addigy 2.6.1 → 2.8.0

package/index.d.ts

@@ -1,4 +1,4 @@
-import { CustomFact, Extension, FilevaultRequest, IAddigyConfig, IAddigyInternalAuthObject, MdmConfigurationPayload, NotificationSettings, PPPCInput, SupportedOsVersions } from './types';
+import { CreateWebContentFilterPayload, CustomFact, Extension, FilevaultRequest, IAddigyConfig, IAddigyInternalAuthObject, MdmConfigurationPayload, NotificationSettings, PPPCInput, ServiceManagementPayloadRule, SupportedOsVersions } from './types';
 export * from './types';
 declare enum AlertStatus {
     Acknowledged = "Acknowledged",
@@ -62,6 +62,8 @@ export declare class Addigy {
     createNotificationSettingsPolicy(authObject: IAddigyInternalAuthObject, name: string, notificationSettings: NotificationSettings[]): Promise<any>;
     createCustomProfile(authObject: IAddigyInternalAuthObject, name: string, customProfileText: string, supportedOsVersions: SupportedOsVersions, payloadScope?: 'System' | 'User', is_profile_signed?: boolean): Promise<any>;
     createMdmProfile(authObject: IAddigyInternalAuthObject, mdmProfile: any): Promise<any>;
+    createServiceManagementPolicy(authObject: IAddigyInternalAuthObject, name: string, rules: ServiceManagementPayloadRule[], priority?: number): Promise<any>;
+    createWebContentFilterPolicy(authObject: IAddigyInternalAuthObject, payloadName: string, webContentPayload: CreateWebContentFilterPayload, priority?: number): Promise<any>;
     createFilevaultPolicy(authObject: IAddigyInternalAuthObject, name: string, filevault: FilevaultRequest, payloadPriority?: number): Promise<any>;
     createPPPCPolicy(authObject: IAddigyInternalAuthObject, name: string, pppcPolicy: PPPCInput[]): Promise<any>;
     createCustomFact(authObject: IAddigyInternalAuthObject, name: string, script: string, scriptType: 'bash' | 'python' | 'zsh'): Promise<CustomFact>;

