ios_config_profile 1.3.0

data/spec/device/erase_device_payload_spec.rb

@@ -0,0 +1,11 @@
+require "spec_helper"
+
+describe IOSConfigProfile::EraseDevicePayload do
+  subject { IOSConfigProfile::EraseDevicePayload }
+
+  describe "#initialize" do
+    it "has an EraseDevice payload" do
+      expect(subject.new["RequestType"]).to eq "EraseDevice"
+    end
+  end
+end

data/spec/device/install_profile_payload_spec.rb

@@ -0,0 +1,13 @@
+require "spec_helper"
+
+describe IOSConfigProfile::InstallProfilePayload do
+  subject { IOSConfigProfile::InstallProfilePayload }
+
+  describe "#initialize" do
+    it "has the correct payload" do
+      payload = subject.new("asdf")
+      expect(payload["RequestType"]).to eq "InstallProfile"
+      expect(payload["Payload"].gets).to eq "asdf"
+    end
+  end
+end

data/spec/device/lock_device_payload_spec.rb

@@ -0,0 +1,11 @@
+require "spec_helper"
+
+describe IOSConfigProfile::LockDevicePayload do
+  subject { IOSConfigProfile::LockDevicePayload }
+
+  describe "#initialize" do
+    it "has an LockDevicePayload payload" do
+      expect(subject.new["RequestType"]).to eq "DeviceLock"
+    end
+  end
+end

data/spec/device/mdm_payload_spec.rb

@@ -0,0 +1,41 @@
+require "spec_helper"
+
+describe IOSConfigProfile::MDMPayload do
+  let(:mdm_payload_attributes) do
+    {
+      "Topic" => "user id from apple push notification certificate",
+      "ServerURL" => "https://example.com/command",
+      "CheckInURL" => "https://example.com/checkin",
+      "PayloadUUID" => "00000000-0000-0000-0000-000000000000",
+      "IdentityCertificateUUID" => "11111111-1111-1111-1111-111111111111",
+
+      "SignMessage" => false,
+      "AccessRights" => 8191,
+      "UseDevelopmentAPNS" => false,
+      "CheckOutWhenRemoved" => true,
+
+      "PayloadType" => "com.apple.mdm",
+      "PayloadVersion" => 1,
+      "PayloadIdentifier" => "com.cellabusipcu.profile.mdm",
+      "PayloadDisplayName" => "Mobile Device Management",
+      "PayloadDescription" => "Configures Mobile Device Management",
+      "PayloadOrganization" => "Cellabus, Inc.",
+    }
+  end
+  let(:url) { "https://example.com" }
+  let(:security_payload) { double uuid: "11111111-1111-1111-1111-111111111111" }
+  let(:topic) { "user id from apple push notification certificate" }
+
+  before do
+    allow_any_instance_of(IOSConfigProfile::MDMPayload).to receive_messages random_uuid: "00000000-0000-0000-0000-000000000000"
+  end
+
+  subject do
+    IOSConfigProfile::MDMPayload.new(url, security_payload, topic)
+  end
+
+  it { is_expected.to eq(mdm_payload_attributes) }
+  it "requires an https url" do
+    expect { IOSConfigProfile::MDMPayload.new("http://example.com", security_payload, topic) }.to raise_error RuntimeError
+  end
+end

data/spec/device/remove_profile_payload_spec.rb

@@ -0,0 +1,14 @@
+require "spec_helper"
+
+describe IOSConfigProfile::RemoveProfilePayload do
+  let(:remove_profile_payload_attributes) do
+    {
+      "RequestType" => "RemoveProfile",
+      "Identifier" => "profile-identifier",
+    }
+  end
+
+  subject { IOSConfigProfile::RemoveProfilePayload.new "profile-identifier" }
+
+  it { is_expected.to eq(remove_profile_payload_attributes) }
+end

