86 lines
2.9 KiB
JavaScript
86 lines
2.9 KiB
JavaScript
/* eslint-disable @typescript-eslint/no-var-requires, no-console */
|
|
require("dotenv").config();
|
|
const child_process = require("child_process");
|
|
const path = require("path");
|
|
|
|
const fse = require("fs-extra");
|
|
|
|
exports.default = run;
|
|
|
|
async function run(context) {
|
|
console.log("## After pack");
|
|
// console.log(context);
|
|
|
|
if (context.electronPlatformName === "linux") {
|
|
console.log("Creating memory-protection wrapper script");
|
|
const appOutDir = context.appOutDir;
|
|
const oldBin = path.join(appOutDir, context.packager.executableName);
|
|
const newBin = path.join(appOutDir, "bitwarden-app");
|
|
fse.moveSync(oldBin, newBin);
|
|
console.log("Moved binary to bitwarden-app");
|
|
|
|
const wrapperScript = path.join(__dirname, "../resources/memory-dump-wrapper.sh");
|
|
const wrapperBin = path.join(appOutDir, context.packager.executableName);
|
|
fse.copyFileSync(wrapperScript, wrapperBin);
|
|
fse.chmodSync(wrapperBin, "755");
|
|
console.log("Copied memory-protection wrapper script");
|
|
}
|
|
|
|
if (["darwin", "mas"].includes(context.electronPlatformName)) {
|
|
const identities = getIdentities(process.env.CSC_NAME ?? "");
|
|
if (identities.length === 0) {
|
|
throw new Error("No valid identities found");
|
|
}
|
|
const id = identities[0].id;
|
|
|
|
console.log("Signing proxy binary before the main bundle, using identity", id);
|
|
|
|
const appName = context.packager.appInfo.productFilename;
|
|
const appPath = `${context.appOutDir}/${appName}.app`;
|
|
const proxyPath = path.join(appPath, "Contents", "MacOS", "desktop_proxy");
|
|
|
|
const packageId = "com.bitwarden.desktop";
|
|
const entitlementsName = "entitlements.desktop_proxy.plist";
|
|
const entitlementsPath = path.join(__dirname, "..", "resources", entitlementsName);
|
|
child_process.execSync(
|
|
`codesign -s ${id} -i ${packageId} -f --timestamp --options runtime --entitlements ${entitlementsPath} ${proxyPath}`,
|
|
);
|
|
}
|
|
}
|
|
|
|
// Partially based on electron-builder code:
|
|
// https://github.com/electron-userland/electron-builder/blob/master/packages/app-builder-lib/src/macPackager.ts
|
|
// https://github.com/electron-userland/electron-builder/blob/master/packages/app-builder-lib/src/codeSign/macCodeSign.ts
|
|
|
|
const appleCertificatePrefixes = [
|
|
"Developer ID Application:",
|
|
// "Developer ID Installer:",
|
|
// "3rd Party Mac Developer Application:",
|
|
// "3rd Party Mac Developer Installer:",
|
|
"Apple Development:",
|
|
];
|
|
|
|
function getIdentities(csc_name) {
|
|
const ids = child_process
|
|
.execSync("/usr/bin/security find-identity -v -p codesigning")
|
|
.toString();
|
|
|
|
return ids
|
|
.split("\n")
|
|
.filter((line) => {
|
|
for (const prefix of appleCertificatePrefixes) {
|
|
if (line.includes(prefix)) {
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
})
|
|
.filter((line) => line.includes(csc_name))
|
|
.map((line) => {
|
|
const split = line.trim().split(" ");
|
|
const id = split[1];
|
|
const name = split.slice(2).join(" ").replace(/"/g, "");
|
|
return { id, name };
|
|
});
|
|
}
|