.log.info({ reason: "identity explicitly is set to null" }, "skipped macOS code signing");
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
const keychainFile = (await this.codeSigningInfo.value).keychainFile;
|
||
|
|
const explicitType = options.type;
|
||
|
|
const type = explicitType || "distribution";
|
||
|
|
const isDevelopment = type === "development";
|
||
|
|
const certificateTypes = getCertificateTypes(isMas, isDevelopment);
|
||
|
|
let identity = null;
|
||
|
|
for (const certificateType of certificateTypes) {
|
||
|
|
identity = await (0, macCodeSign_1.findIdentity)(certificateType, qualifier, keychainFile);
|
||
|
|
if (identity != null) {
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (identity == null) {
|
||
|
|
if (!isMas && !isDevelopment && explicitType !== "distribution") {
|
||
|
|
identity = await (0, macCodeSign_1.findIdentity)("Mac Developer", qualifier, keychainFile);
|
||
|
|
if (identity != null) {
|
||
|
|
builder_util_1.log.warn("Mac Developer is used to sign app — it is only for development and testing, not for production");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!options.sign && identity == null) {
|
||
|
|
await (0, macCodeSign_1.reportError)(isMas, certificateTypes, qualifier, keychainFile, this.forceCodeSigning);
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!(0, macosVersion_1.isMacOsHighSierra)()) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError("macOS High Sierra 10.13.6 is required to sign");
|
||
|
|
}
|
||
|
|
let filter = options.signIgnore;
|
||
|
|
if (Array.isArray(filter)) {
|
||
|
|
if (filter.length == 0) {
|
||
|
|
filter = null;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else if (filter != null) {
|
||
|
|
filter = filter.length === 0 ? null : [filter];
|
||
|
|
}
|
||
|
|
const filterRe = filter == null ? null : filter.map(it => new RegExp(it));
|
||
|
|
let binaries = options.binaries || undefined;
|
||
|
|
if (binaries) {
|
||
|
|
// Accept absolute paths for external binaries, else resolve relative paths from the artifact's app Contents path.
|
||
|
|
binaries = await Promise.all(binaries.map(async (destination) => {
|
||
|
|
if (await (0, fs_1.statOrNull)(destination)) {
|
||
|
|
return destination;
|
||
|
|
}
|
||
|
|
return path.resolve(appPath, destination);
|
||
|
|
}));
|
||
|
|
builder_util_1.log.info({ binaries }, "signing additional user-defined binaries");
|
||
|
|
}
|
||
|
|
const customSignOptions = (isMas ? masOptions : this.platformSpecificBuildOptions) || this.platformSpecificBuildOptions;
|
||
|
|
const signOptions = {
|
||
|
|
identityValidation: false,
|
||
|
|
// https://github.com/electron-userland/electron-builder/issues/1699
|
||
|
|
// kext are signed by the chipset manufacturers. You need a special certificate (only available on request) from Apple to be able to sign kext.
