module.exports = { friendlyName: 'Delete android device', description: 'Deletes a device of an Android enterprise', inputs: { androidEnterpriseId: { type: 'string', required: true, }, deviceId: { type: 'string', required: true, }, }, exits: { success: { description: 'The device of an Android enterprise was successfully deleted.' } }, fn: async function ({ androidEnterpriseId, deviceId}) { // Extract fleetServerSecret from the Authorization header let authHeader = this.req.get('authorization'); let fleetServerSecret; if (authHeader && authHeader.startsWith('Bearer')) { fleetServerSecret = authHeader.replace('Bearer', '').trim(); } else { return this.res.unauthorized('Authorization header with Bearer token is required'); } // Authenticate this request let thisAndroidEnterprise = await AndroidEnterprise.findOne({ androidEnterpriseId: androidEnterpriseId }); // Return a 404 response if no records are found. if (!thisAndroidEnterprise) { return this.res.notFound(); } // Return an unauthorized response if the provided secret does not match. if (thisAndroidEnterprise.fleetServerSecret !== fleetServerSecret) { return this.res.unauthorized(); } // Check the list of Android Enterprises managed by Fleet to see if this Android Enterprise is still managed. let isEnterpriseManagedByFleet = await sails.helpers.androidProxy.getIsEnterpriseManagedByFleet(androidEnterpriseId); // Return a 404 response if this Android enterprise is no longer managed by Fleet. if(!isEnterpriseManagedByFleet) { return this.res.notFound(); } // Delete the device for this Android enterprise. // Note: We're using sails.helpers.flow.build here to handle any errors that occur using google's node library. await sails.helpers.flow.build(async () => { let { google } = require('googleapis'); let androidmanagement = google.androidmanagement('v1'); let googleAuth = new google.auth.GoogleAuth({ scopes: ['https://www.googleapis.com/auth/androidmanagement'], credentials: { client_email: sails.config.custom.androidEnterpriseServiceAccountEmailAddress,// eslint-disable-line camelcase private_key: sails.config.custom.androidEnterpriseServiceAccountPrivateKey,// eslint-disable-line camelcase }, }); // Acquire the google auth client, and bind it to all future calls let authClient = await googleAuth.getClient(); google.options({ auth: authClient }); // [?]: https://googleapis.dev/nodejs/googleapis/latest/androidmanagement/classes/Resource$Enterprises$Devices.html#delete await androidmanagement.enterprises.devices.delete({ name: `enterprises/${androidEnterpriseId}/devices/${deviceId}`, }); }).intercept((err) => { return new Error(`When attempting to delete a device for an Android enterprise (${androidEnterpriseId}), an error occurred. Error: ${err}`); }); // Return success response to the Fleet server. return {}; } };