44eb76bed7
* refactor: implement custom ExpoImage wrapper for cache control Add ExpoImage component with automatic cacheKey/cachePath management and replace all expo-image imports across the app * refactor(ios): convert Gekidou to CocoaPods Migrate from Swift Package Manager to CocoaPods, add Keychain write operations, refactor notification handler to remove react-native-notifications headers, and upgrade Swift to 5.0 * npm audit * update fastlane * feat(ci): integrate Intune MAM for enterprise builds with strict OSS protection Add Intune submodule, CI actions, Fastlane configuration, developer scripts, pre-commit hooks, and validation workflows to enable internal MAM builds while protecting OSS repository * fix tests by mocking @mattermost/intune * feat: implement Intune MAM integration with comprehensive security enforcement Add IntuneManager, refactor SecurityManager/SessionManager for MAM policies, implement native OIDC auth flow, add biometric enforcement, conditional launch blocking, and file protection controls * fix alerts when no server database is present * Unify cache strategy * fix emit config changed after it was stored in the db * Handle Mid-Session Enrollment Detection * fix ADALLogOverrideDisabled missing in Fastfile * fix flow for initial enrollment * fix and add unit tests * enable Intune configuration for PR and beta builds, CLIENT_ID should be changed before actual release * Update intune submodule with addressed feedback * fix validate-intune-clean workflow * feat(intune): add comprehensive error handling and SAML+Entra support Add production-ready error handling for native Entra authentication with user-friendly i18n messages, comprehensive test coverage, and support for Entra login when server requires SAML. * update i18n * update intune submodule * update build-pr token * fix race condition between server auth and intune enrollment * fix CI workflow to build with intune * use deploy key for intune submodule * set the config directly in the submodule .git * debug injection * try setting GIT_SSH_COMMAND * remove action debug * fix server url input * match pod cache with intune hash * Fastfile and envs * have workflows check for intune/.git * have ci cache intune frameworks as well * update Fastlane to set no-cache to artifacts uploaded * fix s3 upload * fix pblist template * Attempt to remove the cache control for PR uploads to s3 * use hash from commit for S3 path * Implement crash-resilient selective wipe with automatic retry and add removeInternetPassword to Gekidou Keychain * Fix surface errors from intune login * fix postinstall scripts * use cacheKey for draft md images * remove unnecessary double await during test * Have isMinimumLicenseTier accept valid license sku tier as target * Add missing Auth error messages * remove the last period for intune errors in i18n * do not call unenroll with wipe on manual logout * Fix tests and Intune error messages * do not filter any SSO type regardless of which is used for Intune * fix 412 to not retry * fix tests, app logs sharing and share_extension avatar cache * apply setScreenCapturePolicy on license change Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * re-apply screen capture on enrollment Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * use userData from intunr login and prevent getMe Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com> * Check for Biometrics and Jailbreak as we used to --------- Co-authored-by: Eva Sarafianou <eva.sarafianou@mattermost.com>
216 lines
7.5 KiB
TypeScript
216 lines
7.5 KiB
TypeScript
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
interface ClientConfig {
|
|
AboutLink: string;
|
|
AllowBannerDismissal: string;
|
|
