name: Build Hack-Browser-Data Release
on:
    release:
        types: [created]

jobs:
    build:
        name: Build Binary
        runs-on: ${{ matrix.os }}
        strategy:
            matrix:
                os: [windows-latest, macos-latest]
                arch: [amd64]
                # We sometimes use different verbiage for things (e.g. "darwin"
                # for the GOOS build flag and "osx" in the actual release ZIP).
                # We need to specify those here.
                include:
                    - os: windows-latest
                      goos: windows
                      bin: 'hack-browser-data.exe'
                      releaseos: windows
                    - os: macos-latest
                      goos: darwin
                      bin: 'hack-browser-data'
                      releaseos: osx
                # Don't build windows-32bit due to missing MinGW dependencies
                # Don't build osx-32bit due to eventual drop in Go support
                exclude:
                    - os: windows-latest
                      arch: '386'
                    - os: macos-latest
                      arch: '386'
        steps:
            - name: Set up Go
              uses: actions/setup-go@v2
              with:
                go-version: 1.14
            # - if: matrix.os == 'ubuntu-latest'
            #  run: sudo apt-get update && sudo apt-get install -y gcc-multilib
            # - if: matrix.arch == '386'
            #  run: echo "::set-env name=RELEASE::gophish-${{ github.event.release.tag_name }}-${{ matrix.releaseos}}-32bit"
            - if: matrix.arch == 'amd64'
              run: echo "::set-env name=RELEASE::hack-browser-data-${{ github.event.release.tag_name}}-${{ matrix.releaseos}}-64bit"
            - uses: actions/checkout@v2
            - name: Build ${{ matrix.goos }}/${{ matrix.arch }}
              run: go build -ldflags '-w -s' -o ${{ matrix.bin }}
              env:
                GOOS: ${{ matrix.goos }}
                GOARCH: ${{ matrix.arch }}
                CGO_ENABLED: 1
            - name: Upload to artifacts
              uses: actions/upload-artifact@v2
              with:
                name: ${{ env.RELEASE }}
                path: ${{ matrix.bin }}

    package:
        name: Package Assets
        runs-on: ubuntu-latest
        needs: build
        steps:
            - uses: actions/checkout@v2
            - uses: actions/download-artifact@v2
              with:
                path: bin
            - name: Package Releases
              run: |
                mkdir releases;
                for RELEASE_DIR in bin/*
                do
                  echo "Creating release $RELEASE_DIR"
                  for BINARY in $RELEASE_DIR/*
                  do
                    chmod 777 $BINARY;
                    cp $BINARY .;
                    zip -r releases/$(basename $RELEASE_DIR).zip \
                      $(basename ${BINARY}) \
                      README.md \
                      config.json;
                    rm $BINARY;
                  done
                done
            - name: Upload to artifacts
              uses: actions/upload-artifact@v2
              with:
                name: releases
                path: releases/*.zip

    upload:
        name: Upload to the Release
        runs-on: ubuntu-latest
        needs: package
        steps:
            - uses: actions/download-artifact@v2
              with:
                name: releases
                path: releases/
            # I would love to use @actions/upload-release-asset, but they don't
            # support wildcards in the asset path. Ref #9, #24, and #47
            - name: Upload Archives to Release
              env:
                UPLOAD_URL: ${{ github.event.release.upload_url }}
                API_HEADER: "Accept: application/vnd.github.v3+json"
                AUTH_HEADER: "Authorization: token ${{ secrets.GITHUB_TOKEN }}"
              run: |
                UPLOAD_URL=$(echo -n $UPLOAD_URL | sed s/\{.*//g)
                for FILE in releases/*
                do
                  echo "Uploading ${FILE}";
                  curl \
                    -H "${API_HEADER}" \
                    -H "${AUTH_HEADER}" \
                    -H "Content-Type: $(file -b --mime-type ${FILE})" \
                    --data-binary "@${FILE}" \
                    "${UPLOAD_URL}?name=$(basename ${FILE})";
                done
            - name: Generate SHA256 Hashes
              env:
                API_HEADER: "Accept: application/vnd.github.v3+json"
                AUTH_HEADER: "Authorization: token ${{ secrets.GITHUB_TOKEN }}"
                RELEASE_URL: ${{ github.event.release.url }}
              run: |
                HASH_TABLE="| SHA256 Hash | Filename |"
                HASH_TABLE="${HASH_TABLE}\n|-----|-----|\n"
                for FILE in releases/*
                do
                  FILENAME=$(basename ${FILE})
                  HASH=$(sha256sum ${FILE} | cut -d ' ' -f 1)
                  HASH_TABLE="${HASH_TABLE}|${HASH}|${FILENAME}|\n"
                done
                echo "${HASH_TABLE}"
                curl \
                  -XPATCH \
                  -H "${API_HEADER}" \
                  -H "${AUTH_HEADER}" \
                  -H "Content-Type: application/json" \
                  -d "{\"body\": \"${HASH_TABLE}\"}" \
                  "${RELEASE_URL}";