SDKS-4714: Use empty request body in self-service session endpoint (#… #1581
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| # Trigger on push or pull request | |
| on: | |
| pull_request: | |
| types: [opened, reopened, synchronize, edited] | |
| push: | |
| branches: | |
| - master | |
| - develop | |
| permissions: write-all | |
| jobs: | |
| # Build and run unit tests | |
| build-and-test: | |
| name: Build and test | |
| uses: ./.github/workflows/build-and-test.yaml | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| # Run Mend SCA Scan | |
| mend-sca-scan: | |
| name: Mend SCA Scan | |
| uses: ./.github/workflows/mend-sca-scan.yaml | |
| secrets: | |
| MEND_EMAIL: ${{ secrets.MEND_EMAIL }} | |
| MEND_USER_KEY: ${{ secrets.MEND_USER_KEY }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| # Run Mend SAST Scan | |
| mend-sast-scan: | |
| name: Mend SAST Scan | |
| uses: ./.github/workflows/mend-sast-scan.yaml | |
| secrets: | |
| MEND_EMAIL: ${{ secrets.MEND_EMAIL }} | |
| MEND_USER_KEY: ${{ secrets.MEND_USER_KEY }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| # Run Sonatype OSS Index Scan | |
| sonatype-ossindex: | |
| name: Scan for open source vulnerabilities (Sonatype OSS Index) | |
| uses: ./.github/workflows/sonatype-ossi-scan.yaml | |
| secrets: | |
| SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }} | |
| SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| # Build and sign BrowserStack test artifacts (app-debug.apk and forgerock-auth-debug-androidTest-signed.apk) | |
| # Skip this step for PRs created by dependabot | |
| browserstack-prepare-artifacts: | |
| name: Prepare device farm artifacts | |
| uses: ./.github/workflows/browserstack-prepare-artifacts.yaml | |
| if: ${{ github.actor != 'dependabot[bot]' }} | |
| needs: build-and-test | |
| secrets: | |
| E2E_CONFIG: ${{ secrets.E2E_CONFIG }} | |
| SIGNING_KEYSTORE: ${{ secrets.SIGNING_KEYSTORE }} | |
| SIGNING_ALIAS: ${{ secrets.SIGNING_ALIAS }} | |
| SIGNING_KEYSTORE_PASSWORD: ${{ secrets.SIGNING_KEYSTORE_PASSWORD }} | |
| SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| # Execute e2e test cases in BrowserStack. The workflow outputs the newly created run id. | |
| browserstack-run: | |
| name: Run tests in BrowserStack | |
| uses: ./.github/workflows/browserstack-run.yaml | |
| needs: browserstack-prepare-artifacts | |
| secrets: | |
| BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USERNAME }} | |
| BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| # Wait for BrowserStack test run to finish and publish results | |
| browserstack-results: | |
| name: BrowserStack test results | |
| uses: ./.github/workflows/browserstack-results.yaml | |
| needs: browserstack-run | |
| secrets: | |
| BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USERNAME }} | |
| BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }} | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| with: | |
| browserstack-build-id: ${{ needs.browserstack-run.outputs.browserstack-build-id }} | |
| # Publish a SNAPSHOT release | |
| # This is only run upon push to develop and if all tests pass... | |
| publish-snapshot: | |
| name: Publish SNAPSHOT release | |
| uses: ./.github/workflows/publish-snapshot.yaml | |
| if: (github.ref == 'refs/heads/develop' && github.event_name == 'push') | |
| needs: [browserstack-results, sonatype-ossindex, mend-sca-scan, mend-sast-scan] | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| PUBLISHING_SIGNING_KEY_ID: ${{ secrets.PUBLISHING_SIGNING_KEY_ID }} | |
| PUBLISHING_SIGNING_KEY_PASSWORD: ${{ secrets.PUBLISHING_SIGNING_KEY_PASSWORD }} | |
| PUBLISHING_SIGNING_KEY_RING_FILE_BASE64: ${{ secrets.PUBLISHING_SIGNING_KEY_RING_FILE_BASE64 }} | |
| PUBLISHING_USERNAME: ${{ secrets.PUBLISHING_USERNAME }} | |
| PUBLISHING_PASSWORD: ${{ secrets.PUBLISHING_PASSWORD }} |