ogb912/micromdm
1
0
Fork 0
mirror of https://github.com/micromdm/micromdm/ synced 2026-08-11 12:15:34 +08:00
Code Issues Packages Projects Releases Wiki Activity

Declarative Management hand-off (#882)

Browse Source
This commit is contained in:
Jesse Peterson
2023-05-02 08:54:04 -07:00
committed by GitHub
parent 4d0df77cbd
commit 1f01f70dba
10 changed files with 330 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
platform/device/udidauth.go
View File

@@ -94,23 +94,19 @@ func (mw *udidCertAuthMiddleware) Checkin(ctx context.Context, req mdm.CheckinEv
if err != nil {
return nil, errors.Wrap(err, "error retrieving device certificate")
}
switch req.Command.MessageType {
case "Authenticate":
if req.Command.MessageType == "Authenticate" {
// unconditionally save the cert hash on Authenticate message
if err := mw.store.SaveUDIDCertHash([]byte(req.Command.UDID), hashCertRaw(devcert.Raw)); err != nil {
return nil, err
}
return mw.next.Checkin(ctx, req)
case "TokenUpdate", "CheckOut", "GetBootstrapToken", "SetBootstrapToken":
matched, err := mw.validateUDIDCertAuth([]byte(req.Command.UDID), hashCertRaw(devcert.Raw))
if err != nil {
return nil, err
}
if !matched && !mw.warnOnly {
return nil, errors.New("device certifcate UDID mismatch")
}
return mw.next.Checkin(ctx, req)
default:
return nil, errors.Errorf("unknown checkin message type %s", req.Command.MessageType)
}
matched, err := mw.validateUDIDCertAuth([]byte(req.Command.UDID), hashCertRaw(devcert.Raw))
if err != nil {
return nil, err
}
if !matched && !mw.warnOnly {
return nil, errors.New("device certifcate UDID mismatch")
}
return mw.next.Checkin(ctx, req)
}