googleapis / googleapis/google-cloud-swift
auth: enable headless, automated Apple ID token testing in CI/CD
- Dominant language
- Swift
- Stars
- 26
- Forks
- 10
- Avg merge
- 12h 56m
- Merged PRs (30d)
- 211
Description
Design and implement automated, non-interactive testing for Sign in with Apple (Apple ID BYOID) in Google Cloud Build (GCB) and GitHub Actions (see #34).
"Sign in with Apple" (`AuthenticationServices`) is an interactive framework requiring GUI or biometric confirmation on macOS/iOS. In headless Linux CI runners, there is no interactive Apple UI or daemon to mint user tokens. Furthermore, Apple ID tokens expire within 10 minutes to 24 hours, preventing the use of static secrets.
Contributor guide
Research direction
Start with the related issue #34 and the Sign in with Apple AuthenticationServices constraints described here. Investigate how Google Cloud Build and GitHub Actions could support non-interactive token testing without static secrets or GUI/biometric confirmation. Done means automated Apple ID token testing works in both CI environments despite token expiry.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, google-cloud, swift
- Domain
- authentication, ci-cd, cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100