WIP: Auth #2745
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| env: | |
| CARGO_TERM_COLOR: always | |
| jobs: | |
| self-care: | |
| name: Flake self-check | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Check Nix flake inputs | |
| uses: DeterminateSystems/flake-checker-action@v7 | |
| with: | |
| fail-mode: true | |
| pre-commit-checks: | |
| name: "Cargo fmt, typos" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Cargo fmt | |
| run: | | |
| nix develop -i -L .#nightly --command bash -c ' | |
| # Force use of Nix-provided rustfmt | |
| export RUSTFMT=$(command -v rustfmt) | |
| cargo fmt --check | |
| ' | |
| - name: typos | |
| run: nix develop -i -L .#nightly --command typos | |
| examples: | |
| name: "Run examples" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| build-args: | |
| [ | |
| mint-token, | |
| p2pk, | |
| proof-selection, | |
| wallet | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Run example | |
| run: nix develop -i -L .#stable --command cargo r --example ${{ matrix.build-args }} | |
| clippy: | |
| name: "Stable build, clippy and test" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| build-args: | |
| [ | |
| -p cashu, | |
| -p cashu --no-default-features, | |
| -p cashu --no-default-features --features wallet, | |
| -p cashu --no-default-features --features mint, | |
| -p cashu --no-default-features --features "mint swagger", | |
| -p cdk-common, | |
| -p cdk-common --no-default-features, | |
| -p cdk-common --no-default-features --features wallet, | |
| -p cdk-common --no-default-features --features mint, | |
| -p cdk-common --no-default-features --features "mint swagger", | |
| -p cdk, | |
| -p cdk --no-default-features, | |
| -p cdk --no-default-features --features wallet, | |
| -p cdk --no-default-features --features mint, | |
| -p cdk --no-default-features --features "mint swagger", | |
| -p cdk --no-default-features --features auth, | |
| -p cdk --features auth, | |
| -p cdk --no-default-features --features "auth mint", | |
| -p cdk --no-default-features --features "auth wallet", | |
| -p cdk-redb, | |
| -p cdk-sqlite, | |
| -p cdk-sqlite --features sqlcipher, | |
| -p cdk-axum --no-default-features, | |
| -p cdk-axum --no-default-features --features swagger, | |
| -p cdk-axum --no-default-features --features redis, | |
| -p cdk-axum --no-default-features --features "redis swagger", | |
| -p cdk-axum --no-default-features --features "auth redis", | |
| -p cdk-axum, | |
| -p cdk-cln, | |
| -p cdk-lnd, | |
| -p cdk-lnbits, | |
| -p cdk-fake-wallet, | |
| --bin cdk-cli, | |
| --bin cdk-cli --features sqlcipher, | |
| --bin cdk-mintd, | |
| --bin cdk-mintd --features redis, | |
| --bin cdk-mintd --features redb, | |
| --bin cdk-mintd --features "redis swagger redb", | |
| --bin cdk-mintd --features sqlcipher, | |
| --bin cdk-mintd --no-default-features --features lnd, | |
| --bin cdk-mintd --no-default-features --features cln, | |
| --bin cdk-mintd --no-default-features --features lnbits, | |
| --bin cdk-mintd --no-default-features --features fakewallet, | |
| --bin cdk-mintd --no-default-features --features "management-rpc lnd", | |
| --bin cdk-mintd --no-default-features --features "management-rpc cln", | |
| --bin cdk-mintd --no-default-features --features "management-rpc lnbits", | |
| --bin cdk-mintd --no-default-features --features "swagger lnd", | |
| --bin cdk-mintd --no-default-features --features "swagger cln", | |
| --bin cdk-mintd --no-default-features --features "swagger lnbits", | |
| --bin cdk-mint-cli, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Build | |
| run: nix develop -i -L .#stable --command cargo build ${{ matrix.build-args }} | |
| - name: Clippy | |
| run: nix develop -i -L .#stable --command cargo clippy ${{ matrix.build-args }} -- -D warnings | |
| - name: Test | |
| run: nix develop -i -L .#stable --command cargo test ${{ matrix.build-args }} | |
| regtest-itest: | |
