Skip to content

case-insenitive Bearer check #134 (#135) #2

case-insenitive Bearer check #134 (#135)

case-insenitive Bearer check #134 (#135) #2

Workflow file for this run

name: CI
on:
push:
branches:
- master
paths:
- src/**
pull_request:
branches:
- master
paths:
- src/**
workflow_dispatch:
jobs:
build:
name: "NGINX: ${{ matrix.nginx-version }}; libjwt: ${{ matrix.libjwt-version }}"
strategy:
matrix:
# NGINX versions to build/test against
nginx-version: ['1.20.2', '1.22.1', '1.24.0', '1.25.3']
# The following versions of libjwt are compatible:
# * v1.0 - v1.12.0
# * v1.12.1 - v1.14.0
# * v1.15.0+
# At the time of writing this:
# * Debian and Ubuntu's repos have v1.10.2
# * EPEL has v1.12.1
# This compiles against each version prior to a breaking change and the latest release
libjwt-version: ['1.12.0', '1.14.0', '1.15.3']
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v3
with:
path: 'ngx-http-auth-jwt-module'
# TODO cache the build result so we don't have to do this every time?
- name: Download jansson
uses: actions/checkout@v3
with:
repository: 'akheron/jansson'
ref: 'v2.14'
path: 'jansson'
- name: Build jansson
working-directory: ./jansson
run: |
cmake . -DJANSSON_BUILD_SHARED_LIBS=1 -DJANSSON_BUILD_DOCS=OFF && \
make && \
make check && \
sudo make install
# TODO cache the build result so we don't have to do this every time?
- name: Download libjwt
uses: actions/checkout@v3
with:
repository: 'benmcollins/libjwt'
ref: 'v${{matrix.libjwt-version}}'
path: 'libjwt'
- name: Build libjwt
working-directory: ./libjwt
run: |
autoreconf -i && \
./configure && \
make all && \
sudo make install
- name: Download NGINX
run: |
mkdir nginx
curl -O http://nginx.org/download/nginx-${{matrix.nginx-version}}.tar.gz
tar -xzf nginx-${{matrix.nginx-version}}.tar.gz --strip-components 1 -C nginx
- name: Configure NGINX
working-directory: ./nginx
run: |
BUILD_FLAGS=''
MAJ=$(echo ${{matrix.nginx-version}} | cut -f1 -d.)
MIN=$(echo ${{matrix.nginx-version}} | cut -f2 -d.)
REV=$(echo ${{matrix.nginx-version}} | cut -f3 -d.)
if [ "${MAJ}" -gt 1 ] || [ "${MAJ}" -eq 1 -a "${MIN}" -ge 23 ]; then
BUILD_FLAGS="${BUILD_FLAGS} --with-cc-opt='-DNGX_LINKED_LIST_COOKIES=1'"
fi
./configure --with-compat --add-dynamic-module=../ngx-http-auth-jwt-module ${BUILD_FLAGS}
- name: Make Modules
working-directory: ./nginx
run: make modules
- name: Create release archive
run: |
cp ./nginx/objs/ngx_http_auth_jwt_module.so ./
tar czf ngx_http_auth_jwt_module_libjwt_${{matrix.libjwt-version}}_nginx_${{matrix.nginx-version}}.tgz ngx_http_auth_jwt_module.so
- name: Upload build artifact
uses: actions/upload-artifact@v3
with:
if-no-files-found: error
name: ngx_http_auth_jwt_module_libjwt_${{matrix.libjwt-version}}_nginx_${{matrix.nginx-version}}.tgz
path: ngx_http_auth_jwt_module_libjwt_${{matrix.libjwt-version}}_nginx_${{matrix.nginx-version}}.tgz
update_releases_page:
name: Upload builds to Releases
if: github.event_name != 'pull_request'
needs:
- build
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Set up variables
id: vars
run: |
echo "date_now=$(date --rfc-3339=seconds)" >> "${GITHUB_OUTPUT}"
- name: Download build artifacts from previous jobs
uses: actions/download-artifact@v3
with:
path: artifacts
- name: Upload builds to Releases
uses: ncipollo/release-action@v1
with:
allowUpdates: true
artifactErrorsFailBuild: true
artifacts: artifacts/*/*
body: |
> [!WARNING]
> This is an automatically generated pre-release version of the module, which includes the latest master branch changes.
> Please report any bugs you find to the issue tracker.
- Build Date: `${{ steps.vars.outputs.date_now }}`
- Commit: ${{ github.sha }}
name: 'Development build: ${{ github.ref_name }}@${{ github.sha }}'
prerelease: true
removeArtifacts: true
tag: dev-build