data/spec/device/restrictions_payload_spec.rb

@@ -0,0 +1,42 @@
+require "spec_helper"
+
+describe IOSConfigProfile::RestrictionsPayload do
+  let(:payload) { { "allowAppInstallation" => true } }
+  let(:crap_payload) { { "asdf" => false } }
+
+  describe "IOSConfigProfile::RestrictionsPayload.generate_restrictions" do
+    it "defaults to empty payload" do
+      expect(IOSConfigProfile::RestrictionsPayload.new.send(:generate_restrictions, nil).length).to eq(0)
+    end
+    it "allows for additional payloads" do
+      payload["allowAppInstallation"] = false
+      expect(IOSConfigProfile::RestrictionsPayload.new.send(:generate_restrictions, payload).length).to eq(1)
+    end
+    it "will ignore default values" do
+      expect(IOSConfigProfile::RestrictionsPayload.new.send(:generate_restrictions, payload).length).to eq(0)
+    end
+    it "will ignore unrecognized values" do
+      expect(IOSConfigProfile::RestrictionsPayload.new.send(:generate_restrictions, crap_payload).length).to eq(0)
+    end
+  end
+
+  describe "IOSConfigProfile::RestrictionsPayload.new" do
+    it "adds boilerplate on top of restrictions" do
+      expect(IOSConfigProfile::RestrictionsPayload.new.length).to eq(6)
+      expect(IOSConfigProfile::RestrictionsPayload.new["PayloadContent"][0].length).to eq(6)
+      expect(IOSConfigProfile::RestrictionsPayload.new["PayloadContent"][0]["PayloadType"]).to eq("com.apple.applicationaccess")
+    end
+  end
+
+  its(:length) { should == 6 }
+
+  describe "available_payloads" do
+    subject { IOSConfigProfile::RestrictionsPayload.available_payloads }
+    it { is_expected.to be_instance_of Hash }
+  end
+
+  describe "available_supervised_payloads" do
+    subject { IOSConfigProfile::RestrictionsPayload.available_supervised_payloads }
+    it { is_expected.to be_instance_of Hash }
+  end
+end

data/spec/device/scep_payload_spec.rb

@@ -0,0 +1,14 @@
+require "spec_helper"
+
+describe IOSConfigProfile::SCEPPayload do
+  subject { IOSConfigProfile::SCEPPayload }
+  let(:url) { "https://asdf.com/" }
+
+  describe "#initialize" do
+    it "must be initialized with an SCEP server url" do
+      payload = subject.new url
+      expect(payload["URL"]).to eq url
+      expect(payload["PayloadType"]).to eq "com.apple.security.scep"
+    end
+  end
+end

data/spec/device/security_payload_spec.rb

@@ -0,0 +1,29 @@
+require "spec_helper"
+
+describe IOSConfigProfile::SecurityPayload do
+  let(:security_payload_attributes) do
+    {
+      "Password" => "password",
+      "PayloadUUID" => "00000000-0000-0000-0000-000000000000",
+      "PayloadCertificateFileName" => "identity.p12",
+
+      "PayloadType" => "com.apple.security.pkcs12",
+      "PayloadVersion" => 1,
+      "PayloadIdentifier" => "com.cellabusipcu.profile.credential",
+      "PayloadDisplayName" => "Security",
+      "PayloadDescription" => "Provides device authentication (certificate or identity).",
+      "PayloadOrganization" => "Cellabus, Inc.",
+    }
+  end
+
+  before do
+    allow_any_instance_of(IOSConfigProfile::SecurityPayload).to receive_messages random_uuid: "00000000-0000-0000-0000-000000000000"
+  end
+
+  subject { IOSConfigProfile::SecurityPayload.new("identity", "password") }
+
+  it { is_expected.to include security_payload_attributes }
+  it "contains valid PayloadContent" do
+    expect(subject["PayloadContent"].read).to eq("identity")
+  end
+end

data/spec/device/set_device_name_payload_spec.rb

@@ -0,0 +1,14 @@
+require "spec_helper"
+
+describe IOSConfigProfile::SetDeviceNamePayload do
+  subject { IOSConfigProfile::SetDeviceNamePayload }
+
+  describe "#initialize" do
+    it "has an Settings payload" do
+      payload = subject.new("asdf")
+      expect(payload["RequestType"]).to eq "Settings"
+      expect(payload["Settings"][0]["Item"]).to eq "DeviceName"
+      expect(payload["Settings"][0]["DeviceName"]).to eq "asdf"
+    end
+  end
+end

