chore: OSX Notarization

.travis.yml

@@ -9,7 +9,7 @@ addons:
   apt:
     packages:
       - libsecret-1-dev
-      - icnsutils
+      - libopenjp2-tools
       - graphicsmagick
       - xz-utils
   artifacts:

build-scripts/notarize.js

@@ -0,0 +1,24 @@
+const { notarize } = require('electron-notarize');
+
+module.exports = async function (context) {
+    if (process.platform !== 'darwin') {
+        return;
+    }
+
+    console.log('Notarizing...');
+
+    const appId = context.packager.config.appId;
+    const appOutDir = context.appOutDir;
+    const appName = context.packager.appInfo.productFilename;
+
+    console.log('appId: ', appId);
+    console.log('appOutDir: ', appOutDir);
+    console.log('appName: ', appName);
+
+    return await notarize({
+        appBundleId: appId,
+        appPath: `${appOutDir}/${appName}.app`,
+        appleId: process.env.APPLE_ID,
+        appleIdPassword: process.env.APPLE_ID_PASSWORD
+    });
+};

electron-build.js

@@ -71,6 +71,10 @@ builder.build({
         }],
         mac: {
             target: ["dmg"],
+            hardenedRuntime: true,
+            gatekeeperAssess: false,
+            entitlements: electronDir + "/config/entitlements.mac.plist",
+            entitlementsInherit: electronDir + "/config/entitlements.mac.plist",
         },
         win: {
             target: ["nsis"],
@@ -87,8 +91,11 @@ builder.build({
         fileAssociations: [{
             ext: "cwl",
             name: "CWL"
-        }]
-
+        }],
+        afterSign: projectRoot + "/build-scripts/notarize.js",
+        dmg: {
+            sign: false
+        }
     }
 });
 

electron/config/entitlements.mac.plist

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+        <true/>
+    </dict>
+</plist>

package.json

@@ -18,6 +18,7 @@
     "scripts": {
         "build": "./node_modules/.bin/rimraf dist ng-dist && yarn run compile:electron && yarn run compile:angular && yarn run package",
         "changelog": "./node_modules/.bin/git-changelog",
+        "whereiam": "dir",
         "compile:angular": "node --max-old-space-size=4096 ./node_modules/@angular/cli/bin/ng build -prod -aot",
         "compile:electron": "./node_modules/.bin/rimraf electron/dist electron/ng-dist && ./node_modules/.bin/tsc -p electron && node build-scripts/splash-copy.js",
         "compile:electron:watch": "./node_modules/.bin/tsc -p electron --watch",
@@ -91,7 +92,8 @@
         "codelyzer": "^4.0.1",
         "concurrently": "^3.5.0",
         "electron": "1.7.12",
-        "electron-builder": "^19.56.0",
+        "electron-builder": "20.44.4",
+        "electron-notarize": "^0.2.1",
         "fs-extra": "^4.0.1",
         "git-changelog": "^1.1.2",
         "glob": "^7.1.1",