AllowCustomThemes: string;
|
|
AllowEditPost: string;
|
|
AllowedThemes: string;
|
|
AllowDownloadLogs: string;
|
|
AndroidAppDownloadLink: string;
|
|
AndroidLatestVersion: string;
|
|
AndroidMinVersion: string;
|
|
AppDownloadLink: string;
|
|
AsymmetricSigningPublicKey: string;
|
|
AvailableLocales: string;
|
|
BannerColor: string;
|
|
BannerText: string;
|
|
BannerTextColor: string;
|
|
BuildDate: string;
|
|
BuildEnterpriseReady: string;
|
|
BuildHash: string;
|
|
BuildHashEnterprise: string;
|
|
BuildNumber: string;
|
|
CloseUnusedDirectMessages: string;
|
|
CollapsedThreads: string;
|
|
CustomBrandText: string;
|
|
CustomDescriptionText: string;
|
|
CustomTermsOfServiceId: string;
|
|
CustomTermsOfServiceReAcceptancePeriod: string;
|
|
CustomUrlSchemes: string;
|
|
DataRetentionEnableFileDeletion: string;
|
|
DataRetentionEnableMessageDeletion: string;
|
|
DataRetentionFileRetentionDays: string;
|
|
DataRetentionMessageRetentionDays: string;
|
|
DefaultClientLocale: string;
|
|
DefaultTheme: string;
|
|
DelayChannelAutocomplete: 'true' | 'false';
|
|
DesktopLatestVersion: string;
|
|
DesktopMinVersion: string;
|
|
DiagnosticId: string;
|
|
DiagnosticsEnabled: string;
|
|
EmailLoginButtonBorderColor: string;
|
|
EmailLoginButtonColor: string;
|
|
EmailLoginButtonTextColor: string;
|
|
EmailNotificationContentsType: string;
|
|
EnableBanner: string;
|
|
EnableBotAccountCreation: string;
|
|
EnableChannelViewedMessages: string;
|
|
EnableClientMetrics?: string;
|
|
EnableCluster: string;
|
|
EnableCommands: string;
|
|
EnableCompliance: string;
|
|
EnableConfirmNotificationsToChannel: string;
|
|
EnableCrossTeamSearch: 'true' | 'false';
|
|
EnableCustomBrand: string;
|
|
EnableCustomEmoji: string;
|
|
EnableCustomTermsOfService: string;
|
|
EnableCustomUserStatuses: string;
|
|
EnableDeveloper: string;
|
|
EnableDiagnostics: string;
|
|
EnableEmailBatching: string;
|
|
EnableEmailInvitations: string;
|
|
EnableEmojiPicker: string;
|
|
EnableGuestMagicLink: string;
|
|
EnableFileAttachments: string;
|
|
EnableGifPicker: string;
|
|
EnableGuestAccounts: string;
|
|
EnableIncomingWebhooks: string;
|
|
EnableInlineLatex: string;
|
|
EnableLatex: string;
|
|
EnableLdap: string;
|
|
EnableLinkPreviews: string;
|
|
EnablePermalinkPreviews: string;
|
|
EnableMarketplace: string;
|
|
EnableMetrics: string;
|
|
EnableMobileFileDownload: string;
|
|
EnableMobileFileUpload: string;
|
|
EnableMultifactorAuthentication: string;
|
|
EnableOAuthServiceProvider: string;
|
|
EnableOpenServer: string;
|
|
EnableOutgoingWebhooks: string;
|
|
EnablePostIconOverride: string;
|
|
EnablePostUsernameOverride: string;
|
|
EnablePreviewFeatures: string;
|
|
EnablePreviewModeBanner: string;
|
|
EnablePublicLink: string;
|
|
EnableReliableWebSockets: string;
|
|
EnableSVGs: string;
|
|
EnableSaml: string;
|
|
EnableSignInWithEmail: string;
|
|
EnableSignInWithUsername: string;
|
|
EnableSignUpWithEmail: string;
|
|
EnableSignUpWithGitLab: string;
|
|
EnableSignUpWithGoogle: string;
|
|
EnableSignUpWithOffice365: string;
|
|
EnableSignUpWithOpenId: string;
|
|
EnableTesting: string;
|
|
EnableThemeSelection: string;
|
|
EnableTutorial: string;
|
|
EnableUserAccessTokens: string;
|
|
EnableUserCreation: string;
|
|
EnableUserDeactivation: string;
|
|
EnableUserTypingMessages: string;
|
|
EnableXToLeaveChannelsFromLHS: string;
|
|
EnforceMultifactorAuthentication: string;
|
|
ExperimentalChannelOrganization: string;
|
|
ExperimentalChannelSidebarOrganization: string;
|
|
ExperimentalClientSideCertCheck: string;
|
|
ExperimentalClientSideCertEnable: string;
|
|
ExperimentalEnableAuthenticationTransfer: string;
|
|
ExperimentalEnableAutomaticReplies: string;
|
|
ExperimentalEnableClickToReply: string;