data/spec/device/vpn_payload_spec.rb

@@ -0,0 +1,75 @@
+require "spec_helper"
+
+describe IOSConfigProfile::VPNPayload do
+  subject { IOSConfigProfile::VPNPayload }
+  let(:config) { { override_primary: "asdf", vpn_type: "L2TP" } }
+
+  describe "#initialize" do
+    it "must be initialized with a config" do
+      payload = subject.new config
+      expect(payload.vpn_config).to eq config
+      expect { subject.new nil }.to raise_error RuntimeError
+    end
+    it "has a uuid" do
+      payload1 = subject.new config
+      payload2 = subject.new config
+      expect(payload1["PayloadUUID"]).to_not eq payload2["PayloadUUID"]
+    end
+  end
+
+  describe "#vpn_payload" do
+    subject { IOSConfigProfile::VPNPayload.new config }
+    it "calls #get_vendor_config" do
+      expect(subject).to receive(:get_vendor_config).once
+      subject.send :vpn_payload
+    end
+    it "has a proper payload type" do
+      expect(subject["PayloadContent"][0]["PayloadType"]).to eq "com.apple.vpn.managed"
+    end
+    it "has the proper vpn type" do
+      expect(subject["PayloadContent"][0]["VPNType"]).to eq "L2TP"
+    end
+  end
+
+  describe "#get_vendor_config" do
+    subject { IOSConfigProfile::VPNPayload.new config }
+    it "raises errors for unimplemented vpn types" do
+      subject.send :get_vendor_config
+      subject.vpn_config[:vpn_type] = "AlwaysOn"
+      expect { subject.send :get_vendor_config }.to raise_error NotImplementedError
+      subject.vpn_config[:vpn_type] = "asdf"
+      expect { subject.send :get_vendor_config }.to raise_error NotImplementedError
+    end
+    it "calls appropriate function" do
+      expect(subject).to receive(:get_l2tp_config).and_return "asdf"
+      expect(subject.send :get_vendor_config).to eq "asdf"
+    end
+  end
+
+  describe "#get_l2tp_config" do
+    let(:config) { { vpn_type: "L2TP", auth_name: "name", auth_password: "password", comm_remote_access: "asdf.com" } }
+    subject { IOSConfigProfile::VPNPayload.new config }
+    it "returns the l2tp configuration" do
+      config = subject.send :get_l2tp_config
+      expect(config["AuthName"]).to eq "name"
+      expect(config["TokenCard"]).to eq false
+      expect(config["CommRemoteAccess"]).to eq "asdf.com"
+    end
+  end
+
+  describe "#get_ipsec_config" do
+    let(:config) { { vpn_type: "IPSec", remote_address: "asdf.com" } }
+    subject { IOSConfigProfile::VPNPayload.new config }
+    it "returns the IPSec configuration" do
+      config = subject.send :get_ipsec_config
+      expect(config["RemoteAddress"]).to eq "asdf.com"
+      expect(config.include? "LocalIdentifier").to be_falsey
+    end
+    it "adds in local identifier if using shared secret" do
+      subject.vpn_config[:authentication_method] = "SharedSecret"
+      subject.vpn_config[:local_identifier] = "asdf"
+      config = subject.send :get_ipsec_config
+      expect(config["LocalIdentifier"]).to eq "asdf"
+    end
+  end
+end

data/spec/encrypted_payload_spec.rb

@@ -0,0 +1,26 @@
+require "spec_helper"
+
+describe IOSConfigProfile::EncryptedPayload do
+  let(:wrapped_payload) { double to_plist: "wrapped payload in plist form" }
+
+  subject { IOSConfigProfile::EncryptedPayload.new wrapped_payload }
+
+  its(:payload) { should == "wrapped payload in plist form" }
+
+  # This way we ensure super was called in the #initialize
+  its(:url) { should be }
+  its(:identifier) { should be }
+  its(:description) { should be }
+  its(:display_name) { should be }
+  its(:organization) { should be }
+
+  describe "#encrypted_configuration" do
+    it "can return an encrypted configuration" do
+      mock = double
+      expect(subject).to receive(:encrypt).with("cert").and_return(mock)
+      expect(mock).to receive(:certificate).and_return("asdf")
+      expect(subject).to receive(:configuration).and_return("encrypted_cert")
+      expect(subject.encrypted_configuration "cert").to eq "encrypted_cert"
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,14 @@
+require "codeclimate-test-reporter"
+CodeClimate::TestReporter.start
+
+require "ios_config_profile"
+require "rspec/its"
+
+IOSCertEnrollment.configure do |config|
+  config.ssl_key = lambda { "test_ssl_key" }
+  config.ssl_certificate = lambda { "test_ssl_certificate" }
+  config.base_url = lambda { "https://example.com/" }
+  config.identifier = "Test Identifier"
+  config.display_name = "Test Display Name"
+  config.organization = "Test Organization"
+end

