build: fix code signing issue

- fix: add default entitlements plist
- move notarize code into single script with other build config

Author: kincaidoneil

package-lock.json

@@ -60,6 +60,7 @@
     "@vue/cli-service": "^3.8.0",
     "@vue/eslint-config-prettier": "^4.0.1",
     "@vue/eslint-config-typescript": "^4.0.0",
+    "dotenv": "^8.0.0",
     "electron": "^5.0.2",
     "electron-icon-builder": "^1.0.0",
     "electron-notarize": "^0.1.1",

package.json

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+  </dict>
+</plist>

public/entitlements.mac.plist

@@ -1,5 +1,7 @@
 const path = require('path')
 const webpack = require('webpack')
+const { notarize } = require('electron-notarize')
+require('dotenv').config()
 
 module.exports = {
   pluginOptions: {
@@ -27,10 +29,24 @@ module.exports = {
            * https://kilianvalkhof.com/2019/electron/notarizing-your-electron-application/
            */
           hardenedRuntime: true,
-          gatekeeperAssess: false
+          gatekeeperAssess: false,
+          entitlements: 'public/entitlements.mac.plist',
+          entitlementsInherit: 'public/entitlements.mac.plist'
         },
-        afterSign: 'scripts/notarize.js',
-        // Include ths OS so it's clearer which to download
+        afterSign: async context => {
+          const { electronPlatformName, appOutDir } = context
+          const appName = context.packager.appInfo.productFilename
+
+          if (electronPlatformName === 'darwin') {
+            return notarize({
+              appBundleId: 'io.kava.switch',
+              appPath: `${appOutDir}/${appName}.app`,
+              appleId: process.env.APPLE_ID,
+              appleIdPassword: process.env.APPLE_PASSWORD
+            })
+          }
+        },
+        // Include ths OS so it's clearer which to download from the filename
         artifactName: '${productName}-${os}-v${version}.${ext}'
       },
       chainWebpackRendererProcess: config => {