| name: "Integration regtest tests" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| build-args: | |
| [ | |
| -p cdk-integration-tests, | |
| ] | |
| database: | |
| [ | |
| REDB, | |
| SQLITE, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Test | |
| run: nix develop -i -L .#stable --command just itest ${{ matrix.database }} | |
| fake-mint-itest: | |
| name: "Integration fake mint tests" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| build-args: | |
| [ | |
| -p cdk-integration-tests, | |
| ] | |
| database: | |
| [ | |
| REDB, | |
| SQLITE, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Clippy | |
| run: nix develop -i -L .#stable --command cargo clippy -- -D warnings | |
| - name: Test fake auth mint | |
| run: nix develop -i -L .#stable --command just fake-mint-itest ${{ matrix.database }} | |
| pure-itest: | |
| name: "Integration fake wallet tests" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Test fake mint | |
| run: nix develop -i -L .#stable --command just test | |
| msrv-build: | |
| name: "MSRV build" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| build-args: | |
| [ | |
| -p cashu --no-default-features --features "wallet mint", | |
| -p cdk-common --no-default-features --features "wallet mint", | |
| -p cdk, | |
| -p cdk --no-default-features --features "mint auth", | |
| -p cdk --no-default-features --features "wallet auth", | |
| -p cdk --no-default-features --features "http_subscription", | |
| -p cdk-axum, | |
| -p cdk-axum --no-default-features --features redis, | |
| -p cdk-lnbits, | |
| -p cdk-fake-wallet, | |
| -p cdk-cln, | |
| -p cdk-lnd, | |
| -p cdk-mint-rpc, | |
| -p cdk-sqlite, | |
| -p cdk-mintd, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Build | |
| run: nix develop -i -L .#msrv --command cargo build ${{ matrix.build-args }} | |
| check-wasm: | |
| name: Check WASM | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| rust: | |
| - stable | |
| target: | |
| - wasm32-unknown-unknown | |
| build-args: | |
| [ | |
| -p cdk, | |
| -p cdk --no-default-features, | |
| -p cdk --no-default-features --features wallet, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Build cdk and binding | |
| run: nix develop -i -L ".#${{ matrix.rust }}" --command cargo build ${{ matrix.build-args }} --target ${{ matrix.target }} | |
| check-wasm-msrv: | |
| name: Check WASM | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| rust: | |
| - msrv | |
| target: | |
| - wasm32-unknown-unknown | |
| build-args: | |
| [ | |
| -p cdk, | |
| -p cdk --no-default-features, | |
| -p cdk --no-default-features --features wallet, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Build cdk wasm | |
| run: nix develop -i -L ".#${{ matrix.rust }}" --command cargo build ${{ matrix.build-args }} --target ${{ matrix.target }} | |
| fake-mint-auth-itest: | |
| name: "Integration fake mint auth tests" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| database: | |
| [ | |
| REDB, | |
| SQLITE, | |
| ] | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v11 | |
| - name: Nix Cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v6 | |
| - name: Rust Cache | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Start Keycloak with Backup | |
| run: | | |
| docker compose -f misc/keycloak/docker-compose-recover.yml up -d | |
| until docker logs $(docker ps -q --filter "ancestor=quay.io/keycloak/keycloak:25.0.6") | grep "Keycloak 25.0.6 on JVM (powered by Quarkus 3.8.5) started"; do sleep 1; done | |
| - name: Verify Keycloak Import | |
| run: | | |
| docker logs $(docker ps -q --filter "ancestor=quay.io/keycloak/keycloak:25.0.6") | grep "Imported" | |
| - name: Test fake auth mint | |
| run: nix develop -i -L .#stable --command just fake-auth-mint-itest ${{ matrix.database }} http://127.0.0.1:8080/realms/cdk-test-realm/.well-known/openid-configuration | |
| - name: Stop and clean up Docker Compose | |
| run: | | |
| docker compose -f misc/keycloak/docker-compose-recover.yml down | |