Eric
1c89b79dbe
Closes: https://github.com/fleetdm/confidential/issues/15631 Changes: - Fixed a typo in the inputs on three microsoft proxy endpoints <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Corrected input validation to properly enforce required fields in Microsoft proxy endpoints. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
81 lines
2.6 KiB
JavaScript
Vendored
81 lines
2.6 KiB
JavaScript
Vendored
module.exports = {
|
|
|
|
|
|
friendlyName: 'Remove one compliance partner tenant',
|
|
|
|
|
|
description: 'Updates a microsfot compliance tenant\'s status as "deprovisioned" and deletes the associated Database record',
|
|
|
|
inputs: {
|
|
entraTenantId: {
|
|
type: 'string',
|
|
required: true,
|
|
},
|
|
fleetServerSecret: {
|
|
type: 'string',
|
|
required: true,
|
|
},
|
|
},
|
|
|
|
|
|
exits: {
|
|
success: {
|
|
description: 'The requesting entra tenant has been successfully deprovisioned.'
|
|
},
|
|
tenantNotFound: {
|
|
description: 'A Microsoft compliance tenant could not be found using the provided information.',
|
|
responseType: 'notFound',
|
|
}
|
|
},
|
|
|
|
|
|
fn: async function ({entraTenantId, fleetServerSecret}) {
|
|
|
|
let informationAboutThisTenant = await MicrosoftComplianceTenant.findOne({entraTenantId: entraTenantId, fleetServerSecret: fleetServerSecret});
|
|
if(!informationAboutThisTenant) {
|
|
throw 'tenantNotFound';
|
|
}
|
|
|
|
// If setup was completed, we will need to deprovision this Complaince tenant, otherwise, we will only delete the databse record.
|
|
if(informationAboutThisTenant.setupCompleted){
|
|
|
|
let tokenAndApiUrls = await sails.helpers.microsoftProxy.getAccessTokenAndApiUrls.with({
|
|
complianceTenantRecordId: informationAboutThisTenant.id
|
|
});
|
|
|
|
let accessToken = tokenAndApiUrls.manageApiAccessToken;
|
|
let tenantDataSyncUrl = tokenAndApiUrls.tenantDataSyncUrl;
|
|
|
|
|
|
// Deprovison this tenant
|
|
let deprovisionTenantResponse = await sails.helpers.http.sendHttpRequest.with({
|
|
method: 'PUT',
|
|
url: `${tenantDataSyncUrl}/PartnerTenants(guid'${informationAboutThisTenant.entraTenantId}')?api-version=1.6`,
|
|
headers: {
|
|
'Authorization': `Bearer ${accessToken}`
|
|
},
|
|
body: {
|
|
Provisioned: 2,// 1 = provisioned, 2 = deprovisioned.
|
|
PartnerEnrollmentUrl: `https://fleetdm.com/microsoft-compliance-partner/enroll`,
|
|
PartnerRemediationUrl: `https://fleetdm.com/microsoft-compliance-partner/remediate`,
|
|
}
|
|
}).intercept((err)=>{
|
|
return new Error({error: `an error occurred when deprovisioning a Microsoft compliance tenant. Full error: ${require('util').inspect(err, {depth: 3})}`});
|
|
});
|
|
// Log responses from Micrsoft APIs for Fleet's integration
|
|
if(informationAboutThisTenant.fleetInstanceUrl === 'https://dogfood.fleetdm.com') {
|
|
sails.log.info(`Microsoft proxy: remove-one-compliance-partner-tenant deprovisioned a tenant: ${deprovisionTenantResponse.body}`);
|
|
}
|
|
}
|
|
|
|
await MicrosoftComplianceTenant.destroyOne({id: informationAboutThisTenant.id});
|
|
|
|
|
|
// All done.
|
|
return this.res.json({});
|
|
|
|
}
|
|
|
|
|
|
};
|