soconnor/beenvoice
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make iOS release signing deterministic

Browse Source
This commit is contained in:
soconnor
2026-08-15 14:18:09 -04:00
parent b9c7fb325a
commit 5fa30f365f
4 changed files with 75 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/withAppStoreSigning.js
+48 -26
View File
@@ -2,41 +2,63 @@
const { withXcodeProject } = require("@expo/config-plugins");
const RELEASE_SIGN_KEY = '"CODE_SIGN_IDENTITY[sdk=iphoneos*]"';
const MAIN_BUNDLE_ID = "com.beenvoice.app";
const WIDGET_BUNDLE_ID = "com.beenvoice.app.ExpoWidgetsTarget";
/**
* RN / Expo sets Release CODE_SIGN_IDENTITY to "iPhone Developer", which forces
* development-signed archives. Remove it so automatic signing picks Distribution
* for App Store archives.
* Keep App Store archives on distribution signing. Automatic signing can select
* an Apple Development identity for the widget target when archiving from the CLI,
* so both release targets use their explicit App Store profiles instead.
*/
function configureReleaseSigning(project) {
const configurations = project.pbxXCBuildConfigurationSection();
for (const key of Object.keys(configurations)) {
const buildConfig = configurations[key];
if (
!buildConfig ||
typeof buildConfig !== "object" ||
!buildConfig.buildSettings
) {
continue;
}
if (buildConfig.name !== "Release") {
continue;
}
const bundleId = String(
buildConfig.buildSettings.PRODUCT_BUNDLE_IDENTIFIER ?? "",
).replaceAll('"', "");
if (bundleId !== MAIN_BUNDLE_ID && bundleId !== WIDGET_BUNDLE_ID) {
continue;
}
const profileName =
bundleId === WIDGET_BUNDLE_ID
? (process.env.IOS_WIDGET_APPSTORE_PROFILE_NAME ?? WIDGET_BUNDLE_ID)
: (process.env.IOS_MAIN_APPSTORE_PROFILE_NAME ?? MAIN_BUNDLE_ID);
buildConfig.buildSettings[RELEASE_SIGN_KEY] = '"Apple Distribution"';
buildConfig.buildSettings.CODE_SIGN_STYLE = "Manual";
buildConfig.buildSettings.PROVISIONING_PROFILE_SPECIFIER = `"${profileName}"`;
if (process.env.APPLE_TEAM_ID) {
buildConfig.buildSettings.DEVELOPMENT_TEAM = process.env.APPLE_TEAM_ID;
}
}
return project;
}
/** @type {import('@expo/config-plugins').ConfigPlugin} */
function withAppStoreSigning(config) {
return withXcodeProject(config, (config) => {
const project = config.modResults;
const configurations = project.pbxXCBuildConfigurationSection();
for (const key of Object.keys(configurations)) {
const buildConfig = configurations[key];
if (!buildConfig || typeof buildConfig !== "object" || !buildConfig.buildSettings) {
continue;
}
if (buildConfig.name !== "Release") {
continue;
}
const identity = buildConfig.buildSettings[RELEASE_SIGN_KEY];
if (
identity === "iPhone Developer" ||
identity === '"iPhone Developer"' ||
identity === "Apple Distribution" ||
identity === '"Apple Distribution"'
) {
delete buildConfig.buildSettings[RELEASE_SIGN_KEY];
}
}
configureReleaseSigning(config.modResults);
return config;
});
}
module.exports = withAppStoreSigning;
module.exports.configureReleaseSigning = configureReleaseSigning;