package/index.js

@@ -743,6 +743,89 @@ class Addigy {
             throw err;
         }
     }
+    async createServiceManagementPolicy(authObject, name, rules, priority = 9) {
+        const groupUUID = uuid_1.v4();
+        const payload = {
+            addigy_payload_type: 'com.addigy.servicemanagement.com.apple.servicemanagement',
+            addigy_payload_version: 0,
+            has_manifest: false,
+            payload_display_name: name,
+            payload_enabled: false,
+            payload_group_id: groupUUID,
+            payload_identifier: `com.addigy.servicemanagement.com.apple.servicemanagement.${groupUUID}`,
+            payload_priority: priority,
+            payload_type: 'com.apple.servicemanagement',
+            payload_uuid: uuid_1.v4(),
+            payload_version: 1,
+            policy_restricted: false,
+            requires_device_supervision: false,
+            requires_mdm_profile_approved: false,
+            supported_os_versions: null,
+            rules,
+        };
+        try {
+            let res = await this._addigyRequest('https://app-prod.addigy.com/api/mdm/user/profiles/configurations', {
+                headers: {
+                    Cookie: `auth_token=${authObject.authToken};`,
+                    origin: 'https://app-prod.addigy.com',
+                },
+                method: 'POST',
+                json: { payloads: [payload] },
+            });
+            return JSON.parse(res.body);
+        }
+        catch (err) {
+            throw err;
+        }
+    }
+    async createWebContentFilterPolicy(authObject, payloadName, webContentPayload, priority = 9) {
+        const groupUUID = uuid_1.v4();
+        const payload = {
+            addigy_payload_type: 'com.addigy.webcontent-filter.com.apple.webcontent-filter',
+            addigy_payload_version: 2,
+            auto_filter_enabled: null,
+            blacklisted_urls: null,
+            content_filter_uuid: null,
+            filter_browsers: null,
+            filter_data_provider_bundle_identifier: null,
+            filter_data_provider_designated_requirement: null,
+            filter_packet_provider_bundle_identifier: null,
+            filter_packet_provider_designated_requirement: null,
+            filter_packets: null,
+            filter_sockets: true,
+            filter_type: 'Plugin',
+            has_manifest: false,
+            organization: null,
+            password: null,
+            payload_display_name: payloadName,
+            payload_enabled: true,
+            payload_group_id: groupUUID,
+            payload_identifier: `com.addigy.webcontent-filter.com.apple.webcontent-filter.${groupUUID}`,
+            payload_priority: priority,
+            payload_type: 'com.apple.webcontent-filter',
+            payload_uuid: uuid_1.v4(),
+            payload_version: 1,
+            permitted_urls: null,
+            policy_restricted: false,
+            requires_device_supervision: false,
+            requires_mdm_profile_approved: false,
+            server_address: null,
+            supported_os_versions: null,
+            user_name: null,
+            vendor_config: null,
+            white_listed_bookmarks: null,
+            ...webContentPayload,
+        };
+        let res = await this._addigyRequest('https://app-prod.addigy.com/api/mdm/user/profiles/configurations', {
+            headers: {
+                Cookie: `auth_token=${authObject.authToken};`,
+                origin: 'https://app-prod.addigy.com',
+            },
+            method: 'POST',
+            json: { payloads: [payload] },
+        });
+        return JSON.parse(res.body);
+    }
     async createFilevaultPolicy(authObject, name, filevault, payloadPriority = 1) {
         const groupUUID = uuid_1.v4();
         const encryptCertPayloadUUID = uuid_1.v4();
@@ -1041,13 +1124,15 @@ class Addigy {
     }
     async getImpersonationAuthObject(authObject, orgId) {
         let postBody = {
-            orgid: orgId,
+            parent_orgid: authObject.orgId,
+            child_orgid: orgId,
+            user_email: authObject.emailAddress,
         };
         try {
-            let res = await this._addigyRequest('https://prod.addigy.com/impersonate_org/', {
+            let res = await this._addigyRequest('https://app.addigy.com/api/impersonation', {
                 headers: {
-                    Cookie: `auth_token=${authObject.authToken};`,
-                    origin: 'https://app-prod.addigy.com',
+                    Cookie: `prod_auth_token=${authObject.authToken};`,
+                    origin: 'https://app.addigy.com',
                 },
                 method: 'POST',
                 json: postBody,
@@ -1055,7 +1140,7 @@ class Addigy {
             let impersonationAuthObject = {
                 orgId: orgId,
                 authToken: res.headers['set-cookie']
-                    .find((e) => e.includes('auth_token') && !e.includes('original_auth_token'))
+                    .find((e) => e.includes('prod_auth_token') && !e.includes('original_auth_token'))
                     .split('auth_token=')[1]
                     .split(';')[0],
                 emailAddress: authObject.emailAddress,

package/package.json

@@ -59,7 +59,7 @@
         "tsc": "tsc -p tsconfig.build.json"
     },
     "types": "index.d.ts",
-    "version": "2.6.1",
+    "version": "2.8.0",
     "volta": {
         "node": "14.17.1",
         "yarn": "1.22.10"