|
|
ExperimentalEnableDefaultChannelLeaveJoinMessages: string;
|
|
ExperimentalEnablePostMetadata: string;
|
|
ExperimentalGroupUnreadChannels: string;
|
|
ExperimentalHideTownSquareinLHS: string;
|
|
ExperimentalNormalizeMarkdownLinks: string;
|
|
ExperimentalPrimaryTeam: string;
|
|
ExperimentalSharedChannels: string;
|
|
ExperimentalTownSquareIsReadOnly: string;
|
|
ExperimentalViewArchivedChannels: string;
|
|
ExtendSessionLengthWithActivity: string;
|
|
FeatureFlagAppsEnabled?: string;
|
|
FeatureFlagCollapsedThreads?: string;
|
|
FeatureFlagPostPriority?: string;
|
|
FeatureFlagChannelBookmarks?: string;
|
|
FeatureFlagCustomProfileAttributes?: string;
|
|
ForgotPasswordLink?: string;
|
|
GfycatApiKey: string;
|
|
GfycatApiSecret: string;
|
|
GoogleDeveloperKey: string;
|
|
GuestAccountsEnforceMultifactorAuthentication: string;
|
|
HasImageProxy: string;
|
|
HelpLink: string;
|
|
HideGuestTags: string;
|
|
IosAppDownloadLink: string;
|
|
IosLatestVersion: string;
|
|
IosMinVersion: string;
|
|
IntuneMAMEnabled?: string;
|
|
IntuneScope?: string;
|
|
IntuneAuthService?: string;
|
|
LdapFirstNameAttributeSet: string;
|
|
LdapLastNameAttributeSet: string;
|
|
LdapLoginButtonBorderColor: string;
|
|
LdapLoginButtonColor: string;
|
|
LdapLoginButtonTextColor: string;
|
|
LdapLoginFieldName: string;
|
|
LdapNicknameAttributeSet: string;
|
|
LdapPictureAttributeSet: string;
|
|
LdapPositionAttributeSet: string;
|
|
LockTeammateNameDisplay: string;
|
|
MaxFileSize: string;
|
|
MaxMarkdownNodes: string;
|
|
MaxNotificationsPerChannel: string;
|
|
MaxPostSize: string;
|
|
MinimumHashtagLength: string;
|
|
MobileAllowPdfLinkNavigation: string;
|
|
MobileEnableBiometrics: string;
|
|
MobileEnableSecureFilePreview: string;
|
|
MobileJailbreakProtection: string;
|
|
MobilePreventScreenCapture: string;
|
|
MobileExternalBrowser: string;
|
|
OpenIdButtonColor: string;
|
|
OpenIdButtonText: string;
|
|
PasswordEnableForgotLink: string;
|
|
PasswordMinimumLength: string;
|
|
PasswordRequireLowercase: string;
|
|
PasswordRequireNumber: string;
|
|
PasswordRequireSymbol: string;
|
|
PasswordRequireUppercase: string;
|
|
PluginsEnabled: string;
|
|
PostEditTimeLimit: string;
|
|
PostPriority: string;
|
|
PostAcknowledgements: string;
|
|
AllowPersistentNotifications: string;
|
|
PersistentNotificationMaxRecipients: string;
|
|
PersistentNotificationInterval: string;
|
|
AllowPersistentNotificationsForGuests: string;
|
|
PersistentNotificationIntervalMinutes: string;
|
|
PrivacyPolicyLink: string;
|
|
ReportAProblemLink: string;
|
|
ReportAProblemMail: string;
|
|
ReportAProblemType: string;
|
|
RequireEmailVerification: string;
|
|
RestrictDirectMessage: string;
|
|
RunJobs: string;
|
|
SQLDriverName: string;
|
|
SamlFirstNameAttributeSet: string;
|
|
SamlLastNameAttributeSet: string;
|
|
SamlLoginButtonBorderColor: string;
|
|
SamlLoginButtonColor: string;
|
|
SamlLoginButtonText: string;
|
|
SamlLoginButtonTextColor: string;
|
|
SamlNicknameAttributeSet: string;
|
|
SamlPositionAttributeSet: string;
|
|
ScheduledPosts: string;
|
|
SchemaVersion: string;
|
|
SendEmailNotifications: string;
|
|
SendPushNotifications: string;
|
|
ShowEmailAddress: string;
|
|
ShowFullName: string;
|
|
SiteName: string;
|
|
SiteURL: string;
|
|
SupportEmail: string;
|
|
TeammateNameDisplay: string;
|
|
TelemetryId: string;
|
|
TermsOfServiceLink: string;
|
|
TimeBetweenUserTypingUpdatesMilliseconds: string;
|
|
Version: string;
|
|
WebsocketPort: string;
|
|
WebsocketSecurePort: string;
|
|
WebsocketURL: string;
|
|
}
|
|
|
|
type SecurityClientConfig = Pick<ClientConfig, 'MobileEnableBiometrics' | 'MobileJailbreakProtection' | 'MobilePreventScreenCapture' | 'SiteName'>
|