pr-validation.yml

# Pipeline will be triggered for PR & any updates on the PR on all branches
pr:
  autoCancel: true
  branches:
    include:
    - '*'
  drafts: true

# Trigger CI for only main/release branches
trigger:
  branches:
    include:
    - main
    - release/*
    exclude:
    - '*'

# Define parallel jobs that run build script for specified targets
jobs:
- job: 'PRAssistant'
  pool:
    vmImage: 'ubuntu-latest'
    timeOutInMinutes: 10
  displayName: Invoke pipeline PRAssistantInvoker to trigger copilot code review
  steps:
  - bash: |
      echo "Source branch : $(System.PullRequest.SourceBranch) Target branch : $(System.PullRequest.targetBranchName)"
      az pipelines run --project 'IDDP' --id 2728 --branch dev --organization 'https://dev.azure.com/IdentityDivision' --variables source_branch=$(System.PullRequest.SourceBranch) target_branch=$(System.PullRequest.targetBranchName)
    displayName: 'Invoke pipeline PRAssistantInvoker'
    env:
      AZURE_DEVOPS_EXT_PAT: $(System.AccessToken)
    failOnStderr: false
- job: 'Validate_Pull_Request'
  strategy:
    maxParallel: 3
    matrix:
      IOS_FRAMEWORK: 
        target: "iosFramework iosTestApp sampleIosApp sampleIosAppSwift"
      MAC_FRAMEWORK: 
        target: "macFramework"
      VISION_FRAMEWORK:
        target: "visionOSFramework"
  displayName: Validate Pull Request
  pool:
    vmImage: 'macOS-14'
    timeOutInMinutes: 30

  steps:
  - script: |
          /bin/bash -c "sudo xcode-select -s /Applications/Xcode_15.4.app"
    displayName: 'Switch to use Xcode 15.4'
  - task: CmdLine@2
    displayName: Uninstalling xcpretty v0.4.0
    inputs:
      script: |
        gem uninstall xcpretty -I --version 0.4.0
      failOnStderr: false
  - task: CmdLine@2
    displayName: Installing xcpretty v0.3.0
    inputs:
      script: |
        gem install xcpretty -N -v 0.3.0
      failOnStderr: true
  - task: CmdLine@2
    displayName: Installing dependencies
    inputs:
      script: |
        gem install slather bundler -N
      failOnStderr: true
  - checkout: self
    clean: true
    submodules: true
    fetchDepth: 1
    persistCredentials: false
  - task: Bash@3
    displayName: Removing any lingering codecov files. These can cause issues when the xcode version changes
    inputs:
      targetType: 'inline'
      script: |
        find . -name "*.gcda" -print0 | xargs -0 rm
  - task: ComponentGovernanceComponentDetection@0
    inputs:
      alertWarningLevel: Low
# The following is needed to install the visionOS SDK on macos-14 vm image which
# doesn't have visionOS installed by default.
# TODO: Remove when macos-14-arm64 is supported on ADO.
  - task: Bash@3
    displayName: download visionOS SDK
    inputs:
      targetType: 'inline'
      script: |
        echo $(target)
        if [ $(target) == 'visionOSFramework' ]; then
            echo "Downloading simulator for visionOS"
            sudo xcode-select -s /Applications/Xcode_15.4.app/Contents/Developer
            defaults write com.apple.dt.Xcode AllowUnsupportedVisionOSHost -bool YES
            defaults write com.apple.CoreSimulator AllowUnsupportedVisionOSHost -bool YES
            xcodebuild -downloadPlatform visionOS
        else
            echo "Not visionOS job, no download needed"
        fi
      failOnStderr: false
  - task: Bash@3
    displayName: Run Build script & check for Errors
    inputs:
      targetType: 'inline'
      script: |
        { output=$(./build.py --target $(target) 2>&1 1>&3-) ;} 3>&1
        final_status=$(<./build/status.txt)
        echo "FINAL STATUS  = ${final_status}"
        echo "POSSIBLE ERRORS: ${output}"
        
        if [ $final_status != "0" ]; then
          echo "Build & Testing Failed! \n ${output}" >&2
        fi
      failOnStderr: true
  - task: Bash@3
    condition: always()
    displayName: Cleanup
    inputs:
      targetType: 'inline'
      script: |
        rm -rf ./build/status.txt
  - task: PublishTestResults@2
    condition: always()
    displayName: Publish Test Report
    inputs:
      testResultsFormat: 'JUnit'
      testResultsFiles: '$(Agent.BuildDirectory)/s/build/reports/*'
      failTaskOnFailedTests: true
      testRunTitle: 'Test Run - $(target)'

