mirror of
https://github.com/fleetdm/fleet
synced 2026-05-10 18:51:03 +00:00
4272df375a
Related to: https://github.com/fleetdm/fleet/issues/26270 Changes: - Added a new database model: `AndroidEnterprise` - Added one new website dependency: `[email protected]` - Added `android-proxy/create-android-signup-url`: an endpoint that returns a signup url used to grant access to Fleet's Android MDM integration. - Added `android-proxy/create-android-enterprise`: An endpoint that creates an Android enterprise for a Fleet server - Added `android-proxy/create-android-enrollment-token`: An endpoint that returns an enrollment token for an Android enterprise - Added `android-proxy/modify-android-policies`: An endpoint used to update policies of an Android enterprise - Added `android-proxy/delete-one-android-enterprise`: an endpoint that deletes an Android enterprise --------- Co-authored-by: Victor Lyuboslavsky <[email protected]>
78 lines
2.9 KiB
JavaScript
Vendored
78 lines
2.9 KiB
JavaScript
Vendored
module.exports = {
|
|
|
|
|
|
friendlyName: 'Create android signup url',
|
|
|
|
|
|
description: 'Creates and returns a signup URL for an android enterprise.',
|
|
|
|
|
|
inputs: {
|
|
callbackUrl: {
|
|
type: 'string',
|
|
required: true,
|
|
}
|
|
},
|
|
|
|
|
|
exits: {
|
|
success: { description: 'A signup URL has been sent to the requesting Fleet server.'},
|
|
enterpriseAlreadyExists: { description: 'An Android enterprise already exists for this Fleet instance.', statusCode: 409 },
|
|
},
|
|
|
|
|
|
fn: async function ({ callbackUrl }) {
|
|
|
|
|
|
// Parse the Fleet server url from the origin header.
|
|
let fleetServerUrl = this.req.get('Origin');
|
|
if(!fleetServerUrl){
|
|
return this.res.badRequest();
|
|
}
|
|
|
|
// Check the database for an existing record for this Fleet server.
|
|
let connectionforThisInstanceExists = await AndroidEnterprise.findOne({fleetServerUrl: fleetServerUrl});
|
|
if(connectionforThisInstanceExists){
|
|
throw 'enterpriseAlreadyExists';
|
|
}
|
|
|
|
|
|
// Get a signup url for this Android enterprise.
|
|
// Note: We're using sails.helpers.flow.build here to handle any errors that occurr using google's node library.
|
|
let signupUrl = await sails.helpers.flow.build(async ()=>{
|
|
let { google } = require('googleapis');
|
|
let androidmanagement = google.androidmanagement('v1');
|
|
let googleAuth = new google.auth.GoogleAuth({
|
|
scopes: ['https://www.googleapis.com/auth/androidmanagement'],
|
|
credentials: {
|
|
client_email: sails.config.custom.androidEnterpriseServiceAccountEmailAddress,// eslint-disable-line camelcase
|
|
private_key: sails.config.custom.androidEnterpriseServiceAccountPrivateKey,// eslint-disable-line camelcase
|
|
},
|
|
});
|
|
// Acquire the google auth client, and bind it to all future calls
|
|
let authClient = await googleAuth.getClient();
|
|
google.options({auth: authClient});
|
|
// [?] https://googleapis.dev/nodejs/googleapis/latest/androidmanagement/classes/Resource$Signupurls.html#create
|
|
let createSignupUrlResponse = await androidmanagement.signupUrls.create({
|
|
// The callback URL that the admin will be redirected to after successfully creating an enterprise. Before redirecting there the system will add a query parameter to this URL named enterpriseToken which will contain an opaque token to be used for the create enterprise request. The URL will be parsed then reformatted in order to add the enterpriseToken parameter, so there may be some minor formatting changes.
|
|
callbackUrl: callbackUrl,
|
|
// The ID of the Google Cloud Platform project which will own the enterprise.
|
|
projectId: sails.config.custom.androidEnterpriseProjectId,
|
|
});
|
|
return createSignupUrlResponse.data;
|
|
}).intercept((err)=>{
|
|
return new Error(`When attempting to create a singup url for a new Android enterprise, an error occurred. Error: ${err}`);
|
|
});
|
|
|
|
|
|
return {
|
|
url: signupUrl.url,
|
|
name: signupUrl.name,
|
|
};
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
};
|