|
||
|
|
ignore: (file) => {
|
||
|
|
if (filterRe != null) {
|
||
|
|
for (const regExp of filterRe) {
|
||
|
|
if (regExp.test(file)) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return (file.endsWith(".kext") ||
|
||
|
|
file.startsWith("/Contents/PlugIns", appPath.length) ||
|
||
|
|
file.includes("/node_modules/puppeteer/.local-chromium") ||
|
||
|
|
file.includes("/node_modules/playwright-firefox/.local-browsers") ||
|
||
|
|
file.includes("/node_modules/playwright/.local-browsers"));
|
||
|
|
/* Those are browser automating modules, browser (chromium, nightly) cannot be signed
|
||
|
|
https://github.com/electron-userland/electron-builder/issues/2010
|
||
|
|
https://github.com/electron-userland/electron-builder/issues/5383
|
||
|
|
*/
|
||
|
|
},
|
||
|
|
identity: identity ? identity.hash || identity.name : undefined,
|
||
|
|
type,
|
||
|
|
platform: isMas ? "mas" : "darwin",
|
||
|
|
version: this.config.electronVersion || undefined,
|
||
|
|
app: appPath,
|
||
|
|
keychain: keychainFile || undefined,
|
||
|
|
binaries,
|
||
|
|
// https://github.com/electron-userland/electron-builder/issues/1480
|
||
|
|
strictVerify: options.strictVerify,
|
||
|
|
preAutoEntitlements: options.preAutoEntitlements,
|
||
|
|
optionsForFile: await this.getOptionsForFile(appPath, isMas, customSignOptions),
|
||
|
|
provisioningProfile: customSignOptions.provisioningProfile || undefined,
|
||
|
|
};
|
||
|
|
await this.doSign(signOptions, customSignOptions);
|
||
|
|
// https://github.com/electron-userland/electron-builder/issues/1196#issuecomment-312310209
|
||
|
|
if (masOptions != null && !isDevelopment) {
|
||
|
|
const certType = isDevelopment ? "Mac Developer" : "3rd Party Mac Developer Installer";
|
||
|
|
const masInstallerIdentity = await (0, macCodeSign_1.findIdentity)(certType, masOptions.identity, keychainFile);
|
||
|
|
if (masInstallerIdentity == null) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError(`Cannot find valid "${certType}" identity to sign MAS installer, please see https://electron.build/code-signing`);
|
||
|
|
}
|
||
|
|
// mas uploaded to AppStore, so, use "-" instead of space for name
|
||
|
|
const artifactName = this.expandArtifactNamePattern(masOptions, "pkg", arch);
|
||
|
|
const artifactPath = path.join(outDir, artifactName);
|
||
|
|
await this.doFlat(appPath, artifactPath, masInstallerIdentity, keychainFile);
|
||
|
|
await this.dispatchArtifactCreated(artifactPath, null, builder_util_1.Arch.x64, this.computeSafeArtifactName(artifactName, "pkg", arch, true, this.platformSpecificBuildOptions.defaultArch));
|
||
|
|
}
|
||
|
|
if (!isMas) {
|
||
|
|
await this.notarizeIfProvided(appPath, options);
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
async getOptionsForFile(appPath, isMas, customSignOptions) {
|
||
|
|
const resourceList = await this.resourceList;
|
||
|
|
const entitlementsSuffix = isMas ? "mas" : "mac";
|
||
|
|
const getEntitlements = (filePath) => {
|
||
|
|
// check if root app, then use main entitlements
|
||
|
|
if (filePath === appPath) {
|
||
|
|
if (customSignOptions.entitlements) {
|
||
|
|
return customSignOptions.entitlements;
|
||
|
|
}
|
||
|
|
const p = `entitlements.${entitlementsSuffix}.plist`;
|
||
|
|
if (resourceList.includes(p)) {
|
||
|
|
return path.join(this.info.buildResourcesDir, p);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
return (0, pathManager_1.getTemplatePath)("entitlements.mac.plist");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
// It's a login helper...
