ello-ios: A Swift repository from CraigsOverItAll

Ello iOS App

Environment Variables

We use the dotenv gem to access application secrets in the terminal, and cocoapods-keys to store them in the app.

ELLO_STAFF: set this in your bash/zsh startup script to access private cocoapods.
GITHUB_API_TOKEN: used for generating release notes during distribution
INVITE_FRIENDS_SALT: used for generating the salt for sending emails to the API.
STAGING/PROD environment specific:
- #{ENV}_CLIENT_KEY: the key or id used for oauth (e.g. STAGING_CLIENT_KEY)
- #{ENV}_CLIENT_SECRET: the secret used for oauth (e.g. PROD_CLIENT_SECRET)
- #{ENV}_DOMAIN: the domain for the API to hit
- #{ENV}_HTTP_PROTOCOL: the protocol for the API to hit (http or https, useful when running a local instance of the API)

If you would like to run the iOS app, please contact us for client credentials.

Setup

Once you have staging and production client credentials, you can switch between them by running:

Prod: bundle exec rake generate:prod_keys
Staging: bundle exec rake generate:staging_keys

Other

List available rake tasks: bundle exec rake -T

Testing out Push Notifications with Knuff

Download Knuff https://github.com/KnuffApp/Knuff/releases
Install ElloDevPushSandbox.p12 in your keychain (talk to @steam to get it)
Print out your device's APNS Token in the function updateToken() in PushNotificationController
Build to device in Debug mode
Code Signing Identity: iPhone Distribution: Ello PBC (ABC12345)
Provisioning Profile iOSTeam Provisioning Profile: co.ello.ElloDev

Universal Links

Starting with iOS 9 Apple added support for Universal Links. The previous link does a good job explaining the concept. Generating the apple-app-site-association file that is needed on the server is not well explained.

aasa.json

{
    "applinks": {
        "apps": [],
        "details": [
            {
                "appID": "ABC12345.co.ello.ElloDev",
                "paths": [ "*" ]
            },
            {
                "appID": "ABC12345.co.ello.ElloStage",
                "paths": [ "*" ]
            },
            {
                "appID": "ABC12345.co.ello.Ello",
                "paths": [ "/native_redirect/*" ]
            }
        ]
    }
}

STAR_ello_co.key, STAR_ello_co.crt and STAR_ello_co.pem are in the Ello Ops 1Password vault

cat aasa.json | openssl smime \
 -sign \
 -inkey STAR_ello_co.key \
 -signer STAR_ello_co.crt \
 -certfile STAR_ello_co.pem \
 -noattr \
 -nodetach \
 -outform DER > apple-app-site-association

Pinning certificates

We use pinned certificates to avoid man-in-the-middle SSL attacks. We use a rolling "primary + backup" pair of certificates, so if the primary expires or needs to be pulled, the backup is easy to swap in. Every now and then the primary / backup need to be rotated.

Cutting a new release

Merge all new changes into master, checkout a new branch release/x.x.x. Change version number in Ello and Share Extension targets. Create the archive using the Ello scheme (not ElloDev). Using Ello will update the build numbers in both plists. Commit version and build number changes. Upload archive to TestFlight. After QA changes are often required. Continue making changes, merging them into master. Then rebase the release branch onto master and repeate until a release candidate is submitted to Apple for review. Once the release is approved and live in the store you git tag x.x.x and merge the release branch into master. Following these conventions will allow github to automatically mark the release as an official release.

Sometimes you may need to increase the build number without making any changes to the code. iTunesConnect requires unique build numbers which in our case, are based off the number of commits. Any easy way to do that is git commit --allow-empty -m "bumping build number".

Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/ello/ello-ios.

License

Ello iOS is released under the MIT License

Code of Conduct

Ello was created by idealists who believe that the essential nature of all human beings is to be kind, considerate, helpful, intelligent, responsible, and respectful of others. To that end, we will be enforcing the Ello rules within all of our open source projects. If you don’t follow the rules, you risk being ignored, banned, or reported for abuse.

CraigsOverItAll/ello-ios