Add auth method with json content data (#354)

Author: fxsalazar

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_action.rb

@@ -39,7 +39,7 @@ def self.run(params)
         # TODO(lkellogg): This sets the send timeout for all POST requests made by the client, but
         # ideally the timeout should only apply to the binary upload
         init_google_api_client(params[:debug], timeout)
-        authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
         client.authorization = authorization
 
@@ -411,6 +411,10 @@ def self.available_options
           FastlaneCore::ConfigItem.new(key: :service_credentials_file,
                                        description: "Path to Google service account json file",
                                        optional: true,
+                                       type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
                                        type: String)
         ]
       end

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_add_testers_action.rb

@@ -13,7 +13,7 @@ class FirebaseAppDistributionAddTestersAction < Action
       def self.run(params)
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         if blank?(params[:emails]) && blank?(params[:file])
           UI.user_error!("Must specify `emails` or `file`.")
@@ -80,6 +80,10 @@ def self.available_options
                                       description: "Path to Google service credentials file",
                                       optional: true,
                                       type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                      description: "Google service account json file content",
+                                      optional: true,
+                                      type: String),
           FastlaneCore::ConfigItem.new(key: :firebase_cli_token,
                                        description: "Auth token generated using the Firebase CLI's login:ci command",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_create_group_action.rb

@@ -21,7 +21,7 @@ def self.run(params)
 
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         project_number = params[:project_number]
         group_alias = params[:alias]
@@ -87,6 +87,10 @@ def self.available_options
                                        description: "Path to Google service credentials file",
                                        optional: true,
                                        type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
+                                       type: String),
           FastlaneCore::ConfigItem.new(key: :firebase_cli_token,
                                        description: "Auth token generated using the Firebase CLI's login:ci command",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_delete_group_action.rb

@@ -13,7 +13,7 @@ class FirebaseAppDistributionDeleteGroupAction < Action
       def self.run(params)
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         if blank?(params[:alias])
           UI.user_error!("Must specify `alias`.")
@@ -67,6 +67,10 @@ def self.available_options
                                        description: "Path to Google service credentials file",
                                        optional: true,
                                        type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
+                                       type: String),
           FastlaneCore::ConfigItem.new(key: :firebase_cli_token,
                                        description: "Auth token generated using the Firebase CLI's login:ci command",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_get_latest_release.rb

@@ -15,7 +15,7 @@ class FirebaseAppDistributionGetLatestReleaseAction < Action
       def self.run(params)
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         UI.message("⏳ Fetching latest release for app #{params[:app]}...")
 
@@ -91,6 +91,10 @@ def self.available_options
                                        description: "Path to Google service account json",
                                        optional: true,
                                        type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
+                                       type: String),
           FastlaneCore::ConfigItem.new(key: :debug,
                                        description: "Print verbose debug output",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_get_udids.rb

@@ -16,7 +16,7 @@ class FirebaseAppDistributionGetUdidsAction < Action
       def self.run(params)
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1alpha::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         project_number = params[:project_number]
         if blank?(project_number)
@@ -86,6 +86,10 @@ def self.available_options
                                        description: "Path to Google service account json",
                                        optional: true,
                                        type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
+                                       type: String),
           FastlaneCore::ConfigItem.new(key: :debug,
                                        description: "Print verbose debug output",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/actions/firebase_app_distribution_remove_testers_action.rb