|
||
|
|
if (filePath.includes("Library/LoginItems")) {
|
||
|
|
return customSignOptions.entitlementsLoginHelper;
|
||
|
|
}
|
||
|
|
// Only remaining option is that it's inherited entitlements
|
||
|
|
if (customSignOptions.entitlementsInherit) {
|
||
|
|
return customSignOptions.entitlementsInherit;
|
||
|
|
}
|
||
|
|
const p = `entitlements.${entitlementsSuffix}.inherit.plist`;
|
||
|
|
if (resourceList.includes(p)) {
|
||
|
|
return path.join(this.info.buildResourcesDir, p);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
return (0, pathManager_1.getTemplatePath)("entitlements.mac.plist");
|
||
|
|
}
|
||
|
|
};
|
||
|
|
const requirements = isMas || this.platformSpecificBuildOptions.requirements == null ? undefined : await this.getResource(this.platformSpecificBuildOptions.requirements);
|
||
|
|
// harden by default for mac builds. Only harden mas builds if explicitly true (backward compatibility)
|
||
|
|
const hardenedRuntime = isMas ? customSignOptions.hardenedRuntime === true : customSignOptions.hardenedRuntime !== false;
|
||
|
|
const optionsForFile = filePath => {
|
||
|
|
const entitlements = getEntitlements(filePath);
|
||
|
|
const args = {
|
||
|
|
entitlements: entitlements || undefined,
|
||
|
|
hardenedRuntime: hardenedRuntime !== null && hardenedRuntime !== void 0 ? hardenedRuntime : undefined,
|
||
|
|
timestamp: customSignOptions.timestamp || undefined,
|
||
|
|
requirements: requirements || undefined,
|
||
|
|
};
|
||
|
|
builder_util_1.log.debug({ file: builder_util_1.log.filePath(filePath), ...args }, "selecting signing options");
|
||
|
|
return args;
|
||
|
|
};
|
||
|
|
return optionsForFile;
|
||
|
|
}
|
||
|
|
//noinspection JSMethodCanBeStatic
|
||
|
|
async doSign(opts, customSignOptions) {
|
||
|
|
const customSign = await (0, platformPackager_1.resolveFunction)(this.appInfo.type, customSignOptions.sign, "sign");
|
||
|
|
const { app, platform, type, identity, provisioningProfile } = opts;
|
||
|
|
builder_util_1.log.info({
|
||
|
|
file: builder_util_1.log.filePath(app),
|
||
|
|
platform,
|
||
|
|
type,
|
||
|
|
identity: identity || "none",
|
||
|
|
provisioningProfile: provisioningProfile || "none",
|
||
|
|
}, customSign ? "executing custom sign" : "signing");
|
||
|
|
return customSign ? Promise.resolve(customSign(opts, this)) : (0, osx_sign_1.signAsync)(opts);
|
||
|
|
}
|
||
|
|
//noinspection JSMethodCanBeStatic
|
||
|
|
async doFlat(appPath, outFile, identity, keychain) {
|
||
|
|
// productbuild doesn't created directory for out file
|
||
|
|
await (0, promises_1.mkdir)(path.dirname(outFile), { recursive: true });
|
||
|
|
const args = (0, pkg_1.prepareProductBuildArgs)(identity, keychain);
|
||
|
|
args.push("--component", appPath, "/Applications");
|
||
|
|
args.push(outFile);
|
||
|
|
return await (0, builder_util_1.exec)("productbuild", args);
|
||
|
|
}
|
||
|
|
getElectronSrcDir(dist) {
|
||
|
|
return path.resolve(this.projectDir, dist, this.info.framework.distMacOsAppName);
|
||
|
|
}
|
||
|
|
getElectronDestinationDir(appOutDir) {
|
||
|
|
return path.join(appOutDir, this.info.framework.distMacOsAppName);
|
||
|
|
}
|
||
|
|
// todo fileAssociations
|
||
|
|
async applyCommonInfo(appPlist, contentsPath) {
|
||
|
|
const appInfo = this.appInfo;
|
||
|
|
const appFilename = appInfo.productFilename;
|
||
|
|
// https://github.com/electron-userland/electron-builder/issues/1278
|
||
