mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-20 13:49:07 +02:00
Zoltan Papp
c281b15cfa
The mobile bridges only carried the policy fetcher, leaving every enforcement decision to the native apps: the desktop derived its UI restrictions in the Wails service layer, the daemon kept the conflict machinery in the server package, and both mobile bridges duplicated the JSON fetch adapter. Anything the native side had to reimplement was a place for iOS and Android to drift apart. Enforcement now lives in client/mdm and is consumed identically by all three platforms: - conflicts.go holds the value-aware conflict checks lifted out of the daemon, so the same normalization (canonical URLs, PSK sentinel echo) applies wherever a config change is validated. - restrictions.go derives the UI enforcement snapshot from a policy and renders it in the JSON shape the desktop frontend already consumes. The service-layer types become aliases, keeping one source of truth. - jsonloader.go replaces the adapter that was copy-pasted into both bridges. - changedetector.go moves change detection off the native side: the caller forwards the OS notification and asks whether the managed configuration actually changed, instead of diffing dictionaries itself. The mobile bridges gain the enforcement the daemon already had. The Preferences getters resolve managed keys from the policy, so a naive UI shows the enforced value; Commit rejects a staged change that diverges from a managed key; NewAuth resolves the managed management URL before persisting the config and overlays the policy on it, so a login can no longer run against a URL the policy forbids. Android's profile mutations fail closed when disableProfiles is set. NewAuth takes the fetcher as a required argument rather than keeping a policy-blind overload: the apps consume this code as a submodule, so a compile error at the bump is the point. The mobile PSK getter is replaced by a presence check — the key has no reason to cross the bridge, and not returning it means the native side needs no redaction sentinel of its own.
125 lines
2.9 KiB
Go
125 lines
2.9 KiB
Go
//go:build ios
|
|
|
|
package NetBirdSDK
|
|
|
|
import (
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/netbirdio/netbird/client/internal/profilemanager"
|
|
)
|
|
|
|
func TestPreferences_DefaultValues(t *testing.T) {
|
|
cfgFile := filepath.Join(t.TempDir(), "netbird.json")
|
|
stateFile := filepath.Join(t.TempDir(), "state.json")
|
|
p := NewPreferences(cfgFile, stateFile)
|
|
defaultVar, err := p.GetAdminURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read default value: %s", err)
|
|
}
|
|
|
|
if defaultVar != profilemanager.DefaultAdminURL {
|
|
t.Errorf("invalid default admin url: %s", defaultVar)
|
|
}
|
|
|
|
defaultVar, err = p.GetManagementURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read default management URL: %s", err)
|
|
}
|
|
|
|
if defaultVar != profilemanager.DefaultManagementURL {
|
|
t.Errorf("invalid default management url: %s", defaultVar)
|
|
}
|
|
|
|
hasPSK, err := p.HasPreSharedKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to read default preshared key presence: %s", err)
|
|
}
|
|
|
|
if hasPSK {
|
|
t.Errorf("unexpected preshared key presence on fresh config")
|
|
}
|
|
}
|
|
|
|
func TestPreferences_ReadUncommitedValues(t *testing.T) {
|
|
exampleString := "exampleString"
|
|
cfgFile := filepath.Join(t.TempDir(), "netbird.json")
|
|
stateFile := filepath.Join(t.TempDir(), "state.json")
|
|
p := NewPreferences(cfgFile, stateFile)
|
|
|
|
p.SetAdminURL(exampleString)
|
|
resp, err := p.GetAdminURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read admin url: %s", err)
|
|
}
|
|
|
|
if resp != exampleString {
|
|
t.Errorf("unexpected admin url: %s", resp)
|
|
}
|
|
|
|
p.SetManagementURL(exampleString)
|
|
resp, err = p.GetManagementURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read management url: %s", err)
|
|
}
|
|
|
|
if resp != exampleString {
|
|
t.Errorf("unexpected management url: %s", resp)
|
|
}
|
|
|
|
p.SetPreSharedKey(exampleString)
|
|
hasPSK, err := p.HasPreSharedKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to read preshared key presence: %s", err)
|
|
}
|
|
|
|
if !hasPSK {
|
|
t.Errorf("expected preshared key presence after staging one")
|
|
}
|
|
}
|
|
|
|
func TestPreferences_Commit(t *testing.T) {
|
|
exampleURL := "https://myurl.com:443"
|
|
examplePresharedKey := "topsecret"
|
|
cfgFile := filepath.Join(t.TempDir(), "netbird.json")
|
|
stateFile := filepath.Join(t.TempDir(), "state.json")
|
|
p := NewPreferences(cfgFile, stateFile)
|
|
|
|
p.SetAdminURL(exampleURL)
|
|
p.SetManagementURL(exampleURL)
|
|
p.SetPreSharedKey(examplePresharedKey)
|
|
|
|
err := p.Commit()
|
|
if err != nil {
|
|
t.Fatalf("failed to save changes: %s", err)
|
|
}
|
|
|
|
p = NewPreferences(cfgFile, stateFile)
|
|
resp, err := p.GetAdminURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read admin url: %s", err)
|
|
}
|
|
|
|
if resp != exampleURL {
|
|
t.Errorf("unexpected admin url: %s", resp)
|
|
}
|
|
|
|
resp, err = p.GetManagementURL()
|
|
if err != nil {
|
|
t.Fatalf("failed to read management url: %s", err)
|
|
}
|
|
|
|
if resp != exampleURL {
|
|
t.Errorf("unexpected management url: %s", resp)
|
|
}
|
|
|
|
hasPSK, err := p.HasPreSharedKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to read preshared key presence: %s", err)
|
|
}
|
|
|
|
if !hasPSK {
|
|
t.Errorf("expected preshared key presence after commit")
|
|
}
|
|
}
|