[GN] Add support for code signing to "create_bundle" targets.

tools/gn/functions_target.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "tools/gn/functions.h"
 
 #include "tools/gn/config_values_generator.h"
 #include "tools/gn/err.h"
 #include "tools/gn/parse_tree.h"
 #include "tools/gn/scope.h"
@@ skipping 316 matching lines @@
     "  This target can be used on all platforms though it is designed only to\n"
     "  generate iOS/OS X bundle. In cross-platform projects, it is advised to\n"
     "  put it behind iOS/Mac conditionals.\n"
     "\n"
     "  If a create_bundle is specified as a data_deps for another target, the\n"
     "  bundle is considered a leaf, and its public and private dependencies\n"
     "  will not contribute to any data or data_deps. Required runtime\n"
     "  dependencies should be placed in the bundle. A create_bundle can\n"
     "  declare its own explicit data and data_deps, however.\n"
     "\n"
+    "Code signing\n"
+    "\n"
+    "  Some bundle needs to be code signed as part of the build (on iOS all\n"
+    "  application needs to be code signed to run on a device). The code\n"
+    "  signature can be configured via the code_signing_script variable.\n"
+    "\n"
+    "  If set, code_signing_script is the path of a script that invoked after\n"
+    "  all files have been moved into the bundle. The script must not change\n"
+    "  any file in the bundle, but may add new files.\n"
+    "\n"
+    "  If code_signing_script is defined, then code_signing_outputs must also\n"
+    "  be defined and non-empty to inform when the script needs to be re-run.\n"
+    "  The code_signing_args will be passed as is to the script (so path have\n"
+    "  to be rebased) and additional inputs may be listed with the variable\n"
+    "  code_signing_sources.\n"
+    "\n"
     "Variables\n"
     "\n"
     "  bundle_root_dir*, bundle_resources_dir*, bundle_executable_dir*,\n"
     "  bundle_plugins_dir*, deps, data_deps, public_deps, visibility,\n"
-    "  product_type\n"
+    "  product_type, code_signing_args, code_signing_script,\n"
+    "  code_signing_sources, code_signing_outputs\n"
     "  * = required\n"
     "\n"
     "Example\n"
     "\n"
     "  # Defines a template to create an application. On most platform, this\n"
     "  # is just an alias for an \"executable\" target, but on iOS/OS X, it\n"
     "  # builds an application bundle.\n"
     "  template(\"app\") {\n"
     "    if (!is_ios && !is_mac) {\n"
     "      executable(target_name) {\n"
@@ skipping 12 matching lines @@
     "      }\n"
     "\n"
     "      bundle_data(\"${app_name}_bundle_info_plist\") {\n"
     "        deps = [ \":${app_name}_generate_info_plist\" ]\n"
     "        sources = [ \"$gen_path/Info.plist\" ]\n"
     "        outputs = [ \"{{bundle_root_dir}}/Info.plist\" ]\n"
     "      }\n"
     "\n"
     "      executable(\"${app_name}_generate_executable\") {\n"
     "        forward_variables_from(invoker, \"*\", [\n"
-    "                                                \"output_name\",\n"
-    "                                                \"visibility\",\n"
-    "                                               ])\n"
+    "                                               \"output_name\",\n"
+    "                                               \"visibility\",\n"
+    "                                             ])\n"
     "        output_name =\n"
     "            rebase_path(\"$gen_path/$app_name\", root_build_dir)\n"
     "      }\n"
     "\n"
-    "      bundle_data(\"${app_name}_bundle_executable\") {\n"
-    "        deps = [ \":${app_name}_generate_executable\" ]\n"
-    "        sources = [ \"$gen_path/$app_name\" ]\n"