|
|
appPlist.CFBundleExecutable = appFilename.endsWith(" Helper") ? appFilename.substring(0, appFilename.length - " Helper".length) : appFilename;
|
||
|
|
const icon = await this.getIconPath();
|
||
|
|
if (icon != null) {
|
||
|
|
const oldIcon = appPlist.CFBundleIconFile;
|
||
|
|
const resourcesPath = path.join(contentsPath, "Resources");
|
||
|
|
if (oldIcon != null) {
|
||
|
|
await (0, fs_1.unlinkIfExists)(path.join(resourcesPath, oldIcon));
|
||
|
|
}
|
||
|
|
const iconFileName = "icon.icns";
|
||
|
|
appPlist.CFBundleIconFile = iconFileName;
|
||
|
|
await (0, fs_1.copyFile)(icon, path.join(resourcesPath, iconFileName));
|
||
|
|
}
|
||
|
|
appPlist.CFBundleName = appInfo.productName;
|
||
|
|
appPlist.CFBundleDisplayName = appInfo.productName;
|
||
|
|
const minimumSystemVersion = this.platformSpecificBuildOptions.minimumSystemVersion;
|
||
|
|
if (minimumSystemVersion != null) {
|
||
|
|
appPlist.LSMinimumSystemVersion = minimumSystemVersion;
|
||
|
|
}
|
||
|
|
appPlist.CFBundleShortVersionString = this.platformSpecificBuildOptions.bundleShortVersion || appInfo.version;
|
||
|
|
appPlist.CFBundleVersion = appInfo.buildVersion;
|
||
|
|
(0, builder_util_1.use)(this.platformSpecificBuildOptions.category || this.config.category, it => (appPlist.LSApplicationCategoryType = it));
|
||
|
|
appPlist.NSHumanReadableCopyright = appInfo.copyright;
|
||
|
|
if (this.platformSpecificBuildOptions.darkModeSupport) {
|
||
|
|
appPlist.NSRequiresAquaSystemAppearance = false;
|
||
|
|
}
|
||
|
|
const extendInfo = this.platformSpecificBuildOptions.extendInfo;
|
||
|
|
if (extendInfo != null) {
|
||
|
|
Object.assign(appPlist, extendInfo);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
async signApp(packContext, isAsar) {
|
||
|
|
const readDirectoryAndSign = async (sourceDirectory, directories, filter) => {
|
||
|
|
await bluebird_lst_1.default.map(directories, async (file) => {
|
||
|
|
if (filter(file)) {
|
||
|
|
await this.sign(path.join(sourceDirectory, file), null, null, null);
|
||
|
|
}
|
||
|
|
return null;
|
||
|
|
});
|
||
|
|
return true;
|
||
|
|
};
|
||
|
|
const appFileName = `${this.appInfo.productFilename}.app`;
|
||
|
|
await readDirectoryAndSign(packContext.appOutDir, await (0, promises_1.readdir)(packContext.appOutDir), file => file === appFileName);
|
||
|
|
if (!isAsar) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
const outResourcesDir = path.join(packContext.appOutDir, "resources", "app.asar.unpacked");
|
||
|
|
await readDirectoryAndSign(outResourcesDir, await (0, promise_1.orIfFileNotExist)((0, promises_1.readdir)(outResourcesDir), []), file => file.endsWith(".app"));
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
async notarizeIfProvided(appPath, buildOptions) {
|
||
|
|
const notarizeOptions = buildOptions.notarize;
|
||
|
|
if (notarizeOptions === false) {
|
||
|
|
builder_util_1.log.info({ reason: "`notarize` options were set explicitly `false`" }, "skipped macOS notarization");
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
const options = this.getNotarizeOptions(appPath);
|
||
|
|
if (!options) {
|
||
|
|
builder_util_1.log.warn({ reason: "`notarize` options were unable to be generated" }, "skipped macOS notarization");
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
await (0, notarize_1.notarize)(options);
|
||
|
|
builder_util_1.log.info(null, "notarization successful");
|
||
|