metadata

@@ -0,0 +1,241 @@
+--- !ruby/object:Gem::Specification
+name: ios_config_profile
+version: !ruby/object:Gem::Version
+  version: 1.3.0
+platform: ruby
+authors:
+- Albert Wang
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-01-25 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: CFPropertyList
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+- !ruby/object:Gem::Dependency
+  name: plist
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.4'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+- !ruby/object:Gem::Dependency
+  name: rspec-its
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: codeclimate-test-reporter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+description: Generate Apple iOS configuration profiles and payloads
+email:
+- albert@cellabus.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".codeclimate.yml"
+- ".gitignore"
+- ".rspec"
+- ".rubocop.yml"
+- ".simplecov"
+- CHANGELOG.md
+- CODE_OF_CONDUCT.md
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- ios_config_profile.gemspec
+- lib/ios_config_profile.rb
+- lib/ios_config_profile/basic_payload.rb
+- lib/ios_config_profile/command_payload.rb
+- lib/ios_config_profile/content/install_application_payload.rb
+- lib/ios_config_profile/content/install_book_payload.rb
+- lib/ios_config_profile/content/install_doc_payload.rb
+- lib/ios_config_profile/content/install_market_app_payload.rb
+- lib/ios_config_profile/content/installed_application_list_payload.rb
+- lib/ios_config_profile/content/remove_application_payload.rb
+- lib/ios_config_profile/content/remove_book_payload.rb
+- lib/ios_config_profile/content/remove_doc_payload.rb
+- lib/ios_config_profile/content/web_clip_payload.rb
+- lib/ios_config_profile/device/app_lock_payload.rb
+- lib/ios_config_profile/device/clear_passcode_payload.rb
+- lib/ios_config_profile/device/dep_payload.rb
+- lib/ios_config_profile/device/device_information_payload.rb
+- lib/ios_config_profile/device/enrollment_payload.rb
+- lib/ios_config_profile/device/erase_device_payload.rb
+- lib/ios_config_profile/device/install_profile_payload.rb
+- lib/ios_config_profile/device/lock_device_payload.rb
+- lib/ios_config_profile/device/mdm_payload.rb
+- lib/ios_config_profile/device/remove_profile_payload.rb
+- lib/ios_config_profile/device/restrictions_payload.rb
+- lib/ios_config_profile/device/scep_payload.rb
+- lib/ios_config_profile/device/security_payload.rb
+- lib/ios_config_profile/device/set_device_name_payload.rb
+- lib/ios_config_profile/device/vpn_payload.rb
+- lib/ios_config_profile/encrypted_payload.rb
+- lib/ios_config_profile/version.rb
+- spec/basic_payload_spec.rb
+- spec/command_payload_spec.rb
+- spec/content/install_application_payload_spec.rb
+- spec/content/install_book_payload_spec.rb
+- spec/content/install_doc_payload_spec.rb
+- spec/content/install_market_app_payload_spec.rb
+- spec/content/installed_application_list_payload_spec.rb
+- spec/content/remove_application_payoad_spec.rb
+- spec/content/remove_book_payload_spec.rb
+- spec/content/remove_doc_payload_spec.rb
+- spec/content/web_clip_payload_spec.rb
+- spec/device/app_lock_payload_spec.rb
+- spec/device/clear_passcode_payload_spec.rb
+- spec/device/dep_payload_spec.rb
+- spec/device/device_information_payload_spec.rb
+- spec/device/enrollment_payload_spec.rb
+- spec/device/erase_device_payload_spec.rb
+- spec/device/install_profile_payload_spec.rb
+- spec/device/lock_device_payload_spec.rb
+- spec/device/mdm_payload_spec.rb
+- spec/device/remove_profile_payload_spec.rb
+- spec/device/restrictions_payload_spec.rb
+- spec/device/scep_payload_spec.rb
+- spec/device/security_payload_spec.rb
+- spec/device/set_device_name_payload_spec.rb
+- spec/device/vpn_payload_spec.rb
+- spec/encrypted_payload_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/cellabus/ios_config_profile
+licenses:
+- AGPL-3.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: This gem provides an easy way to generate configuration profiles for use
+  with Apple iOS devices. These profiles and payloads can be delivered via Apple MDM,
+  Apple's Configurator, or the iPhone Configuration Utility (IPCU).
+test_files:
+- spec/basic_payload_spec.rb
+- spec/command_payload_spec.rb
+- spec/content/install_application_payload_spec.rb
+- spec/content/install_book_payload_spec.rb
+- spec/content/install_doc_payload_spec.rb
+- spec/content/install_market_app_payload_spec.rb
+- spec/content/installed_application_list_payload_spec.rb
+- spec/content/remove_application_payoad_spec.rb
+- spec/content/remove_book_payload_spec.rb
+- spec/content/remove_doc_payload_spec.rb
+- spec/content/web_clip_payload_spec.rb
+- spec/device/app_lock_payload_spec.rb
+- spec/device/clear_passcode_payload_spec.rb
+- spec/device/dep_payload_spec.rb
+- spec/device/device_information_payload_spec.rb
+- spec/device/enrollment_payload_spec.rb
+- spec/device/erase_device_payload_spec.rb
+- spec/device/install_profile_payload_spec.rb
+- spec/device/lock_device_payload_spec.rb
+- spec/device/mdm_payload_spec.rb
+- spec/device/remove_profile_payload_spec.rb
+- spec/device/restrictions_payload_spec.rb
+- spec/device/scep_payload_spec.rb
+- spec/device/security_payload_spec.rb
+- spec/device/set_device_name_payload_spec.rb
+- spec/device/vpn_payload_spec.rb
+- spec/encrypted_payload_spec.rb
+- spec/spec_helper.rb