Disable element enterprise jobs in forks CI

.github/workflows/build_enterprise.yml

@@ -17,7 +17,7 @@ jobs:
     name: Build Enterprise APKs
     runs-on: ubuntu-latest
     # Skip in forks
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     strategy:
       matrix:
         variant: [debug, release, nightly]

.github/workflows/danger.yml

@@ -7,15 +7,14 @@ jobs:
     runs-on: ubuntu-latest
     name: Danger main check
     # Skip in forks, it doesn't work even with the fallback token
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - uses: actions/checkout@v4
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - run: |
           npm install --save-dev @babel/plugin-transform-flow-strip-types

.github/workflows/generate_github_pages.yml

@@ -9,7 +9,7 @@ jobs:
   generate-github-pages:
     runs-on: ubuntu-latest
     # Skip in forks
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - name: ⏬ Checkout with LFS
         uses: nschloe/[email protected]

.github/workflows/gradle-wrapper-update.yml

@@ -9,7 +9,7 @@ jobs:
   update-gradle-wrapper:
     runs-on: ubuntu-latest
     # Skip in forks
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' }}
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-java@v4

.github/workflows/nightly.yml

@@ -14,7 +14,8 @@ jobs:
   nightly:
     name: Build and publish nightly bundle to Firebase
     runs-on: ubuntu-latest
-    if: ${{ github.repository == 'element-hq/element-x-android' }}
+    # Skip in forks
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - uses: actions/checkout@v4
       - name: Use JDK 21

.github/workflows/nightlyReports.yml

@@ -15,6 +15,7 @@ jobs:
   nightlyReports:
     name: Create kover report artifact and upload sonar result.
     runs-on: ubuntu-latest
+    # Skip in forks
     if: ${{ github.repository == 'element-hq/element-x-android' }}
     steps:
       - name: ⏬ Checkout with LFS

.github/workflows/nightly_enterprise.yml

@@ -14,6 +14,7 @@ jobs:
   nightly:
     name: Build and publish Enterprise nightly bundle to Firebase
     runs-on: ubuntu-latest
+    # Skip in forks
     if: ${{ github.repository == 'element-hq/element-x-android' }}
     steps:
       - uses: actions/checkout@v4

.github/workflows/quality.yml

@@ -20,11 +20,13 @@ jobs:
       - uses: actions/checkout@v4
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         run: git submodule update --init --recursive
       - name: Run code quality check suite
         run: ./tools/check/check_code_quality.sh
@@ -78,11 +80,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - name: Use JDK 21
         uses: actions/setup-java@v4
@@ -118,11 +122,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - name: Use JDK 21
         uses: actions/setup-java@v4
@@ -162,11 +168,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - name: Use JDK 21
         uses: actions/setup-java@v4
@@ -202,11 +210,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - name: Use JDK 21
         uses: actions/setup-java@v4
@@ -242,11 +252,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' }}
         run: git submodule update --init --recursive
       - name: Use JDK 21
         uses: actions/setup-java@v4
@@ -277,7 +289,8 @@ jobs:
     name: Project Check Suite
     runs-on: ubuntu-latest
     needs: [konsist, lint, ktlint, detekt]
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    # Skip in forks
+    if: ${{ github.repository == 'element-hq/element-x-android' }}
     steps:
       - uses: actions/checkout@v4
         with:

.github/workflows/release.yml

@@ -42,15 +42,17 @@ jobs:
   enterprise:
     name: Create App Bundle Enterprise
     runs-on: ubuntu-latest
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    # Skip in forks
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     concurrency:
       group: ${{ format('build-release-main-enterprise-{0}', github.sha) }}
       cancel-in-progress: true
     steps:
       - uses: actions/checkout@v4
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules

.github/workflows/sync-localazy.yml

@@ -9,7 +9,7 @@ jobs:
   sync-localazy:
     runs-on: ubuntu-latest
     # Skip in forks
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - uses: actions/checkout@v4
       - name: Use JDK 21

.github/workflows/sync-sas-strings.yml

@@ -9,7 +9,7 @@ jobs:
   sync-sas-strings:
     runs-on: ubuntu-latest
     # Skip in forks
-    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+    if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
     # No concurrency required, runs every time on a schedule.
     steps:
       - uses: actions/checkout@v4

.github/workflows/tests.yml

@@ -40,11 +40,13 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
       - name: Add SSH private keys for submodule repositories
         uses: webfactory/[email protected]
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         with:
           ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
       - name: Clone submodules
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         run: git submodule update --init --recursive
       - name: ☕️ Use JDK 21
         uses: actions/setup-java@v4
@@ -83,6 +85,8 @@ jobs:
       # https://github.com/codecov/codecov-action
       - name: ☂️ Upload coverage reports to codecov
         uses: codecov/codecov-action@v4
+        # Skip in forks
+        if: ${{ github.repository == 'element-hq/element-x-android' && ('pull_request' != github.event_name || github.event.pull_request.head.repo.full_name == github.repository) }}
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}

app/src/gplay/res/xml/network_security_config.xml

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <!-- Do not allow clearText traffic -->
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <!-- Do not allow system and user certificates by default -->
+
+            <!-- Allow only Tchap intermediate certificate authority -->
+            <certificates src="@raw/certignaservicesrootca" />
+        </trust-anchors>
+    </base-config>
+
+    <!-- Allow system certificates for firebase if used. No effect on FDroid variant -->
+    <domain-config cleartextTrafficPermitted="false">
+        <domain includeSubdomains="false">firebaseinstallations.googleapis.com</domain>
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    </domain-config>
+
+    <debug-overrides>
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+    </debug-overrides>
+</network-security-config>

features/createroom/impl/src/main/kotlin/io/element/android/features/createroom/impl/components/SearchMultipleUsersResultItem.kt