-    "        outputs = [ \"{{bundle_executable_dir}}/$app_name\" ]\n"
+    "      code_signing =\n"
+    "          defined(invoker.code_signing) && invoker.code_signing\n"
+    "\n"
+    "      if (is_ios && !code_signing) {\n"
+    "        bundle_data(\"${app_name}_bundle_executable\") {\n"
+    "          deps = [ \":${app_name}_generate_executable\" ]\n"
+    "          sources = [ \"$gen_path/$app_name\" ]\n"
+    "          outputs = [ \"{{bundle_executable_dir}}/$app_name\" ]\n"
+    "        }\n"
     "      }\n"
     "\n"
     "      create_bundle(\"${app_name}.app\") {\n"
     "        product_type = \"com.apple.product-type.application\"\n"
-    "        deps = [\n"
-    "          \":${app_name}_bundle_executable\",\n"
-    "          \":${app_name}_bundle_info_plist\",\n"
-    "        ]\n"
     "        if (is_ios) {\n"
     "          bundle_root_dir = \"${root_build_dir}/$target_name\"\n"
     "          bundle_resources_dir = bundle_root_dir\n"
     "          bundle_executable_dir = bundle_root_dir\n"
     "          bundle_plugins_dir = bundle_root_dir + \"/Plugins\"\n"
     "        } else {\n"
     "          bundle_root_dir = \"${root_build_dir}/target_name/Contents\"\n"
     "          bundle_resources_dir = bundle_root_dir + \"/Resources\"\n"
     "          bundle_executable_dir = bundle_root_dir + \"/MacOS\"\n"
     "          bundle_plugins_dir = bundle_root_dir + \"/Plugins\"\n"
     "        }\n"
-    "      }\n"
-    "\n"
-    "      group(target_name) {\n"
-    "        forward_variables_from(invoker, [\"visibility\"])\n"
-    "        deps = [ \":${app_name}.app\" ]\n"
+    "        deps = [ \":${app_name}_bundle_info_plist\" ]\n"
+    "        if (is_ios && code_signing) {\n"
+    "          deps += [ \":${app_name}_generate_executable\" ]\n"
+    "          code_signing_script = \"//build/config/ios/codesign.py\"\n"
+    "          code_signing_sources = [\n"
+    "            invoker.entitlements_path,\n"
+    "            \"$target_gen_dir/$app_name\",\n"
+    "          ]\n"
+    "          code_signing_outputs = [\n"
+    "            \"$bundle_root_dir/$app_name\",\n"
+    "            \"$bundle_root_dir/_CodeSignature/CodeResources\",\n"
+    "            \"$bundle_root_dir/embedded.mobileprovision\",\n"
+    "            \"$target_gen_dir/$app_name.xcent\",\n"
+    "          ]\n"
+    "          code_signing_args = [\n"
+    "            \"-i=\" + ios_code_signing_identity,\n"
+    "            \"-b=\" + rebase_path(\n"
+    "                \"$target_gen_dir/$app_name\", root_build_dir),\n"
+    "            \"-e=\" + rebase_path(\n"
+    "                invoker.entitlements_path, root_build_dir),\n"
+    "            \"-e=\" + rebase_path(\n"
+    "                \"$target_gen_dir/$app_name.xcent\", root_build_dir),\n"
+    "            rebase_path(bundle_root_dir, root_build_dir),\n"
+    "          ]\n"
+    "        } else {\n"
+    "          deps += [ \":${app_name}_bundle_executable\" ]\n"
+    "        }\n"
     "      }\n"
     "    }\n"
     "  }\n";
 
 Value RunCreateBundle(Scope* scope,
                       const FunctionCallNode* function,
                       const std::vector<Value>& args,
                       BlockNode* block,
                       Err* err) {
   return ExecuteGenericTarget(functions::kCreateBundle, scope, function, args,
@@ skipping 315 matching lines @@
   const Template* templ = scope->GetTemplate(target_type);
   if (templ)
     return templ->Invoke(scope, function, sub_args, block, err);
 
   // Otherwise, assume the target is a built-in target type.
   return ExecuteGenericTarget(target_type.c_str(), scope, function, sub_args,
                               block, err);
 }
 
 }  // namespace functions