addigy 2.3.0 → 2.4.0

package/index.d.ts

@@ -1,4 +1,4 @@
-import { Extension, IAddigyConfig, IAddigyInternalAuthObject, NotificationSettings, PPPCInput, SupportedOsVersions } from './types';
+import { Extension, FilevaultRequest, IAddigyConfig, IAddigyInternalAuthObject, NotificationSettings, PPPCInput, SupportedOsVersions } from './types';
 export * from './types';
 declare enum AlertStatus {
     Acknowledged = "Acknowledged",
@@ -61,6 +61,8 @@ export declare class Addigy {
     }): Promise<any>;
     createNotificationSettingsPolicy(authObject: IAddigyInternalAuthObject, name: string, notificationSettings: NotificationSettings[]): Promise<any>;
     createCustomProfile(authObject: IAddigyInternalAuthObject, name: string, customProfileText: string, supportedOsVersions: SupportedOsVersions, payloadScope?: 'System' | 'User', is_profile_signed?: boolean): Promise<any>;
+    createMdmProfile(authObject: IAddigyInternalAuthObject, mdmProfile: any): Promise<any>;
+    createFilevaultPolicy(authObject: IAddigyInternalAuthObject, name: string, filevault: FilevaultRequest, payloadPriority?: number): Promise<any>;
     createPPPCPolicy(authObject: IAddigyInternalAuthObject, name: string, pppcPolicy: PPPCInput[]): Promise<any>;
     getMdmConfigurations(authObject: IAddigyInternalAuthObject): Promise<any[]>;
     getMdmConfigurationByName(authObject: IAddigyInternalAuthObject, name: string): Promise<any>;

package/index.js

@@ -727,6 +727,102 @@ class Addigy {
             throw err;
         }
     }
+    async createMdmProfile(authObject, mdmProfile) {
+        try {
+            let res = await this._addigyRequest('https://app-prod.addigy.com/api/mdm/user/profiles/configurations', {
+                headers: {
+                    Cookie: `auth_token=${authObject.authToken};`,
+                    origin: 'https://app-prod.addigy.com',
+                },
+                method: 'POST',
+                json: { payloads: mdmProfile },
+            });
+            return JSON.parse(res.body);
+        }
+        catch (err) {
+            throw err;
+        }
+    }
+    async createFilevaultPolicy(authObject, name, filevault, payloadPriority = 1) {
+        const groupUUID = uuid_1.v4();
+        const encryptCertPayloadUUID = uuid_1.v4();
+        const basePayload = {
+            payload_display_name: name,
+            payload_version: 1,
+            payload_group_id: groupUUID,
+            addigy_payload_version: 0,
+            payload_priority: payloadPriority,
+        };
+        const payloads = [
+            {
+                ...basePayload,
+                payload_type: 'com.apple.MCX.FileVault2',
+                addigy_payload_type: 'com.addigy.securityAndPrivacy.com.apple.MCX.FileVault2',
+                payload_identifier: `com.addigy.securityAndPrivacy.com.apple.MCX.FileVault2.${groupUUID}`,
+                payload_uuid: uuid_1.v4(),
+                enable: filevault.enable ? 'On' : 'Off',
+                defer: filevault.defer,
+                use_recovery_key: true,
+                show_recovery_key: filevault.showRecoveryKey === undefined ? null : filevault.showRecoveryKey,
+                defer_dont_ask_at_user_logout: filevault.deferDontAskAtUserLogout === undefined
+                    ? null
+                    : filevault.deferDontAskAtUserLogout,
+                defer_force_at_user_login_max_bypass_attempts: filevault.deferForceAtUserLoginMaxBypassAttempts === undefined
+                    ? null
+                    : filevault.deferForceAtUserLoginMaxBypassAttempts,
+            },
+            {
+                ...basePayload,
+                payload_type: 'com.apple.MCX',
+                addigy_payload_type: 'com.addigy.securityAndPrivacy.com.apple.MCX',
+                payload_identifier: `com.addigy.securityAndPrivacy.com.apple.MCX.${groupUUID} `,
+                payload_uuid: uuid_1.v4(),
+                destroy_fv_key_on_standby: filevault.destroyFvKeyOnStandby === undefined
+                    ? null
+                    : filevault.destroyFvKeyOnStandby,
+                dont_allow_fde_disable: true,
+            },
+        ];
+        if (filevault.escrowRecoveryKey)
+            payloads.push({
+                ...basePayload,
+                addigy_payload_type: 'com.addigy.securityAndPrivacy.com.apple.security.pkcs1',
+                payload_type: 'com.apple.security.pkcs1',
+                payload_identifier: `com.addigy.securityAndPrivacy.com.apple.security.pkcs1.${groupUUID}`,
+                payload_uuid: uuid_1.v4(),
+                is_from_security_profile: true,
+            }, {
+                ...basePayload,
+                addigy_payload_type: 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryKeyEscrow',
+                payload_type: 'com.apple.security.FDERecoveryKeyEscrow',
+                payload_identifier: `com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryKeyEscrow.${groupUUID}`,
+                payload_uuid: uuid_1.v4(),
+                encrypt_cert_payload_uuid: encryptCertPayloadUUID,
+                location: 'Key will be escrowed to an Addigy secure database.',
+            }, {
+                ...basePayload,
+                addigy_payload_type: 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryRedirect',
+                payload_type: 'com.apple.security.FDERecoveryRedirect',
+                payload_identifier: `com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryRedirect.${groupUUID}`,
+                payload_uuid: uuid_1.v4(),
+                encrypt_cert_payload_uuid: encryptCertPayloadUUID,
+                redirect_url: '',
+            });
+        try {
+            let res = await this._addigyRequest('https://app-prod.addigy.com/api/mdm/user/profiles/configurations', {
+                headers: {
+                    Cookie: `auth_token=${authObject.authToken};`,
+                    origin: 'https://app-prod.addigy.com',
+                },
+                method: 'POST',
+                json: { payloads },
+            });
+            return JSON.parse(res.body);
+        }
+        catch (err) {
+            throw err;
+        }
+    }
     async createPPPCPolicy(authObject, name, pppcPolicy) {
         const groupUUID = uuid_1.v4();
         const payload = {