@@ -23,6 +23,7 @@ import io.element.android.libraries.usersearch.api.UserSearchResult
 
 @Composable
 fun SearchMultipleUsersResultItem(
+    isDebugBuild: Boolean,
     searchResult: UserSearchResult,
     isUserSelected: Boolean,
     onCheckedChange: (Boolean) -> Unit,
@@ -41,6 +42,7 @@ fun SearchMultipleUsersResultItem(
         )
     }
     CheckableUserRow(
+        isDebugBuild = isDebugBuild,
         checked = isUserSelected,
         modifier = modifier,
         data = data,
@@ -53,6 +55,7 @@ fun SearchMultipleUsersResultItem(
 internal fun SearchMultipleUsersResultItemPreview() = ElementThemedPreview {
     Column {
         SearchMultipleUsersResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(
                 aMatrixUser(),
                 isUnresolved = false
@@ -62,6 +65,7 @@ internal fun SearchMultipleUsersResultItemPreview() = ElementThemedPreview {
         )
         HorizontalDivider()
         SearchMultipleUsersResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(
                 aMatrixUser(),
                 isUnresolved = false
@@ -71,6 +75,7 @@ internal fun SearchMultipleUsersResultItemPreview() = ElementThemedPreview {
         )
         HorizontalDivider()
         SearchMultipleUsersResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(
                 aMatrixUser(),
                 isUnresolved = true
@@ -80,6 +85,7 @@ internal fun SearchMultipleUsersResultItemPreview() = ElementThemedPreview {
         )
         HorizontalDivider()
         SearchMultipleUsersResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(
                 aMatrixUser(),
                 isUnresolved = true

features/createroom/impl/src/main/kotlin/io/element/android/features/createroom/impl/components/SearchSingleUserResultItem.kt

@@ -23,6 +23,7 @@ import io.element.android.libraries.usersearch.api.UserSearchResult
 
 @Composable
 fun SearchSingleUserResultItem(
+    isDebugBuild: Boolean,
     searchResult: UserSearchResult,
     onClick: () -> Unit,
     modifier: Modifier = Modifier,
@@ -35,6 +36,7 @@ fun SearchSingleUserResultItem(
         )
     } else {
         MatrixUserRow(
+            isDebugBuild = isDebugBuild,
             modifier = modifier.clickable(onClick = onClick),
             matrixUser = searchResult.matrixUser,
             avatarSize = AvatarSize.UserListItem,
@@ -47,11 +49,13 @@ fun SearchSingleUserResultItem(
 internal fun SearchSingleUserResultItemPreview() = ElementThemedPreview {
     Column {
         SearchSingleUserResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(aMatrixUser(), isUnresolved = false),
             onClick = {},
         )
         HorizontalDivider()
         SearchSingleUserResultItem(
+            isDebugBuild = false,
             searchResult = UserSearchResult(aMatrixUser(), isUnresolved = true),
             onClick = {},
         )

features/createroom/impl/src/main/kotlin/io/element/android/features/createroom/impl/components/SearchUserBar.kt

@@ -39,6 +39,7 @@ import kotlinx.collections.immutable.ImmutableList
 @OptIn(ExperimentalMaterial3Api::class)
 @Composable
 fun SearchUserBar(
+    isDebugBuild: Boolean,
     query: String,
     state: SearchBarResultState<ImmutableList<UserSearchResult>>,
     showLoader: Boolean,
@@ -103,6 +104,7 @@ fun SearchUserBar(
                 if (isMultiSelectionEnable) {
                     itemsIndexed(users) { index, searchResult ->
                         SearchMultipleUsersResultItem(
+                            isDebugBuild = isDebugBuild,
                             modifier = Modifier.fillMaxWidth(),
                             searchResult = searchResult,
                             isUserSelected = selectedUsers.contains(searchResult.matrixUser),
@@ -121,6 +123,7 @@ fun SearchUserBar(
                 } else {
                     itemsIndexed(users) { index, searchResult ->
                         SearchSingleUserResultItem(
+                            isDebugBuild = isDebugBuild,
                             modifier = Modifier.fillMaxWidth(),
                             searchResult = searchResult,
                             onClick = { onUserSelect(searchResult.matrixUser) }

features/createroom/impl/src/main/kotlin/io/element/android/features/createroom/impl/components/UserListView.kt

@@ -44,6 +44,7 @@ fun UserListView(
         modifier = modifier,
     ) {
         SearchUserBar(
+            isDebugBuild = state.isDebugBuild,
             modifier = Modifier.fillMaxWidth(),
             query = state.searchQuery,
             state = state.searchResults,
@@ -89,6 +90,7 @@ fun UserListView(
                             recentDirectRoom.matrixUser.userId == it.userId
                         }
                         CheckableUserRow(
+                            isDebugBuild = state.isDebugBuild,
                             checked = isSelected,
                             onCheckedChange = {
                                 if (isSelected) {

features/createroom/impl/src/main/kotlin/io/element/android/features/createroom/impl/root/CreateRoomRootPresenter.kt

@@ -57,6 +57,7 @@ class CreateRoomRootPresenter @Inject constructor(
         }
 
         return CreateRoomRootState(
+            isDebugBuild = buildMeta.isDebuggable,
             applicationName = buildMeta.applicationName,
             userListState = userListState,
             startDmAction = startDmActionState.value,