Signout on refresh token expire #394
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This was generated by tool. Edits will be overwritten. | |
name: bff/ci | |
on: | |
workflow_dispatch: | |
push: | |
paths: | |
- .github/workflows/bff-** | |
- bff/** | |
- Directory.Packages.props | |
pull_request: | |
paths: | |
- .github/workflows/bff-** | |
- bff/** | |
- Directory.Packages.props | |
env: | |
DOTNET_NOLOGO: true | |
DOTNET_CLI_TELEMETRY_OPTOUT: true | |
jobs: | |
build: | |
name: Build | |
if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') | |
runs-on: ubuntu-latest | |
permissions: | |
actions: read | |
checks: write | |
contents: read | |
packages: write | |
defaults: | |
run: | |
shell: bash | |
working-directory: bff | |
timeout-minutes: 15 | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
- name: Setup Dotnet | |
uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 | |
with: | |
dotnet-version: |- | |
6.0.x | |
8.0.x | |
9.0.x | |
- name: Build | |
run: dotnet build bff.slnf -c Release | |
- name: Dotnet devcerts | |
run: dotnet dev-certs https --trust | |
- name: Install Playwright | |
run: pwsh test/Hosts.Tests/bin/Release/net9.0/playwright.ps1 install --with-deps | |
- name: Test | |
run: dotnet test bff.slnf -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=Tests.trx" --collect:"XPlat Code Coverage" | |
- name: Test report | |
if: github.event == 'push' && (success() || failure()) | |
uses: dorny/test-reporter@31a54ee7ebcacc03a09ea97a7e5465a47b84aea5 | |
with: | |
name: Test Report | |
path: '**/Tests.trx' | |
reporter: dotnet-trx | |
fail-on-error: true | |
fail-on-empty: true | |
- name: Upload playwright traces | |
if: success() || failure() | |
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 | |
with: | |
name: playwright-traces | |
path: bff/test/**/playwright-traces/*.zip | |
overwrite: true | |
retention-days: 15 | |
- name: Tool restore | |
run: dotnet tool restore | |
- name: Pack bff.slnf | |
run: dotnet pack -c Release bff.slnf -o artifacts | |
- name: Sign packages | |
if: github.event == 'push' | |
run: |- | |
for file in artifacts/*.nupkg; do | |
dotnet NuGetKeyVaultSignTool sign "$file" --file-digest sha256 --timestamp-rfc3161 http://timestamp.digicert.com --azure-key-vault-url https://duendecodesigninghsm.vault.azure.net/ --azure-key-vault-client-id 18e3de68-2556-4345-8076-a46fad79e474 --azure-key-vault-tenant-id ed3089f0-5401-4758-90eb-066124e2d907 --azure-key-vault-client-secret ${{ secrets.SignClientSecret }} --azure-key-vault-certificate NuGetPackageSigning | |
done | |
- name: Push packages to GitHub | |
if: github.ref == 'refs/heads/main' | |
run: dotnet nuget push artifacts/*.nupkg --source https://nuget.pkg.github.com/DuendeSoftware/index.json --api-key ${{ secrets.GITHUB_TOKEN }} --skip-duplicate | |
env: | |
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
NUGET_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
- name: Upload Artifacts | |
if: github.ref == 'refs/heads/main' | |
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 | |
with: | |
name: artifacts | |
path: bff/artifacts/*.nupkg | |
overwrite: true | |
retention-days: 15 |