config.yml

version: 2.1

orbs:
  platform-helpers: okta/platform-helpers@1
  general-platform-helpers: okta/general-platform-helpers@1.9
  macos: circleci/macos@2

executors:
  apple-ci-arm-medium:
    macos:
      xcode: "26.2.0"
    resource_class: m4pro.medium

commands:
  prepare-ios-simulator:
    steps:
      - macos/preboot-simulator:
          version: "18.6"
          platform: "iOS"
          device: "iPhone 16 Pro Max"

  prepare-tvos-simulator:
    steps:
      - macos/preboot-simulator:
          version: "18.5"
          platform: "tvOS"
          device: "Apple TV"

  ui-test:
    parameters:
      scheme:
        type: string
      sdk:
        type: string
        default: iphonesimulator
      platform:
        type: string
        default: "iOS Simulator"
      xcode-options:
        type: string
        default: ""
    steps:
      - run: xcodebuild -version
      - run:
          name: "Install test utilities"
          command: |
            if ! which -s xcresulttool; then
              export HOMEBREW_NO_AUTO_UPDATE=1
              brew tap a7ex/homebrew-formulae
              brew install xcresultparser xcbeautify
            fi
            mkdir -p /tmp/TestResults
      - run:
          name: "Define destination"
          command: |
            if [[ "<<parameters.platform>>" == "macOS" ]]; then
                export DESTINATION="platform=<<parameters.platform>>,arch=arm64"
            elif [[ -n $MACOS_ORB_DEVICE_UDID ]]; then
                export DESTINATION="platform=<<parameters.platform>>,id=$MACOS_ORB_DEVICE_UDID"
            else
                export DESTINATION="platform=<<parameters.platform>>"
            fi
            echo "export DESTINATION=\"$DESTINATION\"" >> "$BASH_ENV"
            echo "Running on $DESTINATION"
      - run:
          name: "Build <<parameters.scheme>>"
          environment:
            NSUnbufferedIO: YES
          command: |
            echo "Building for $DESTINATION"
            set -o pipefail && \
              xcrun xcodebuild \
                -derivedDataPath /tmp/Build/DerivedData \
                -clonedSourcePackagesDirPath /tmp/Build/ClonedSources \
                -workspace OktaClient.xcworkspace \
                -scheme "<<parameters.scheme>>" \
                -sdk <<parameters.sdk>> \
                -destination "$DESTINATION" \
                <<parameters.xcode-options>> \
                build-for-testing 2>&1 | \
              tee -a "/tmp/TestResults/<<parameters.scheme>>-<<parameters.platform>>.log" | \
              xcbeautify
      - when:
          condition:
            and:
              - not:
                  equal: [ macOS, <<parameters.platform>> ]
          steps:
            - macos/wait-until-simulator-booted
      - run:
          name: "Test <<parameters.scheme>>"
          environment:
            NSUnbufferedIO: YES
          command: |
            echo "Testing $DESTINATION"
            set -o pipefail && \
              xcrun xcodebuild \
                -derivedDataPath /tmp/Build/DerivedData \
                -clonedSourcePackagesDirPath /tmp/Build/ClonedSources \
                -resultBundlePath "/tmp/TestResults/<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" \
                -workspace OktaClient.xcworkspace \
                -scheme "<<parameters.scheme>>" \
                -sdk <<parameters.sdk>> \
                -destination "$DESTINATION" \
                <<parameters.xcode-options>> \
                test-without-building 2>&1 | \
              tee -a "/tmp/TestResults/<<parameters.scheme>>-<<parameters.platform>>.log" | \
              xcbeautify
      - run:
          name: "Export test results"
          when: always
          command: |
            mkdir -p /tmp/junit-results
            if [[ -d "/tmp/TestResults/<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" ]]; then
              xcresultparser -o junit "/tmp/TestResults/<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" > "/tmp/junit-results/<<parameters.scheme>>.xml"
            fi
      - run:
          name: "Compress test results"
          when: always
          command: |
            cd /tmp/TestResults
            if [[ -d "<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" ]]; then
              zip -r "<<parameters.scheme>> #$CIRCLE_BUILD_NUM.zip" "<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" 
              rm -rf "<<parameters.scheme>> #$CIRCLE_BUILD_NUM.xcresult" 
            fi
      - store_test_results:
          path: "/tmp/junit-results/<<parameters.scheme>>.xml"

jobs:
  setup:
    executor: apple-ci-arm-medium
    steps:
      - checkout
      - run:
          name: "Store configuration files"
          command: |
            printenv TEST_OKTA_PLIST | base64 -d -i - > ~/project/Samples/Shared/Okta.plist
            printenv TEST_CONFIGURATION | base64 -d -i - > ~/project/Samples/Shared/TestConfiguration.xcconfig
      - persist_to_workspace:
          root: ~/project
          paths:
            - .

  test-websignin-ios:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - prepare-ios-simulator
      - ui-test:
          scheme: "WebSignIn (iOS)"
      - ui-test:
          scheme: "SingleSignOn (iOS)"
      - store_artifacts:
          path: "/tmp/TestResults"

  test-directauth-ios:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - prepare-ios-simulator
      - ui-test:
          scheme: "DirectAuthSignIn (iOS)"
      - store_artifacts:
          path: "/tmp/TestResults"

  test-deviceauthsignin-ios:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - prepare-ios-simulator
      - ui-test:
          scheme: "DeviceAuthSignIn (iOS)"
      - store_artifacts:
          path: "/tmp/TestResults"

  test-deviceauthsignin-tvos:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - prepare-tvos-simulator
      - ui-test:
          scheme: "DeviceAuthSignIn (tvOS)"
          sdk: appletvsimulator
          platform: "tvOS Simulator"
      - store_artifacts:
          path: "/tmp/TestResults"

  test-userpasswordsignin-macos:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - ui-test:
          scheme: "UserPasswordSignIn (macOS)"
          sdk: macosx
          platform: "macOS"
          xcode-options: 'CODE_SIGN_IDENTITY="" CODE_SIGNING_REQUIRED=NO CODE_SIGNING_ALLOWED=NO'
      - store_artifacts:
          path: "/tmp/TestResults"

  test-classicnativeauth-ios:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - prepare-ios-simulator
      - ui-test:
          scheme: "ClassicNativeAuth (iOS)"
      - store_artifacts:
          path: "/tmp/TestResults"

  snyk-scan:
    executor: apple-ci-arm-medium
    steps:
      - attach_workspace:
          at: ~/project
      - macos/install-rosetta
      - run:
          name: run swift package show dependencies
          command: swift package show-dependencies
      - general-platform-helpers/step-run-snyk-monitor:
          scan-all-projects: true
          skip-unresolved: false
          os: macos

workflows:
  ui-tests:
    jobs:
      - setup
      - test-websignin-ios:
          requires:
            - setup
      - test-directauth-ios:
          requires:
            - setup
      - test-deviceauthsignin-ios:
          requires:
            - setup
      - test-deviceauthsignin-tvos:
          requires:
            - setup
      - test-userpasswordsignin-macos:
          requires:
            - setup
      - test-classicnativeauth-ios:
          requires:
            - setup

  security-scan:
    jobs:
      - setup:
          filters:
            branches:
              only:
                - master
      - snyk-scan:
          name: execute-snyk
          context:
            - static-analysis
          requires:
            - setup