package/package.json

@@ -59,7 +59,7 @@
         "tsc": "tsc -p tsconfig.build.json"
     },
     "types": "index.d.ts",
-    "version": "2.3.0",
+    "version": "2.4.0",
     "volta": {
         "node": "14.17.1",
         "yarn": "1.22.10"

package/types.d.ts

@@ -10,8 +10,8 @@ export interface IAddigyInternalAuthObject {
     emailAddress: string;
 }
 export interface Payload {
-    addigy_payload_type: 'com.addigy.syspolicy.system-extension-policy.com.apple.system-extension-policy' | 'com.addigy.TCC.configuration-profile-policy.com.apple.TCC.configuration-profile-policy' | 'com.addigy.syspolicy.kernel-extension-policy.com.apple.syspolicy.kernel-extension-policy' | 'com.addigy.notifications.com.apple.notificationsettings' | 'com.addigy.custom.mdm.payload';
-    payload_type: 'com.apple.system-extension-policy' | 'com.apple.syspolicy.kernel-extension-policy' | 'com.apple.TCC.configuration-profile-policy' | 'com.apple.notificationsettings' | 'custom';
+    addigy_payload_type: 'com.addigy.syspolicy.system-extension-policy.com.apple.system-extension-policy' | 'com.addigy.TCC.configuration-profile-policy.com.apple.TCC.configuration-profile-policy' | 'com.addigy.syspolicy.kernel-extension-policy.com.apple.syspolicy.kernel-extension-policy' | 'com.addigy.notifications.com.apple.notificationsettings' | 'com.addigy.custom.mdm.payload' | 'com.addigy.securityAndPrivacy.com.apple.MCX.FileVault2' | 'com.addigy.securityAndPrivacy.com.apple.MCX' | 'com.addigy.securityAndPrivacy.com.apple.security.pkcs1' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryKeyEscrow' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryRedirect';
+    payload_type: 'com.apple.system-extension-policy' | 'com.apple.syspolicy.kernel-extension-policy' | 'com.apple.TCC.configuration-profile-policy' | 'com.apple.notificationsettings' | 'custom' | 'com.apple.MCX.FileVault2' | 'com.apple.MCX' | 'com.apple.security.pkcs1' | 'com.apple.security.FDERecoveryKeyEscrow' | 'com.apple.security.FDERecoveryRedirect';
     payload_version: number;
     payload_identifier: string;
     payload_uuid: string;
@@ -147,3 +147,28 @@ export interface SupportedOsVersions {
     iOS?: string;
     tvOS?: string;
 }
+export interface FilevaultPayload extends Payload {
+    enable?: 'On' | 'Off';
+    defer?: boolean;
+    use_recovery_key?: boolean;
+    show_recovery_key?: boolean | null;
+    defer_dont_ask_at_user_logout?: boolean | null;
+    defer_force_at_user_login_max_bypass_attempts?: number | null;
+    addigy_payload_version?: number;
+    destroy_fv_key_on_standby?: boolean | null;
+    dont_allow_fde_disable?: boolean;
+    is_from_security_profile?: boolean;
+    encrypt_cert_payload_uuid?: string;
+    location?: string;
+    payload_priority?: number;
+    redirect_url?: string;
+}
+export interface FilevaultRequest {
+    enable?: boolean;
+    defer?: boolean;
+    showRecoveryKey?: boolean;
+    destroyFvKeyOnStandby?: boolean;
+    escrowRecoveryKey?: boolean;
+    deferDontAskAtUserLogout?: boolean;
+    deferForceAtUserLoginMaxBypassAttempts?: -1 | 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10;
+}