@@ -13,7 +13,7 @@ class FirebaseAppDistributionRemoveTestersAction < Action
       def self.run(params)
         init_google_api_client(params[:debug])
         client = Google::Apis::FirebaseappdistributionV1::FirebaseAppDistributionService.new
-        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:debug])
+        client.authorization = get_authorization(params[:service_credentials_file], params[:firebase_cli_token], params[:service_credentials_json_data], params[:debug])
 
         if blank?(params[:emails]) && blank?(params[:file])
           UI.user_error!("Must specify `emails` or `file`.")
@@ -75,6 +75,10 @@ def self.available_options
                                       description: "Path to Google service credentials file",
                                       optional: true,
                                       type: String),
+          FastlaneCore::ConfigItem.new(key: :service_credentials_json_data,
+                                       description: "Google service account json file content",
+                                       optional: true,
+                                       type: String),
           FastlaneCore::ConfigItem.new(key: :firebase_cli_token,
                                        description: "Auth token generated using the Firebase CLI's login:ci command",
                                        optional: true,

lib/fastlane/plugin/firebase_app_distribution/helper/firebase_app_distribution_auth_client.rb

@@ -20,6 +20,7 @@ module FirebaseAppDistributionAuthClient
       # auth method is used, unset all other auth variables/parameters to nil/empty
       #
       # args
+      #   google_service_json_data - Google service account json file content as a string
       #   google_service_path - Absolute path to the Google service account file
       #   firebase_cli_token - Refresh token
       #   debug - Whether to enable debug-level logging
@@ -28,10 +29,13 @@ module FirebaseAppDistributionAuthClient
       #   FIREBASE_TOKEN - see firebase_cli_token
       #
       # Crashes if given invalid or missing credentials
-      def get_authorization(google_service_path, firebase_cli_token, debug = false)
+      def get_authorization(google_service_path, firebase_cli_token, google_service_json_data, debug = false)
         if !google_service_path.nil? && !google_service_path.empty?
           UI.message("🔐 Authenticating with --service_credentials_file path parameter: #{google_service_path}")
-          service_account(google_service_path, debug)
+          service_account_from_file(google_service_path, debug)
+        elsif !google_service_json_data.nil? && !google_service_json_data.empty?
+          UI.message("🔐 Authenticating with --service_credentials_json content parameter")
+          service_account_from_json(google_service_json_data, debug)
         elsif !firebase_cli_token.nil? && !firebase_cli_token.empty?
           UI.message("🔐 Authenticating with --firebase_cli_token parameter")
           firebase_token(firebase_cli_token, debug)
@@ -100,24 +104,32 @@ def firebase_token(refresh_token, debug)
         UI.user_error!(error_message)
       end
 
-      def service_account(google_service_path, debug)
+      def service_account_from_json(google_service_json_data, debug)
+        get_service_account_credentials(google_service_json_data, debug)
+      end
+
+      def service_account_from_file(google_service_path, debug)
+        get_service_account_credentials(File.read(google_service_path), debug)
+      rescue Errno::ENOENT
+        UI.user_error!("#{ErrorMessage::SERVICE_CREDENTIALS_NOT_FOUND}: #{google_service_path}")
+      end
+
+      def get_service_account_credentials(json_data, debug)
+        json_file = JSON.parse(json_data)
         # check if it's an external account or service account
-        json_file = JSON.parse(File.read(google_service_path))
         auth = json_file["type"] == "external_account" ? Google::Auth::ExternalAccount::Credentials : Google::Auth::ServiceAccountCredentials
         service_account_credentials = auth.make_creds(
-          json_key_io: File.open(google_service_path),
+          json_key_io: StringIO.new(json_data),
           scope: SCOPE
         )
         service_account_credentials.fetch_access_token!
         service_account_credentials
-      rescue Errno::ENOENT
-        UI.user_error!("#{ErrorMessage::SERVICE_CREDENTIALS_NOT_FOUND}: #{google_service_path}")
       rescue Signet::AuthorizationError => error
-        error_message = "#{ErrorMessage::SERVICE_CREDENTIALS_ERROR}: \"#{google_service_path}\""
+        error_message = "#{ErrorMessage::SERVICE_CREDENTIALS_ERROR}: "
         if debug
           error_message += "\n#{error_details(error)}"
         else
-          error_message += ". #{debug_instructions}"
+          error_message += debug_instructions.to_s
         end
         UI.user_error!(error_message)
       end