package/types.d.ts

@@ -10,8 +10,8 @@ export interface IAddigyInternalAuthObject {
     emailAddress: string;
 }
 export interface Payload {
-    addigy_payload_type: 'com.addigy.syspolicy.system-extension-policy.com.apple.system-extension-policy' | 'com.addigy.TCC.configuration-profile-policy.com.apple.TCC.configuration-profile-policy' | 'com.addigy.syspolicy.kernel-extension-policy.com.apple.syspolicy.kernel-extension-policy' | 'com.addigy.notifications.com.apple.notificationsettings' | 'com.addigy.custom.mdm.payload' | 'com.addigy.securityAndPrivacy.com.apple.MCX.FileVault2' | 'com.addigy.securityAndPrivacy.com.apple.MCX' | 'com.addigy.securityAndPrivacy.com.apple.security.pkcs1' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryKeyEscrow' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryRedirect';
-    payload_type: 'com.apple.system-extension-policy' | 'com.apple.syspolicy.kernel-extension-policy' | 'com.apple.TCC.configuration-profile-policy' | 'com.apple.notificationsettings' | 'custom' | 'com.apple.MCX.FileVault2' | 'com.apple.MCX' | 'com.apple.security.pkcs1' | 'com.apple.security.FDERecoveryKeyEscrow' | 'com.apple.security.FDERecoveryRedirect';
+    addigy_payload_type: 'com.addigy.syspolicy.system-extension-policy.com.apple.system-extension-policy' | 'com.addigy.TCC.configuration-profile-policy.com.apple.TCC.configuration-profile-policy' | 'com.addigy.syspolicy.kernel-extension-policy.com.apple.syspolicy.kernel-extension-policy' | 'com.addigy.notifications.com.apple.notificationsettings' | 'com.addigy.custom.mdm.payload' | 'com.addigy.securityAndPrivacy.com.apple.MCX.FileVault2' | 'com.addigy.securityAndPrivacy.com.apple.MCX' | 'com.addigy.securityAndPrivacy.com.apple.security.pkcs1' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryKeyEscrow' | 'com.addigy.securityAndPrivacy.com.apple.security.FDERecoveryRedirect' | 'com.addigy.servicemanagement.com.apple.servicemanagement' | 'com.addigy.webcontent-filter.com.apple.webcontent-filter';
+    payload_type: 'com.apple.system-extension-policy' | 'com.apple.syspolicy.kernel-extension-policy' | 'com.apple.TCC.configuration-profile-policy' | 'com.apple.notificationsettings' | 'custom' | 'com.apple.MCX.FileVault2' | 'com.apple.MCX' | 'com.apple.security.pkcs1' | 'com.apple.security.FDERecoveryKeyEscrow' | 'com.apple.security.FDERecoveryRedirect' | 'com.apple.servicemanagement' | 'com.apple.webcontent-filter';
     payload_version: number;
     payload_identifier: string;
     payload_uuid: string;
@@ -218,3 +218,75 @@ export interface PoliciesMdmPayload {
     configuration_id: string;
     policy_id: string;
 }
+export interface ServiceManagementPayload extends Payload {
+    addigy_payload_version: number;
+    has_manifest: boolean;
+    payload_enabled: boolean;
+    payload_priority: number;
+    policy_restricted: boolean;
+    requires_device_supervision: boolean;
+    requires_mdm_profile_approved: boolean;
+    rules: ServiceManagementPayloadRule[];
+    supported_os_versions: SupportedOsVersions | null;
+}
+export interface ServiceManagementPayloadRule {
+    comment: string;
+    rule_type: string;
+    rule_value: string;
+}
+export interface WebContentFilterPayload extends Payload {
+    addigy_payload_version: number;
+    auto_filter_enabled: null | boolean;
+    blacklisted_urls: null | string[];
+    content_filter_uuid: null | string;
+    filter_browsers: null | boolean;
+    filter_data_provider_bundle_identifier: string | null;
+    filter_data_provider_designated_requirement: string | null;
+    filter_grade: 'firewall' | 'inspector';
+    filter_packet_provider_bundle_identifier: null | string;
+    filter_packet_provider_designated_requirement: null | string;
+    filter_packets: null | boolean;
+    filter_sockets: boolean;
+    filter_type: string;
+    has_manifest: boolean;
+    organization: null | string;
+    password: null | string;
+    payload_enabled: boolean;
+    payload_priority: number;
+    permitted_urls: null | string[];
+    plugin_bundle_id: string | null;
+    policy_restricted: boolean;
+    requires_device_supervision: boolean;
+    requires_mdm_profile_approved: boolean;
+    server_address: null | string;
+    supported_os_versions: null | SupportedOsVersions;
+    user_defined_name: string;
+    user_name: null | string;
+    vendor_config: Record<string, string> | null;
+    white_listed_bookmarks: null | string[];
+}
+export interface CreateWebContentFilterPayload {
+    user_defined_name: string;
+    plugin_bundle_id: string;
+    filter_grade: 'firewall' | 'inspector';
+    vendor_config?: Record<string, string>;
+    content_filter_uuid?: string;
+    server_address?: string;
+    organization?: string;
+    user_name?: string;
+    password?: string;
+    filter_browsers?: boolean;
+    filter_sockets?: boolean;
+    filter_data_provider_bundle_identifier?: string;
+    filter_data_provider_designated_requirement?: string;
+    filter_packets?: boolean;
+    filter_packet_provider_bundle_identifier?: string;
+    filter_packet_provider_designated_requirement?: string;
+    auto_filter_enabled?: null;
+    permitted_urls?: string[];
+    blacklisted_urls?: string[];
+    white_listed_bookmarks?: string[];
+    policy_restricted?: boolean;
+    requires_device_supervision?: boolean;
+    requires_mdm_profile_approved?: boolean;
+}