IdP-Initiated Saml Sign In Implementation

.github/workflows/abtesting.yml

@@ -13,9 +13,10 @@ on:
     - '.github/workflows/common.yml'
     - '.github/workflows/common_cocoapods.yml'
     - '.github/workflows/common_catalyst.yml'
+    - '.github/workflows/common_quickstart.yml'
     - 'Gemfile*'
   schedule:
-    # Run every day at 1am(PST) - cron uses UTC times
+    # Run every day at 2am (PDT) / 5am (EDT) - cron uses UTC times
     - cron: '0 9 * * *'
 
 concurrency:
@@ -40,37 +41,22 @@ jobs:
       product: FirebaseABTesting
 
   quickstart:
-    # Don't run on private repo unless it is a PR.
-    if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'
-
-    env:
+    uses: ./.github/workflows/common_quickstart.yml
+    with:
+      product: ABTesting
+      is_legacy: true
+      setup_command: scripts/setup_quickstart.sh abtesting
+      plist_src_path: scripts/gha-encrypted/qs-database.plist.gpg
+      plist_dst_path: quickstart-ios/database/GoogleService-Info.plist
+    secrets:
       plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
-      signin_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
-    runs-on: macos-15
-    steps:
-    - uses: actions/checkout@v4
-    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
-    - name: Xcode
-      run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
-    - name: Setup quickstart
-      env:
-        LEGACY: true
-      run: scripts/setup_quickstart.sh abtesting
-    - name: Install Secret GoogleService-Info.plist
-      run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-abtesting.plist.gpg \
-          quickstart-ios/abtesting/GoogleService-Info.plist "$plist_secret"
-    - name: Test swift quickstart
-      env:
-        LEGACY: true
-      run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart.sh ABTesting true)
 
   quickstart-ftl-cron-only:
     # Don't run on private repo.
     if: github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule'
 
     env:
       plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
-      signin_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
     runs-on: macos-15
     steps:
     - uses: actions/checkout@v4
@@ -86,7 +72,7 @@ jobs:
       run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-abtesting.plist.gpg \
           quickstart-ios/abtesting/GoogleService-Info.plist "$plist_secret"
     - name: Xcode
-      run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: Build swift quickstart
       env:
         LEGACY: true
@@ -116,7 +102,7 @@ jobs:
     - name: Setup Bundler
       run: scripts/setup_bundler.sh
     - name: Xcode
-      run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: PodLibLint ABTesting Cron
       run: |
         scripts/third_party/travis/retry.sh scripts/pod_lib_lint.rb \

.github/workflows/analytics.yml

@@ -9,7 +9,7 @@ on:
     - '.github/workflows/analytics.yml'
     - 'Gemfile*'
   schedule:
-    # Run every day at 1am (PST) - cron uses UTC times
+    # Run every day at 2am (PDT) / 5am (EDT) - cron uses UTC times
     - cron: '0 9 * * *'
 
 concurrency:

.github/workflows/appdistribution.yml

@@ -14,7 +14,7 @@ on:
     - '.github/workflows/common_catalyst.yml'
     - 'Gemfile*'
   schedule:
-    # Run every day at 1am (PST) - cron uses UTC times
+    # Run every day at 2am (PDT) / 5am (EDT) - cron uses UTC times
     - cron: '0 9 * * *'
 
 concurrency:
@@ -54,6 +54,8 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - name: Setup Xcode
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: Setup Bundler
       run: scripts/setup_bundler.sh
     - name: PodLibLint App Distribution Cron

.github/workflows/archiving.yml

@@ -6,7 +6,7 @@ on:
     paths:
     - '.github/workflows/archiving.yml'
   schedule:
-    # Run every day at 2am (PST) - cron uses UTC times
+    # Run every day at 3am (PDT) / 6am (EDT) - cron uses UTC times
     # This is set to 3 hours after zip workflow finishes so zip testing can run after.
     - cron:  '0 10 * * *'
 
@@ -27,6 +27,8 @@ jobs:
         pod: ["FirebaseAppDistribution", "FirebaseInAppMessaging", "FirebasePerformance"]
     steps:
     - uses: actions/checkout@v4
+    - name: Set Xcode version
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app
     - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126
       with:
         cache_key: cron-${{ matrix.os }}
@@ -50,6 +52,8 @@ jobs:
         pod: ["FirebaseABTesting", "FirebaseAuth", "FirebaseCore", "FirebaseCrashlytics", "FirebaseDatabase", "FirebaseFirestore", "FirebaseFunctions", "FirebaseMessaging", "FirebaseRemoteConfig", "FirebaseStorage"]
     steps:
     - uses: actions/checkout@v4
+    - name: Set Xcode version
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app
     - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126
       with:
         cache_key: pods-${{ matrix.os }}