|
}
|
||
|
|
getNotarizeOptions(appPath) {
|
||
|
|
const appleId = process.env.APPLE_ID;
|
||
|
|
const appleIdPassword = process.env.APPLE_APP_SPECIFIC_PASSWORD;
|
||
|
|
// option 1: app specific password
|
||
|
|
if (appleId || appleIdPassword) {
|
||
|
|
if (!appleId) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError(`APPLE_ID env var needs to be set`);
|
||
|
|
}
|
||
|
|
if (!appleIdPassword) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError(`APPLE_APP_SPECIFIC_PASSWORD env var needs to be set`);
|
||
|
|
}
|
||
|
|
return this.generateNotarizeOptions(appPath, { appleId, appleIdPassword });
|
||
|
|
}
|
||
|
|
// option 2: API key
|
||
|
|
const appleApiKey = process.env.APPLE_API_KEY;
|
||
|
|
const appleApiKeyId = process.env.APPLE_API_KEY_ID;
|
||
|
|
const appleApiIssuer = process.env.APPLE_API_ISSUER;
|
||
|
|
if (appleApiKey || appleApiKeyId || appleApiIssuer) {
|
||
|
|
if (!appleApiKey || !appleApiKeyId || !appleApiIssuer) {
|
||
|
|
throw new builder_util_1.InvalidConfigurationError(`Env vars APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER need to be set`);
|
||
|
|
}
|
||
|
|
return this.generateNotarizeOptions(appPath, undefined, { appleApiKey, appleApiKeyId, appleApiIssuer });
|
||
|
|
}
|
||
|
|
// option 3: keychain
|
||
|
|
const keychain = process.env.APPLE_KEYCHAIN;
|
||
|
|
const keychainProfile = process.env.APPLE_KEYCHAIN_PROFILE;
|
||
|
|
if (keychainProfile) {
|
||
|
|
let args = { keychainProfile };
|
||
|
|
if (keychain) {
|
||
|
|
args = { ...args, keychain };
|
||
|
|
}
|
||
|
|
return this.generateNotarizeOptions(appPath, undefined, args);
|
||
|
|
}
|
||
|
|
// if no credentials provided, skip silently
|
||
|
|
return undefined;
|
||
|
|
}
|
||
|
|
generateNotarizeOptions(appPath, legacyLogin, notaryToolLogin) {
|
||
|
|
const options = this.platformSpecificBuildOptions.notarize;
|
||
|
|
if (typeof options === "boolean" && legacyLogin) {
|
||
|
|
const proj = {
|
||
|
|
appPath,
|
||
|
|
...legacyLogin,
|
||
|
|
appBundleId: this.appInfo.id,
|
||
|
|
};
|
||
|
|
return proj;
|
||
|
|
}
|
||
|
|
const teamId = options === null || options === void 0 ? void 0 : options.teamId;
|
||
|
|
if ((teamId || options === true) && (legacyLogin || notaryToolLogin)) {
|
||
|
|
const proj = {
|
||
|
|
appPath,
|
||
|
|
...(legacyLogin !== null && legacyLogin !== void 0 ? legacyLogin : notaryToolLogin),
|
||
|
|
teamId,
|
||
|
|
};
|
||
|
|
return { tool: "notarytool", ...proj };
|
||
|
|
}
|
||
|
|
if (legacyLogin) {
|
||
|
|
const { appBundleId, ascProvider } = options;
|
||
|
|
return {
|
||
|
|
appPath,
|
||
|
|
...legacyLogin,
|
||
|
|
appBundleId: appBundleId || this.appInfo.id,
|
||
|
|
ascProvider: ascProvider || undefined,
|
||
|
|
};
|
||
|
|
}
|
||
|
|
if (notaryToolLogin) {
|
||
|
|
return {
|
||
|
|
tool: "notarytool",
|
||
|
|
appPath,
|
||
|
|
...notaryToolLogin,
|
||
|
|
};
|
||
|
|
}
|
||
|
|
return undefined;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
exports.default = MacPackager;
|
||
|
|
function getCertificateTypes(isMas, isDevelopment) {
|
||
|
|
if (isDevelopment) {
|
||
|
|
return isMas ? ["Mac Developer", "Apple Development"] : ["Mac Developer", "Developer ID Application"];
|
||
|
|
}
|
||
|
|
return isMas ? ["Apple Distribution", "3rd Party Mac Developer Application"] : ["Developer ID Application"];
|
||
|
|
}
|
||
|
|
//# sourceMappingURL=macPackager.js.map
|