mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
a00559e732
> Related issue: #9956 # Checklist for submitter If some of the following don't apply, delete the relevant line. <!-- Note that API documentation changes are now addressed by the product design team. --> - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements) - [x] Added/updated tests - [x] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes - [x] If database migrations are included, checked table schema to confirm autoupdate - For database migrations: - [x] Checked schema for all modified table for columns that will auto-update timestamps during migration. - [x] Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects. - [x] Ensured the correct collation is explicitly set for character columns (`COLLATE utf8mb4_unicode_ci`). - [x] Manual QA for all new/changed functionality --------- Co-authored-by: Martin Angers <martin.n.angers@gmail.com> Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com> Co-authored-by: Roberto Dip <rroperzh@gmail.com> Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com> Co-authored-by: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com> Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
100 lines
2.9 KiB
Go
100 lines
2.9 KiB
Go
// Command applebmapi takes an Apple Business Manager server token in decrypted
|
|
// JSON format and calls the Apple BM API to retrieve and print the account
|
|
// information or the specified enrollment profile.
|
|
//
|
|
// Was implemented to test out https://github.com/fleetdm/fleet/issues/7515#issuecomment-1330889768,
|
|
// and can still be useful for debugging purposes.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"flag"
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
|
|
"github.com/WatchBeam/clock"
|
|
"github.com/fleetdm/fleet/v4/pkg/fleethttp"
|
|
"github.com/fleetdm/fleet/v4/server/config"
|
|
"github.com/fleetdm/fleet/v4/server/datastore/mysql"
|
|
"github.com/fleetdm/fleet/v4/server/mdm/nanodep/godep"
|
|
kitlog "github.com/go-kit/log"
|
|
)
|
|
|
|
func main() {
|
|
mysqlAddr := flag.String("mysql", "localhost:3306", "mysql address")
|
|
serverPrivateKey := flag.String("server-private-key", "", "fleet server's private key (to decrypt MDM assets)")
|
|
profileUUID := flag.String("profile-uuid", "", "the Apple profile UUID to retrieve")
|
|
serialNum := flag.String("serial-number", "", "serial number of a device to get the device details")
|
|
orgName := flag.String("org-name", "", "organization name of the token")
|
|
|
|
flag.Parse()
|
|
|
|
if *serverPrivateKey == "" {
|
|
log.Fatal("must provide -server-private-key")
|
|
}
|
|
if *orgName == "" {
|
|
log.Fatal("must provide -org-name")
|
|
}
|
|
if *profileUUID != "" && *serialNum != "" {
|
|
log.Fatal("only one of -profile-uuid or -serial-number must be provided")
|
|
}
|
|
|
|
if len(*serverPrivateKey) > 32 {
|
|
// We truncate to 32 bytes because AES-256 requires a 32 byte (256 bit) PK, but some
|
|
// infra setups generate keys that are longer than 32 bytes.
|
|
truncatedServerPrivateKey := (*serverPrivateKey)[:32]
|
|
serverPrivateKey = &truncatedServerPrivateKey
|
|
}
|
|
|
|
cfg := config.MysqlConfig{
|
|
Protocol: "tcp",
|
|
Address: *mysqlAddr,
|
|
Database: "fleet",
|
|
Username: "fleet",
|
|
Password: "insecure",
|
|
MaxOpenConns: 50,
|
|
MaxIdleConns: 50,
|
|
ConnMaxLifetime: 0,
|
|
}
|
|
logger := kitlog.NewLogfmtLogger(os.Stderr)
|
|
opts := []mysql.DBOption{
|
|
mysql.Logger(logger),
|
|
mysql.WithFleetConfig(&config.FleetConfig{
|
|
Server: config.ServerConfig{
|
|
PrivateKey: *serverPrivateKey,
|
|
},
|
|
}),
|
|
}
|
|
mds, err := mysql.New(cfg, clock.C, opts...)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
depStorage, err := mds.NewMDMAppleDEPStorage()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
depClient := godep.NewClient(depStorage, fleethttp.NewClient())
|
|
|
|
ctx := context.Background()
|
|
var res any
|
|
switch {
|
|
case *profileUUID != "":
|
|
res, err = depClient.GetProfile(ctx, *orgName, *profileUUID)
|
|
case *serialNum != "":
|
|
res, err = depClient.GetDeviceDetails(ctx, *orgName, *serialNum)
|
|
default:
|
|
res, err = depClient.AccountDetail(ctx, *orgName)
|
|
}
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
b, err := json.MarshalIndent(res, "", " ")
|
|
if err != nil {
|
|
log.Fatalf("pretty-format body: %v", err)
|
|
}
|
|
fmt.Printf("body: \n%s\n", string(b))
|
|
}
|