.github/workflows/auth.yml

@@ -13,10 +13,11 @@ on:
     - '.github/workflows/common.yml'
     - '.github/workflows/common_cocoapods.yml'
     - '.github/workflows/common_catalyst.yml'
+    - '.github/workflows/common_quickstart.yml'
     - 'scripts/gha-encrypted/AuthSample/SwiftApplication.plist.gpg'
     - 'Gemfile*'
   schedule:
-    # Run every day at 1am (PST) - cron uses UTC times
+    # Run every day at 2am (PDT) / 5am (EDT) - cron uses UTC times
     - cron:  '0 9 * * *'
 
 env:
@@ -86,30 +87,22 @@ jobs:
       run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
       with:
-        timeout_minutes: 120
+        timeout_minutes: 15
         max_attempts: 3
-        retry_on: error
         retry_wait_seconds: 120
         command: ([ -z $plist_secret ] || scripts/build.sh Auth iOS ${{ matrix.scheme }})
 
   quickstart:
-    # Don't run on private repo unless it is a PR.
-    if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'
-
-    env:
+    uses: ./.github/workflows/common_quickstart.yml
+    with:
+      product: Authentication
+      is_legacy: false
+      setup_command: scripts/setup_quickstart.sh authentication
+      plist_src_path: scripts/gha-encrypted/qs-authentication.plist.gpg
+      plist_dst_path: quickstart-ios/authentication/GoogleService-Info.plist
+      run_tests: false
+    secrets:
       plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
-      signin_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
-    runs-on: macos-15
-    steps:
-    - uses: actions/checkout@v4
-    - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
-    - name: Setup quickstart
-      run: scripts/setup_quickstart.sh authentication
-    - name: Install Secret GoogleService-Info.plist
-      run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-auth.plist.gpg \
-          quickstart-ios/authentication/GoogleService-Info.plist "$plist_secret"
-    - name: Test swift quickstart
-      run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart.sh Authentication false)
 
   # TODO(@sunmou99): currently have issue with this job, will re-enable it once the issue resolved.
   # quickstart-ftl-cron-only:
@@ -129,7 +122,7 @@ jobs:
   #   - name: Setup quickstart
   #     run: scripts/setup_quickstart.sh authentication
   #   - name: Install Secret GoogleService-Info.plist
-  #     run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-auth.plist.gpg \
+  #     run: scripts/decrypt_gha_secret.sh scripts/gha-encrypted/qs-authentication.plist.gpg \
   #         quickstart-ios/authentication/GoogleService-Info.plist "$plist_secret"
   #   - name: Build swift quickstart
   #     run: ([ -z $plist_secret ] || scripts/third_party/travis/retry.sh scripts/test_quickstart_ftl.sh Authentication)
@@ -153,17 +146,20 @@ jobs:
           '--use-static-frameworks'
         ]
     needs: pod_lib_lint
+    env:
+      plist_secret: ${{ secrets.GHASecretsGPGPassphrase1 }}
     steps:
     - uses: actions/checkout@v4
     - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - name: Setup Xcode
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: Setup Bundler
       run: scripts/setup_bundler.sh
     - name: Configure test keychain
       run: scripts/configure_test_keychain.sh
     - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
       with:
-        timeout_minutes: 120
+        timeout_minutes: 15
         max_attempts: 3
-        retry_on: error
         retry_wait_seconds: 120
         command: scripts/third_party/travis/retry.sh scripts/pod_lib_lint.rb FirebaseAuth.podspec --platforms=${{ matrix.target }} ${{ matrix.flags }}

.github/workflows/client_app.yml

@@ -13,7 +13,7 @@ on:
       - "IntegrationTesting/ClientApp/**"
       - "Gemfile*"
   schedule:
-    # Run every day at 12am (PST) - cron uses UTC times
+    # Run every day at 1am (PDT) / 4am (EDT) - cron uses UTC times
     - cron: "0 8 * * *"
 
 env:
@@ -27,21 +27,25 @@ jobs:
   client-app-spm:
     if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'
     strategy:
-      # TODO: Add Xcode matrix when Xcode 16 is ubiquitous on CI runners.
       matrix:
         #TODO(ncooke3): Add multi-platform support: tvOS, macOS, catalyst
         platform: [iOS]
         scheme: [ClientApp]
         os: [macos-14, macos-15]
+        include:
+          - os: macos-14
+            xcode: Xcode_16.2
+          - os: macos-15
+            xcode: Xcode_16.4
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
       - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126
         with:
           cache_key: ${{ matrix.os }}
       - name: Xcode
-        run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
-      - name: Build Client App –– ${{ matrix.platform }}
+        run: sudo xcode-select -s /Applications/${{ matrix.xcode }}.app/Contents/Developer
+      - name: Build Client App - ${{ matrix.platform }}
         run: scripts/third_party/travis/retry.sh ./scripts/build.sh ${{ matrix.scheme }} ${{ matrix.platform }} xcodebuild
 
