Check email_verified when handling missing user in oauth controller…
#939
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker | |
| on: | |
| push: | |
| branches: | |
| - main | |
| release: | |
| types: | |
| - published | |
| schedule: | |
| - cron: '0 0 * * 1' | |
| env: | |
| REGISTRY: ghcr.io | |
| IMAGE_NAME: ${{ github.repository }} | |
| jobs: | |
| build-php-base: | |
| name: Build PHP base image on ${{ matrix.os }} | |
| runs-on: ${{ matrix.os }} | |
| permissions: | |
| contents: read | |
| packages: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: ubuntu-24.04 | |
| arch: amd64 | |
| platform: linux/amd64 | |
| - os: ubuntu-24.04-arm | |
| arch: arm64 | |
| platform: linux/arm64 | |
| steps: | |
| - name: Code checkout | |
| uses: actions/checkout@v6 | |
| - name: Setup Docker buildx | |
| uses: docker/setup-buildx-action@v4 | |
| - name: Build the base PHP image | |
| uses: docker/build-push-action@v7 | |
| with: | |
| context: . | |
| file: ./Dockerfile.base | |
| push: false | |
| load: true | |
| platforms: ${{ matrix.platform }} | |
| tags: base-php:${{ matrix.arch }} | |
| cache-from: type=gha,scope=base-php${{ matrix.arch }} | |
| cache-to: type=gha,scope=base-php${{ matrix.arch }} | |
| - name: Export image to file | |
| run: docker save -o base-php-${{ matrix.arch }}.tar base-php:${{ matrix.arch }} | |
| - name: Push the docker build to the artifacts | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: base-php-${{ matrix.arch }}.tar | |
| path: base-php-${{ matrix.arch }}.tar | |
| retention-days: 7 | |
| build-and-push: | |
| name: Build and Push ubuntu-24.04 | |
| runs-on: ubuntu-24.04 | |
| needs: build-php-base | |
| permissions: | |
| contents: read | |
| packages: write | |
| # Start a temp local registry because workflow can not pull from localy loaded images | |
| services: | |
| registry: | |
| image: registry:2 | |
| ports: | |
| - 5000:5000 | |
| # Always run against a tag, even if the commit into the tag has [docker skip] within the commit message. | |
| if: "!contains(github.ref, 'main') || (!contains(github.event.head_commit.message, 'skip docker') && !contains(github.event.head_commit.message, 'docker skip'))" | |
| steps: | |
| # Fetch the latest release tag from GitHub API before checkout and metadata so we can check out the correct ref and tag the image | |
| - name: Get latest release tag (scheduled) | |
| id: release_info | |
| if: github.event_name == 'schedule' | |
| run: | | |
| LATEST_TAG=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" -w "\n%{http_code}" https://api.github.com/repos/${{ github.repository }}/releases/latest | tail -1 | head -1) | |
| HTTP_CODE=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" -w "%{http_code}" -o /dev/null https://api.github.com/repos/${{ github.repository }}/releases/latest) | |
| if [ "$HTTP_CODE" != "200" ]; then | |
| echo "Failed to fetch latest release (HTTP $HTTP_CODE)" | |
| exit 1 | |
| fi | |
| LATEST_TAG=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r '.tag_name') | |
| if [ "$LATEST_TAG" = "null" ] || [ -z "$LATEST_TAG" ]; then | |
| echo "No release found" | |
| exit 1 | |
| fi | |
| echo "version_tag=${LATEST_TAG#v}" >> $GITHUB_OUTPUT | |
| echo "schedule_tag=$LATEST_TAG" >> $GITHUB_OUTPUT | |
| - name: Code checkout | |
| uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ steps.release_info.outputs.schedule_tag || github.ref }} | |
| - name: Docker metadata | |
| id: docker_meta | |
| uses: docker/metadata-action@v6 | |
| with: | |
| images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} | |
| flavor: | | |
| latest=false | |
| tags: | | |
| type=raw,value=latest,enable=${{ (github.event_name == 'release' && github.event.action == 'published' && github.event.release.prerelease == false) || github.event_name == 'schedule' }} | |
| type=raw,value=${{ steps.release_info.outputs.version_tag }},enable=${{ github.event_name == 'schedule' }} | |
| type=ref,event=tag | |
| type=ref,event=branch | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v4 | |
| # We Need to start it in host mode else it can't acces the local registry on port 5000 | |
| - name: Setup Docker buildx | |
| uses: docker/setup-buildx-action@v4 | |
| with: | |
| driver-opts: network=host | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v4 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Get Build Information | |
| id: build_info | |
| run: | | |
| echo "version_tag=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT | |
| echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT | |
| # Download the base PHP image AMD64 | |
| - uses: actions/download-artifact@v8 | |
| with: | |
| name: base-php-amd64.tar | |
| # Download the base PHP image ARM64 | |
| - uses: actions/download-artifact@v8 | |
| with: | |
| name: base-php-arm64.tar | |
| - name: Load base images into local registry | |
| run: | | |
| docker load -i base-php-amd64.tar | |
| docker load -i base-php-arm64.tar | |
| docker tag base-php:amd64 localhost:5000/base-php:amd64 | |
| docker tag base-php:arm64 localhost:5000/base-php:arm64 | |
| docker push localhost:5000/base-php:amd64 | |
| docker push localhost:5000/base-php:arm64 | |
| rm base-php-arm64.tar base-php-amd64.tar | |
| - name: Update version in config/app.php (tag) | |
| if: "(github.event_name == 'release' && github.event.action == 'published') || github.event_name == 'schedule'" | |
| run: | | |
| VERSION="${{ github.event_name == 'schedule' && steps.release_info.outputs.version_tag || steps.build_info.outputs.version_tag }}" | |
| if [ -z "$VERSION" ] || [ "$VERSION" = "refs/heads/main" ]; then | |
| echo "Invalid version tag, refusing to update config" | |
| exit 1 | |
| fi | |
| sed -i "s|'version' => 'canary',|'version' => '$VERSION',|" config/app.php | |
| - name: Build and Push (tag) | |
| uses: docker/build-push-action@v7 | |
| if: "(github.event_name == 'release' && github.event.action == 'published') || github.event_name == 'schedule'" | |
| with: | |
| context: . | |
| file: ./Dockerfile | |
| push: true | |
| platforms: 'linux/amd64,linux/arm64' | |
| build-args: | | |
| VERSION=${{ github.event_name == 'schedule' && steps.release_info.outputs.version_tag || steps.build_info.outputs.version_tag }} | |
| labels: ${{ steps.docker_meta.outputs.labels }} | |
| tags: ${{ steps.docker_meta.outputs.tags }} | |
| cache-from: type=gha,scope=tagged${{ matrix.os }} | |
| cache-to: type=gha,scope=tagged${{ matrix.os }},mode=max | |
| - name: Build and Push (main) | |
| uses: docker/build-push-action@v7 | |
| if: "github.event_name == 'push' && contains(github.ref, 'main')" | |
| with: | |
| context: . | |
| file: ./Dockerfile | |
| push: ${{ github.event_name != 'pull_request' }} | |
| platforms: 'linux/amd64,linux/arm64' | |
| build-args: | | |
| VERSION=dev-${{ steps.build_info.outputs.short_sha }} | |
| labels: ${{ steps.docker_meta.outputs.labels }} | |
| tags: ${{ steps.docker_meta.outputs.tags }} | |
| cache-from: type=gha,scope=${{ matrix.os }} | |
| cache-to: type=gha,scope=${{ matrix.os }},mode=max |