- job: fetch_pr_labels
  displayName: 'Check for PR Label'
  timeoutInMinutes: 5
  pool:
    vmImage: 'macOS-14'
  steps:
    - script: |
        url="https://api.github.com/repos/$BUILD_REPOSITORY_ID/issues/$SYSTEM_PULLREQUEST_PULLREQUESTNUMBER/labels"

        echo "Fetching labels from $url "

        # Temporary file to store the raw response
        temp_file=$(mktemp)

        # Store the response code and the raw response in separate variables
        response_code=$(curl -s -w "%{http_code}" -o "$temp_file" "$url")
        response_content=$(cat "$temp_file")

        echo "Response code: $response_code"
        echo "Raw response: $response_content"

        if [[ "$response_code" -eq 200 ]]; then
          label_names=$(echo $response_content | jq -r '.[].name' | paste -sd ', ' -)
          echo "##vso[task.setvariable variable=PR_LABELS;isOutput=true]$label_names"
          [ -z "$label_names" ] && echo "PR labels: <empty>" || echo "PR labels: $label_names"
        else
          echo "Request failed with status code: $response_code - Skipping Native Auth E2E tests as a preventive measure"
          echo "##vso[task.setvariable variable=PR_LABELS;isOutput=true]'skip-native-auth-e2e-tests'"
        fi

      name: fetchPrLabels

- job: e2e_test_native_auth_ios
  displayName: 'Run MSAL E2E tests for iOS native auth'
  dependsOn: fetch_pr_labels
  condition: and( succeeded(), not(contains(dependencies.fetch_pr_labels.outputs['fetchPrLabels.PR_LABELS'], 'skip-native-auth-e2e-tests')) )
  timeoutInMinutes: 30
  cancelTimeoutInMinutes: 5
  pool:
    vmImage: 'macOS-14'
  workspace:
    clean: all

  steps:
  - template: templates/tests-with-conf-file.yml
    parameters:
      schema: 'MSAL iOS Native Auth E2E Tests'
      full_path: 'build/Build/Products/MSAL iOS Native Auth E2E Tests_MSAL iOS Native Auth E2E Tests_iphonesimulator18.1-x86_64.xctestrun'
      destination: 'platform=iOS Simulator,name=iPhone 16,OS=18.1'
      sdk: 'iphonesimulator'
      retry_tests: false

- job: e2e_test_native_auth_mac
  displayName: 'Run MSAL E2E tests for macOS native auth'
  dependsOn: fetch_pr_labels
  condition: and( succeeded(), not(contains(dependencies.fetch_pr_labels.outputs['fetchPrLabels.PR_LABELS'], 'skip-native-auth-e2e-tests')) )
  timeoutInMinutes: 30
  cancelTimeoutInMinutes: 5
  pool:
    vmImage: 'macOS-14'
  workspace:
    clean: all

  steps:
  - template: templates/tests-with-conf-file.yml
    parameters:
      schema: 'MSAL Mac Native Auth E2E Tests'
      full_path: 'build/Build/Products/MSAL Mac Native Auth E2E Tests_MSAL Mac Native Auth E2E Tests_macosx15.1-x86_64.xctestrun'
      destination: 'platform=macOS'
      sdk: 'macosx'
      retry_tests: false

- job: 'Validate_SPM_Integration'
  displayName: Validate SPM Integration
  pool:
    vmImage: 'macOS-14'
    timeOutInMinutes: 15
  workspace:
    clean: all

  steps:

  - checkout: self
    clean: true
    submodules: true
    fetchDepth: 1
    persistCredentials: true
    path: s

  - script: |
        /bin/bash -c "sudo xcode-select -s /Applications/Xcode_15.4.app"
    displayName: 'Switch to use Xcode 15.4'

  - task: Bash@3
    displayName: Set variable BRANCH_NAME to a temporary branch
    inputs:
      targetType: 'inline'
      script: |
        BRANCH_NAME_LOCAL="$(Build.SourceBranchName)-temp"
        echo "##vso[task.setvariable variable=BRANCH_NAME]${BRANCH_NAME_LOCAL}"
      
  - task: Bash@3
    displayName: Checkout to temporary branch
    inputs:
      targetType: 'inline'
      script: |
        git checkout -b "${BRANCH_NAME}"

  - task: Bash@3
    displayName: Run SPM integration test script
    inputs:
      targetType: 'inline'
      script: |
        sh spm-integration-test.sh "${BRANCH_NAME}"
    continueOnError: false

  - task: Bash@3
    condition: always()
    displayName: Cleanup
    inputs:
      targetType: 'inline'
      script: 
        cd ../..
        rm -rf "$SAMPLE_APP_TEMP_DIR" archive framework MSAL.zip
        git checkout -- .
        git fetch --quiet
        git switch "$(Build.SourceBranchName)"
        git branch -D "$BRANCH_NAME"
        git push origin --delete "$BRANCH_NAME"