   client-app-spm-source-firestore:
@@ -50,31 +54,39 @@ jobs:
         FIREBASECI_USE_LATEST_GOOGLEAPPMEASUREMENT: 1
         FIREBASE_SOURCE_FIRESTORE: 1
       strategy:
-        # TODO: Add Xcode matrix when Xcode 16 is ubiquitous on CI runners.
         matrix:
           #TODO(ncooke3): Add multi-platform support: tvOS, macOS, catalyst
           platform: [iOS]
           scheme: [ClientApp]
           os: [macos-14, macos-15]
+          include:
+            - os: macos-14
+              xcode: Xcode_16.2
+            - os: macos-15
+              xcode: Xcode_16.4
       runs-on: ${{ matrix.os }}
       steps:
         - uses: actions/checkout@v4
         - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126
           with:
             cache_key: ${{ matrix.os }}
         - name: Xcode
-          run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
-        - name: Build Client App –– ${{ matrix.platform }}
+          run: sudo xcode-select -s /Applications/${{ matrix.xcode }}.app/Contents/Developer
+        - name: Build Client App - ${{ matrix.platform }}
           run: scripts/third_party/travis/retry.sh ./scripts/build.sh ${{ matrix.scheme }} ${{ matrix.platform }} xcodebuild
 
   client-app-cocoapods:
     # Don't run on private repo unless it is a PR.
     if: (github.repository == 'Firebase/firebase-ios-sdk' && github.event_name == 'schedule') || github.event_name == 'pull_request'
     strategy:
-      # TODO: Add Xcode matrix when Xcode 16 is ubiquitous on CI runners.
       matrix:
         scheme: [ClientApp-CocoaPods]
         os: [macos-14, macos-15]
+        include:
+          - os: macos-14
+            xcode: Xcode_16.2
+          - os: macos-15
+            xcode: Xcode_16.4
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
@@ -85,7 +97,7 @@ jobs:
       - name: Setup Bundler
         run: scripts/setup_bundler.sh
       - name: Xcode
-        run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
+        run: sudo xcode-select -s /Applications/${{ matrix.xcode }}.app/Contents/Developer
       - name: Prereqs
         run: scripts/install_prereqs.sh ClientApp iOS xcodebuild
       - name: Build

.github/workflows/cocoapods-integration.yml

@@ -8,7 +8,7 @@ on:
     - '.github/workflows/cocoapods-integration.yml'
     - 'Gemfile*'
   schedule:
-    # Run every day at 2am (PST) - cron uses UTC times
+    # Run every day at 3am (PDT) / 6am (EDT) - cron uses UTC times
     - cron:  '0 10 * * *'
 
 concurrency:
@@ -26,6 +26,8 @@ jobs:
     - uses: mikehardy/buildcache-action@c87cea0ccd718971d6cc39e672c4f26815b6c126
       with:
         cache_key: ${{ matrix.os }}
+    - name: Xcode
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: Get realpath
       run: brew install coreutils
     - name: Build and test

.github/workflows/combine.yml

@@ -42,7 +42,7 @@ on:
     # - 'Firestore/**' # (Disabled to avoid building Firestore in presubmits)
 
   schedule:
-    # Run every day at 11pm (PST) - cron uses UTC times
+    # Run every day at 12am (PDT) / 3am (EDT) - cron uses UTC times
     - cron:  '0 7 * * *'
 
 concurrency:
@@ -67,6 +67,9 @@ jobs:
 
     - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
 
+    - name: Xcode
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
+
     - name: Install xcpretty
       run: gem install xcpretty
 
@@ -88,6 +91,8 @@ jobs:
       with:
         cache_key: ${{ matrix.os }}
     - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1
+    - name: Xcode
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - name: Setup Bundler
       run: scripts/setup_bundler.sh
     - name: Install xcpretty

.github/workflows/common.yml

@@ -67,7 +67,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Xcode
-        run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
+        run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
       - name: Generate Swift Package.resolved
         id: swift_package_resolve
         run: swift package resolve
@@ -104,10 +104,6 @@ jobs:
         key: ${{needs.spm-package-resolved.outputs.cache_key}}
     - name: Xcode
       run: sudo xcode-select -s /Applications/${{ matrix.xcode }}.app/Contents/Developer
-    - name: Install visionOS, if needed.
-      if: matrix.platform == 'visionOS'
-      run: ls $(xcode-select -p)/Platforms/XROS.platform || \
-        { xcodebuild -downloadPlatform visionOS }
     - name: Run setup command, if needed.
       if: inputs.setup_command != ''
       run: ${{ inputs.setup_command }}
@@ -116,9 +112,8 @@ jobs:
     - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
       if: contains(join(inputs.platforms), matrix.platform) || matrix.os == 'macos-14'
       with:
-        timeout_minutes: 120
+        timeout_minutes: 15
         max_attempts: 3
-        retry_on: error
         retry_wait_seconds: 120
         command: |
           ./scripts/build.sh \

.github/workflows/common_catalyst.yml

@@ -38,12 +38,11 @@ jobs:
     - name: Setup Bundler
       run: scripts/setup_bundler.sh
     - name: Xcode
-      run: sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer
+      run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
     - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
       with:
-        timeout_minutes: 120
+        timeout_minutes: 15
         max_attempts: 3
-        retry_on: error
         retry_wait_seconds: 120
         command: |
           scripts/test_catalyst.sh \