mirror of
https://github.com/fleetdm/fleet
synced 2026-05-06 14:58:33 +00:00
e0c1929e4b
Closes #30935 Changes: - Updated created-android-signup-url to return a bad request response if a provided callback URL cannot be used to create an Android Enterprise signup URL.
81 lines
3.2 KiB
JavaScript
Vendored
81 lines
3.2 KiB
JavaScript
Vendored
module.exports = {
|
|
|
|
|
|
friendlyName: 'Create android signup url',
|
|
|
|
|
|
description: 'Creates and returns a signup URL for an android enterprise.',
|
|
|
|
|
|
inputs: {
|
|
callbackUrl: {
|
|
type: 'string',
|
|
required: true,
|
|
}
|
|
},
|
|
|
|
|
|
exits: {
|
|
success: { description: 'A signup URL has been sent to the requesting Fleet server.'},
|
|
enterpriseAlreadyExists: { description: 'An Android enterprise already exists for this Fleet instance.', statusCode: 409 },
|
|
invalidCallbackUrl: { description: 'The provided callbackUrl could not be used to create an Android enterprise signup URL.', responseType: 'badRequest'}
|
|
},
|
|
|
|
|
|
fn: async function ({ callbackUrl }) {
|
|
|
|
|
|
// Parse the Fleet server url from the origin header.
|
|
let fleetServerUrl = this.req.get('Origin');
|
|
if(!fleetServerUrl){
|
|
return this.res.badRequest();
|
|
}
|
|
|
|
// Check the database for an existing record for this Fleet server.
|
|
let connectionforThisInstanceExists = await AndroidEnterprise.findOne({fleetServerUrl: fleetServerUrl});
|
|
if(connectionforThisInstanceExists){
|
|
throw 'enterpriseAlreadyExists';
|
|
}
|
|
|
|
|
|
// Get a signup url for this Android enterprise.
|
|
// Note: We're using sails.helpers.flow.build here to handle any errors that occurr using google's node library.
|
|
let signupUrl = await sails.helpers.flow.build(async ()=>{
|
|
let { google } = require('googleapis');
|
|
let androidmanagement = google.androidmanagement('v1');
|
|
let googleAuth = new google.auth.GoogleAuth({
|
|
scopes: ['https://www.googleapis.com/auth/androidmanagement'],
|
|
credentials: {
|
|
client_email: sails.config.custom.androidEnterpriseServiceAccountEmailAddress,// eslint-disable-line camelcase
|
|
private_key: sails.config.custom.androidEnterpriseServiceAccountPrivateKey,// eslint-disable-line camelcase
|
|
},
|
|
});
|
|
// Acquire the google auth client, and bind it to all future calls
|
|
let authClient = await googleAuth.getClient();
|
|
google.options({auth: authClient});
|
|
// [?] https://googleapis.dev/nodejs/googleapis/latest/androidmanagement/classes/Resource$Signupurls.html#create
|
|
let createSignupUrlResponse = await androidmanagement.signupUrls.create({
|
|
// The callback URL that the admin will be redirected to after successfully creating an enterprise. Before redirecting there the system will add a query parameter to this URL named enterpriseToken which will contain an opaque token to be used for the create enterprise request. The URL will be parsed then reformatted in order to add the enterpriseToken parameter, so there may be some minor formatting changes.
|
|
callbackUrl: callbackUrl,
|
|
// The ID of the Google Cloud Platform project which will own the enterprise.
|
|
projectId: sails.config.custom.androidEnterpriseProjectId,
|
|
});
|
|
return createSignupUrlResponse.data;
|
|
}).intercept({status: 400}, (unusedErr)=>{
|
|
return {'invalidCallbackUrl': 'The provided Callback Url could not be used to create an Android enterprise signup URL.'};
|
|
}).intercept((err)=>{
|
|
return new Error(`When attempting to create a singup url for a new Android enterprise, an error occurred. Error: ${err}`);
|
|
});
|
|
|
|
|
|
return {
|
|
url: signupUrl.url,
|
|
name: signupUrl.name,
|
|
};
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
};
|