- Getting started
- Project description
- Project description helpers
- App Extensions
- Accessing resources
- Third-party dependencies
- Caching dependencies
- Microfeatures architecture
- Managing versions
- Adoption guidelines
- Best practices
- Frequently asked questions
- Edit your projects
- Generate projects
- Focus on targets
- Sign your apps
- Build schemes
- Scaffold files
- Project graph
- Set up environment
- Migrate Xcode projects
- Generate documentation
- Generate secrets
- Clean the local environment
In order for Tuist’s Cloud features to interact with HTTP servers, the exposed API needs to conform with the contract described in this page.
When using Tuist’s Cloud features from a local environments, users will need to authenticate with the API. If the authentication is successful, a token will be generated and stored safely in the user’s environment. The generated token must be unique to the user and valid across all the projects the user has access to.
The authentication flow:
- When the user runs
tuist cloud auth, Tuist sends the user to
- The user authenticates on the server.
- When the authentication finishes, the server redirects the user to
The URL that triggers the call to localhost should include the any of the following attributes:
- token and account: The generated token and the account identifier if the authentication was successful.
- error: The error message if the authentication failed.
# A successful authenticationhttp://localhost:4455/auth?token=xyz# An errored authentication# Notice that the error argument has been escaped.http://localhost:4455/auth?error=Couldn%27t%20find%20the%20current%20user
How the server decides to authenticate the user is up to the server. However, we recommend authenticating using the version control provider (e.g. GitHub). That'll allow tying the project to a repository and leverage the API to know whether the user has access to the repository and therefore the project.
Continuous integration (CI) authentication
projects will authenticate using a secret token that is associated to the project.
The variable should be present in the environment with the name
For security reasons,
we recommend defining that variable as a secret variables.
Tuist will authenticate HTTP requests by including an
curl -v -H "Authorization: token TOKEN" https://cloud.tuist.io/api/...
Depending on the endpoint, the token will represent a project or a user. Each of the endpoints documented in the following sections will indicate what type of token is expected.