| # Copyright 2019 The Chromium Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| """ |
| Finds the team identifier to use for code signing bundle given its |
| bundle identifier. |
| """ |
| |
| import argparse |
| import fnmatch |
| import glob |
| import json |
| import os |
| import plistlib |
| import subprocess |
| import sys |
| |
| |
| class ProvisioningProfile(object): |
| |
| def __init__(self, mobileprovision_path): |
| self._path = mobileprovision_path |
| self._data = plistlib.readPlistFromString( |
| subprocess.check_output( |
| ['security', 'cms', '-D', '-i', mobileprovision_path])) |
| |
| @property |
| def application_identifier_pattern(self): |
| return self._data.get('Entitlements', {}).get('application-identifier', '') |
| |
| @property |
| def app_identifier_prefix(self): |
| return self._data.get('ApplicationIdentifierPrefix', [''])[0] |
| |
| def ValidToSignBundle(self, bundle_identifier): |
| """Returns whether the provisioning profile can sign |bundle_identifier|.""" |
| return fnmatch.fnmatch( |
| self.app_identifier_prefix + '.' + bundle_identifier, |
| self.application_identifier_pattern) |
| |
| |
| def GetProvisioningProfilesDir(): |
| """Returns the location of the locally installed provisioning profiles.""" |
| return os.path.join( |
| os.environ['HOME'], 'Library', 'MobileDevice', 'Provisioning Profiles') |
| |
| |
| def ListProvisioningProfiles(): |
| """Returns a list of all installed provisioning profiles.""" |
| return glob.glob( |
| os.path.join(GetProvisioningProfilesDir(), '*.mobileprovision')) |
| |
| |
| def LoadProvisioningProfile(mobileprovision_path): |
| """Loads the Apple Property List embedded in |mobileprovision_path|.""" |
| return ProvisioningProfile(mobileprovision_path) |
| |
| |
| def ListValidProvisioningProfiles(bundle_identifier): |
| """Returns a list of provisioning profile valid for |bundle_identifier|.""" |
| result = [] |
| for mobileprovision_path in ListProvisioningProfiles(): |
| mobileprovision = LoadProvisioningProfile(mobileprovision_path) |
| if mobileprovision.ValidToSignBundle(bundle_identifier): |
| result.append(mobileprovision) |
| return result |
| |
| |
| def FindProvisioningProfile(bundle_identifier): |
| """Returns the path to the provisioning profile for |bundle_identifier|.""" |
| return max( |
| ListValidProvisioningProfiles(bundle_identifier), |
| key=lambda p: len(p.application_identifier_pattern)) |
| |
| |
| def GenerateSubsitutions(bundle_identifier, mobileprovision): |
| if mobileprovision: |
| app_identifier_prefix = mobileprovision.app_identifier_prefix + '.' |
| else: |
| app_identifier_prefix = '*.' |
| |
| return { |
| 'CFBundleIdentifier': bundle_identifier, |
| 'AppIdentifierPrefix': app_identifier_prefix |
| } |
| |
| |
| def ParseArgs(argv): |
| """Parses command line arguments.""" |
| parser = argparse.ArgumentParser( |
| description=__doc__, |
| formatter_class=argparse.ArgumentDefaultsHelpFormatter) |
| |
| parser.add_argument( |
| '-b', '--bundle-identifier', required=True, |
| help='bundle identifier for the application') |
| parser.add_argument( |
| '-o', '--output', default='-', |
| help='path to the result; - means stdout') |
| |
| return parser.parse_args(argv) |
| |
| |
| def main(argv): |
| args = ParseArgs(argv) |
| |
| mobileprovision = FindProvisioningProfile(args.bundle_identifier) |
| substitutions = GenerateSubsitutions(args.bundle_identifier, mobileprovision) |
| |
| if args.output == '-': |
| sys.stdout.write(json.dumps(substitutions)) |
| else: |
| with open(args.output, 'w') as output: |
| output.write(json.dumps(substitutions)) |
| |
| |
| if __name__ == '__main__': |
| sys.exit(main(sys.argv[1:])) |
