mirror of
https://github.com/fleetdm/fleet
synced 2026-05-10 18:51:03 +00:00
* WIP * Adding DEP functionality to Fleet * Better organize additional MDM code * Add cmdr.py and amend API paths * Fix lint * Add demo file * Fix demo.md * go mod tidy * Add munki setup to Fleet * Add diagram to demo.md * Add fixes * Update TODOs and demo.md * Fix cmdr.py and add TODO * Add endpoints to demo.md * Add more Munki PoC/demo stuff * WIP * Remove proposals from PoC * Replace prepare commands with fleetctl commands * Update demo.md with current state * Remove config field * Amend demo * Remove Munki setup from MVP-Dogfood * Update demo.md * Add apple mdm commands (#7769) * fleetctl enqueue mdm command * fix deps * Fix build Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com> * Add command to upload installers * go mod tidy * fix subcommands help There is a bug in urfave/cli where help text is not generated properly when subcommands are nested too deep. * Add support for installing apps * Add a way to list enrolled devices * Add dep listing * Rearrange endpoints * Move DEP routine to schedule * Define paths globally * Add a way to list enrollments and installers * Parse device-ids as comma-separated string * Remove unused types * Add simple commands and nest under enqueue-command * Fix simple commands * Add help to enqueue-command * merge apple_mdm database * Fix commands * update nanomdm * Split nanomdm and nanodep schemas * Set 512 MB in memory for upload * Remove empty file * Amend profile * Add sample commands * Add delete installers and fix bug in DEP profile assigning * Add dogfood.md deployment guide * Update schema.sql * Dump schema with MySQL 5 * Set default value for authenticate_at * add tokens to enrollment profiles When a device downloads an MDM enrollment profile, verify the token passed as a query parameter. This ensures untrusted devices don't enroll with our MDM server. - Rename enrollments to enrollment profiles. Enrollments is used by nano to refer to devices that are enrolled with MDM - Rename endpoint /api/<version>/fleet/mdm/apple/enrollments to ../enrollmentprofiles - Generate a token for authentication when creating an enrollment profile - Return unauthorized if token is invalid when downloading an enrollment profile from /api/mdm/apple/enroll?token= * remove mdm apple server url * update docs * make dump-test-schema * Update nanomdm with missing prefix table * Add docs and simplify changes * Add changes file * Add method docs * Fix compile and revert prepare.go changes * Revert migration status check change * Amend comments * Add more docs * Clarify storage of installers * Remove TODO * Remove unused * update dogfood.md * remove cmdr.py * Add authorization tests * Add TODO comment * use kitlog for nano logging * Add yaml tags * Remove unused flag * Remove changes file * Only run DEP routine if MDM is enabled * Add docs to all new exported types * Add docs * more nano logging changes * Fix unintentional removal * more nano logging changes * Fix compile test * Use string for configs and fix config test * Add docs and amend changes * revert changes to basicAuthHandler * remove exported BasicAuthHandler * rename rego authz type * Add more information to dep list * add db tag * update deps * Fix schema * Remove unimplemented Co-authored-by: Michal Nicpon <39177923+michalnicp@users.noreply.github.com> Co-authored-by: Michal Nicpon <michal@fleetdm.com>
110 lines
2.7 KiB
Go
110 lines
2.7 KiB
Go
// Package fleethttp provides uniform creation and configuration of HTTP
|
|
// related types used throughout Fleet.
|
|
package fleethttp
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
type clientOpts struct {
|
|
timeout time.Duration
|
|
tlsConf *tls.Config
|
|
noFollow bool
|
|
cookieJar http.CookieJar
|
|
}
|
|
|
|
// ClientOpt is the type for the client-specific options.
|
|
type ClientOpt func(o *clientOpts)
|
|
|
|
// WithTimeout sets the timeout to use for the HTTP client.
|
|
func WithTimeout(t time.Duration) ClientOpt {
|
|
return func(o *clientOpts) {
|
|
o.timeout = t
|
|
}
|
|
}
|
|
|
|
// WithTLSClientConfig provides the TLS configuration to use for the HTTP
|
|
// client's transport.
|
|
func WithTLSClientConfig(conf *tls.Config) ClientOpt {
|
|
return func(o *clientOpts) {
|
|
o.tlsConf = conf.Clone()
|
|
}
|
|
}
|
|
|
|
// WithFollowRedir configures the HTTP client to follow redirections or not,
|
|
// based on the follow value.
|
|
func WithFollowRedir(follow bool) ClientOpt {
|
|
return func(o *clientOpts) {
|
|
o.noFollow = !follow
|
|
}
|
|
}
|
|
|
|
// WithCookieJar configures the HTTP client to use the provided
|
|
// cookie jar to manage cookies between requests.
|
|
func WithCookieJar(jar http.CookieJar) ClientOpt {
|
|
return func(o *clientOpts) {
|
|
o.cookieJar = jar
|
|
}
|
|
}
|
|
|
|
// NewClient returns an HTTP client configured according to the provided
|
|
// options.
|
|
func NewClient(opts ...ClientOpt) *http.Client {
|
|
var co clientOpts
|
|
for _, opt := range opts {
|
|
opt(&co)
|
|
}
|
|
|
|
//nolint:gocritic
|
|
cli := &http.Client{
|
|
Timeout: co.timeout,
|
|
}
|
|
if co.noFollow {
|
|
cli.CheckRedirect = noFollowRedirect
|
|
}
|
|
if co.tlsConf != nil {
|
|
cli.Transport = NewTransport(WithTLSConfig(co.tlsConf))
|
|
}
|
|
if co.cookieJar != nil {
|
|
cli.Jar = co.cookieJar
|
|
}
|
|
return cli
|
|
}
|
|
|
|
type transportOpts struct {
|
|
tlsConf *tls.Config
|
|
}
|
|
|
|
// TransportOpt is the type for transport-specific options.
|
|
type TransportOpt func(o *transportOpts)
|
|
|
|
// WithTLSConfig sets the TLS configuration of the transport.
|
|
func WithTLSConfig(conf *tls.Config) TransportOpt {
|
|
return func(o *transportOpts) {
|
|
o.tlsConf = conf.Clone()
|
|
}
|
|
}
|
|
|
|
// NewTransport creates an http transport (a type that implements
|
|
// http.RoundTripper) with the provided optional options. The transport is
|
|
// derived from Go's http.DefaultTransport and only overrides the specific
|
|
// parts it needs to, so that it keeps its sane defaults for the rest.
|
|
func NewTransport(opts ...TransportOpt) *http.Transport {
|
|
var to transportOpts
|
|
for _, opt := range opts {
|
|
opt(&to)
|
|
}
|
|
|
|
// make sure to start from DefaultTransport to inherit its sane defaults
|
|
tr := http.DefaultTransport.(*http.Transport).Clone()
|
|
if to.tlsConf != nil {
|
|
tr.TLSClientConfig = to.tlsConf
|
|
}
|
|
return tr
|
|
}
|
|
|
|
func noFollowRedirect(*http.Request, []*http.Request) error {
|
|
return http.ErrUseLastResponse
|
|
}
|