44eb76bed7
* refactor: implement custom ExpoImage wrapper for cache control Add ExpoImage component with automatic cacheKey/cachePath management and replace all expo-image imports across the app * refactor(ios): convert Gekidou to CocoaPods Migrate from Swift Package Manager to CocoaPods, add Keychain write operations, refactor notification handler to remove react-native-notifications headers, and upgrade Swift to 5.0 * npm audit * update fastlane * feat(ci): integrate Intune MAM for enterprise builds with strict OSS protection Add Intune submodule, CI actions, Fastlane configuration, developer scripts, pre-commit hooks, and validation workflows to enable internal MAM builds while protecting OSS repository * fix tests by mocking @mattermost/intune * feat: implement Intune MAM integration with comprehensive security enforcement Add IntuneManager, refactor SecurityManager/SessionManager for MAM policies, implement native OIDC auth flow, add biometric enforcement, conditional launch blocking, and file protection controls * fix alerts when no server database is present * Unify cache strategy * fix emit config changed after it was stored in the db * Handle Mid-Session Enrollment Detection * fix ADALLogOverrideDisabled missing in Fastfile * fix flow for initial enrollment * fix and add unit tests * enable Intune configuration for PR and beta builds, CLIENT_ID should be changed before actual release * Update intune submodule with addressed feedback * fix validate-intune-clean workflow * feat(intune): add comprehensive error handling and SAML+Entra support Add production-ready error handling for native Entra authentication with user-friendly i18n messages, comprehensive test coverage, and support for Entra login when server requires SAML. * update i18n * update intune submodule * update build-pr token * fix race condition between server auth and intune enrollment * fix CI workflow to build with intune * use deploy key for intune submodule * set the config directly in the submodule .git * debug injection * try setting GIT_SSH_COMMAND * remove action debug * fix server url input * match pod cache with intune hash * Fastfile and envs * have workflows check for intune/.git * have ci cache intune frameworks as well * update Fastlane to set no-cache to artifacts uploaded * fix s3 upload * fix pblist template * Attempt to remove the cache control for PR uploads to s3 * use hash from commit for S3 path * Implement crash-resilient selective wipe with automatic retry and add removeInternetPassword to Gekidou Keychain * Fix surface errors from intune login * fix postinstall scripts * use cacheKey for draft md images * remove unnecessary double await during test * Have isMinimumLicenseTier accept valid license sku tier as target * Add missing Auth error messages * remove the last period for intune errors in i18n * do not call unenroll with wipe on manual logout * Fix tests and Intune error messages * do not filter any SSO type regardless of which is used for Intune * fix 412 to not retry * fix tests, app logs sharing and share_extension avatar cache * apply setScreenCapturePolicy on license change Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * re-apply screen capture on enrollment Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * use userData from intunr login and prevent getMe Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * Check for Biometrics and Jailbreak as we used to --------- Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com>
60 lines
2.1 KiB
YAML
60 lines
2.1 KiB
YAML
# Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
||
# See LICENSE.txt for license information.
|
||
|
||
name: Setup Intune
|
||
description: Initialize Intune submodule and link module for internal builds with MAM features
|
||
|
||
inputs:
|
||
ssh-private-key:
|
||
description: 'SSH private key for Intune submodule repository access'
|
||
required: true
|
||
|
||
runs:
|
||
using: composite
|
||
steps:
|
||
- name: Configure SSH for Intune submodule
|
||
uses: ./.github/actions/setup-intune-ssh-key
|
||
with:
|
||
ssh-private-key: ${{ inputs.ssh-private-key }}
|
||
|
||
- name: Initialize Intune submodule
|
||
shell: bash
|
||
env:
|
||
GIT_SSH_COMMAND: ssh -i $HOME/.ssh/intune_submodule_ed25519 -o IdentitiesOnly=yes -o StrictHostKeyChecking=no
|
||
run: |
|
||
echo "::group::Initialize Intune submodule"
|
||
# Check if submodule is already initialized
|
||
if [ -e "libraries/@mattermost/intune/.git" ]; then
|
||
echo "ℹ️ Intune submodule already initialized, updating..."
|
||
git submodule update --remote libraries/@mattermost/intune
|
||
else
|
||
echo "📥 Initializing Intune submodule..."
|
||
git submodule update --init --recursive libraries/@mattermost/intune
|
||
fi
|
||
|
||
# Display submodule info
|
||
cd libraries/@mattermost/intune
|
||
echo "📦 Intune submodule initialized:"
|
||
echo " Branch: $(git rev-parse --abbrev-ref HEAD)"
|
||
echo " Commit: $(git rev-parse --short HEAD)"
|
||
echo " Remote: $(git remote get-url origin)"
|
||
cd ../..
|
||
|
||
echo "✅ Intune submodule ready"
|
||
echo "::endgroup::"
|
||
|
||
- name: Link Intune module to node_modules
|
||
shell: bash
|
||
run: |
|
||
echo "::group::Link Intune module"
|
||
# Install the module without saving to package.json
|
||
npm install --install-links --no-save ./libraries/@mattermost/intune
|
||
|
||
# Verify symlink was created
|
||
if [ -L "node_modules/@mattermost/intune" ] || [ -d "node_modules/@mattermost/intune" ]; then
|
||
echo "✅ Intune module linked to node_modules/@mattermost/intune"
|
||
else
|
||
echo "❌ Failed to link Intune module"
|
||
exit 1
|
||
fi
|
||
echo "::endgroup::"
|