mikeyfriedchicken / covid-19-app-configuration-public Goto Github PK

This package contains configuration used by the mobile apps.

Please read the instructions below before changing any configurations.

This package contains two sets of configurations:

• Production, which is used both in the Production app, as well as the Scenarios app.
• Scenarios, which are additional configuration only available in the Scenarios app.

When changing or adding new configurations, ensure that they are scoped correctly, as embedding internal configurations in the production app could lead to unwanted data disclosure.

To change configurations, update the configuration used by iOS in code in the relevant file:

• Production
• Scenarios

Then, from the root of the root of the repository run

swift run config

This will update the json files that are used by Android. Unit tests on the CI will ensure iOS and Android configuration are in sync.

The Android configuration has to be updated in code as well and can be found here:

• Production
• Scenarios

Before the packages can be published, authentication details for uploading to GitHub packages have to be added to your global gradle.properties file:

• gpr.user is your Github username
• gpr.key is a personal access token issued by GitHub. For the scope, use at least read:packages and write:packages.

To publish the packages, run

gradlew publish

Now the updated packages uk.nhs.covid19.configuration-production and uk.nhs.covid19.configuration-scenarios are available in this project's package repository.

In Xcode 11, SwiftPM doesn’t support embedded assets. This limitation is resolved in Xcode 12 that is currently in beta.

At the same time, this process also provides the security features we need out of the box. Namely, this way the configuration is not accessible by just looking inside the unzipped the ipa files. Rather, it will require analysis of the binary itself.

We will revisit the configuration changing process Xcode 12 release to see if we want to achieve the same result in a different way.