jamf / scout-public

A tool to aggregate devices across multiple MDM servers
GNU General Public License v3.0
11 stars 3 forks source link

Add basic auth for Jamf Pro Webhooks #10

Closed jacobschultz closed 4 years ago

jacobschultz commented 5 years ago

Scout supports using Jamf Pro Webhooks for just in time updates. These are configurable in the Jamf Pro Server system settings. Simply point the webhooks URLs to the scout endpoints documented in the controllers/webhooks.js file. Scout supports some, but not all webhoook commands.

When scout was first created, the Jamf Pro server did not support auth against webhook endpoints, however it does now, so we should secure these endpoints inside of scout.

Tasks:

  1. Setup auth on all of the endpoints in controllers/webhooks.js routes.
  2. Update the documentation to reflect the new changes
  3. Setup webhooks in a Jamf Pro Server, and make sure auth is enabled
  4. Verify scout is able to receive these new http calls from the jamf pro server

PR ready when:

  1. The scout endpoints with auth are able update or insert devices from webhook calls protected with some form of authentication
jacobschultz commented 4 years ago

This was merged to master.