diff --git a/client/ios/Runner.xcodeproj/project.pbxproj b/client/ios/Runner.xcodeproj/project.pbxproj index 901c5fc..3a6b88b 100644 --- a/client/ios/Runner.xcodeproj/project.pbxproj +++ b/client/ios/Runner.xcodeproj/project.pbxproj @@ -697,10 +697,8 @@ ); PRODUCT_BUNDLE_IDENTIFIER = com.yanmei.jiu; PRODUCT_NAME = "$(TARGET_NAME)"; - CODE_SIGN_STYLE = Manual; + CODE_SIGN_STYLE = Automatic; DEVELOPMENT_TEAM = BYL4KQHMTN; - PROVISIONING_PROFILE_SPECIFIER = "Jiu App Store"; - "CODE_SIGN_IDENTITY[sdk=iphoneos*]" = "Apple Distribution"; SWIFT_OBJC_BRIDGING_HEADER = "Runner/Runner-Bridging-Header.h"; SWIFT_VERSION = 5.0; VERSIONING_SYSTEM = "apple-generic"; diff --git a/scripts/ci/compile-ios.sh b/scripts/ci/compile-ios.sh index fe7ad94..bf71236 100755 --- a/scripts/ci/compile-ios.sh +++ b/scripts/ci/compile-ios.sh @@ -54,29 +54,16 @@ WORK="$(mktemp -d)" # shellcheck disable=SC2064 trap "rm -rf '$WORK'" EXIT -# --- 自动发现已装的 App Store 分发 profile(AppID=TEAM.BUNDLE、无 ProvisionedDevices)--- -PROFILE_NAME="" -PDIR="$HOME/Library/MobileDevice/Provisioning Profiles" -if [ -d "$PDIR" ]; then - for p in "$PDIR"/*.mobileprovision; do - [ -e "$p" ] || continue - plist="$(security cms -D -i "$p" 2>/dev/null)" || continue - appid="$(printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :Entitlements:application-identifier' /dev/stdin 2>/dev/null || true)" - # App Store profile:AppID 匹配且无 ProvisionedDevices(区别于开发/AdHoc profile) - if [ "$appid" = "${TEAM_ID}.${BUNDLE_ID}" ] \ - && ! printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :ProvisionedDevices' /dev/stdin >/dev/null 2>&1; then - PROFILE_NAME="$(printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :Name' /dev/stdin 2>/dev/null || true)" - [ -n "$PROFILE_NAME" ] && break - fi - done -fi -[ -n "$PROFILE_NAME" ] || PROFILE_NAME="Jiu App Store" # 已知已装 profile 名兜底 -echo "==> compile-ios: 使用 provisioning profile '${PROFILE_NAME}'" - # --- 同步版本号 --- sed -i '' "s/^version:.*/version: ${VER}+${BUILD}/" client/pubspec.yaml -# --- ExportOptions.plist(manual 签名,app-store 分发)--- +# --- ExportOptions.plist(automatic 签名,app-store 分发)--- +# 本机 login 里的 Apple Distribution 证书与旧的手动 profile 不配对 +# (profile 是用另一张/旧证书签发的 → archive 报 "profile doesn't include +# signing certificate")。改用**自动签名**:Xcode 用登录的 Apple ID + +# App Store Connect API key(见下 xcodebuild -authenticationKeyPath) 现场 +# 生成/更新与当前证书匹配的 App Store profile(-allowProvisioningUpdates), +# 与 local_test.sh --ios 一致,避免手动材料漂移。 cat > "$WORK/ExportOptions.plist" < @@ -84,18 +71,16 @@ cat > "$WORK/ExportOptions.plist" < methodapp-store teamID${TEAM_ID} - signingStylemanual + signingStyleautomatic uploadBitcode uploadSymbols - provisioningProfiles - - ${BUNDLE_ID}${PROFILE_NAME} - EOF -# --- 构建签名 IPA(用 login keychain 的分发证书 + 上面的 profile)--- +# --- 构建签名 IPA(自动签名;Xcode 现场配对证书+profile)--- +# flutter build ipa 的 archive/export 都会带 -allowProvisioningUpdates(自动签名时), +# 但云端/无交互登录需用 API key 授权 provisioning 更新 → 传 -authenticationKeyPath 等。 cd client flutter build ipa --release \ --build-name="${VER}" \