188 lines
9.4 KiB
PHP
188 lines
9.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Services\TenantConfiguration;
|
|
|
|
use App\Models\TenantConfigurationResourceType;
|
|
use App\Support\TenantConfiguration\SourceClass;
|
|
|
|
final class CoverageIdentityStrategyRegistry
|
|
{
|
|
/**
|
|
* @var array<string, array<string, mixed>>
|
|
*/
|
|
private const STRATEGIES = [
|
|
'deviceAndAppManagementAssignmentFilter' => [
|
|
'strategy_identifier' => 'tcm.assignment_filter.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'assignmentFilterId'],
|
|
'fallback_identity_fields' => ['templateReference.templateId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'assignmentFilterManagementType', 'rule'],
|
|
'derived_composite_fields' => ['platform', 'payloadType', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'assignmentFilterManagementType', 'source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'deviceEnrollmentLimitRestriction' => [
|
|
'strategy_identifier' => 'tcm.device_enrollment_limit_restriction.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'restrictionId'],
|
|
'fallback_identity_fields' => ['settingId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'limit', 'priority'],
|
|
'derived_composite_fields' => ['platform', 'limit', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'limit', 'priority', 'source_metadata.source_contract_key'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'deviceEnrollmentPlatformRestriction' => [
|
|
'strategy_identifier' => 'tcm.device_enrollment_platform_restriction.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'restrictionId'],
|
|
'fallback_identity_fields' => ['platformRestrictionId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'platformType', 'restrictionType'],
|
|
'derived_composite_fields' => ['platform', 'platformType', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'platformType', 'restrictionType', 'source_metadata.source_contract_key'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'deviceEnrollmentStatusPageWindows10' => [
|
|
'strategy_identifier' => 'tcm.device_enrollment_status_page_windows10.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'statusPageId'],
|
|
'fallback_identity_fields' => ['enrollmentStatusPageId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'installProgressTimeoutInMinutes', 'priority'],
|
|
'derived_composite_fields' => ['platform', 'showInstallationProgress', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'showInstallationProgress', 'installProgressTimeoutInMinutes', 'source_metadata.source_contract_key'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'appProtectionPolicyAndroid' => [
|
|
'strategy_identifier' => 'tcm.app_protection_policy_android.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'policyId'],
|
|
'fallback_identity_fields' => ['appProtectionPolicyId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'targetedAppManagementLevels', 'roleScopeTagIds'],
|
|
'derived_composite_fields' => ['platform', 'targetedAppManagementLevels', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'targetedAppManagementLevels', 'roleScopeTagIds', 'source_metadata.source_contract_key'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'appProtectionPolicyiOS' => [
|
|
'strategy_identifier' => 'tcm.app_protection_policy_ios.v1',
|
|
'preferred_identity_fields' => ['id', 'sourceId', 'policyId'],
|
|
'fallback_identity_fields' => ['appProtectionPolicyId', 'sourceKey'],
|
|
'source_composite_fields' => ['platform', 'targetedAppManagementLevels', 'roleScopeTagIds'],
|
|
'derived_composite_fields' => ['platform', 'targetedAppManagementLevels', 'source_metadata.source_contract_key'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['platform', 'targetedAppManagementLevels', 'roleScopeTagIds', 'source_metadata.source_contract_key'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'notificationMessageTemplate' => [
|
|
'strategy_identifier' => 'graph.notification_message_template.v1',
|
|
'preferred_identity_fields' => ['id', 'templateId', 'sourceId'],
|
|
'fallback_identity_fields' => ['notificationMessageTemplateId', 'sourceKey'],
|
|
'source_composite_fields' => ['brandingOptions', 'source_metadata.source_contract_key'],
|
|
'derived_composite_fields' => ['source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['brandingOptions', 'source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
'roleScopeTag' => [
|
|
'strategy_identifier' => 'graph_beta.role_scope_tag.v1',
|
|
'preferred_identity_fields' => ['id', 'roleScopeTagId', 'sourceId'],
|
|
'fallback_identity_fields' => ['sourceKey'],
|
|
'source_composite_fields' => ['source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'derived_composite_fields' => ['source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => ['description', 'source_metadata.source_contract_key', 'source_metadata.source_version'],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => true,
|
|
'allows_experimental_identity' => true,
|
|
'derived_claims_allowed' => false,
|
|
],
|
|
];
|
|
|
|
/**
|
|
* @return array<string, array<string, mixed>>
|
|
*/
|
|
public function strategies(): array
|
|
{
|
|
return self::STRATEGIES;
|
|
}
|
|
|
|
/**
|
|
* @return array<string, mixed>
|
|
*/
|
|
public function strategyFor(TenantConfigurationResourceType|string $resourceType): array
|
|
{
|
|
$canonicalType = $resourceType instanceof TenantConfigurationResourceType
|
|
? (string) $resourceType->canonical_type
|
|
: $resourceType;
|
|
|
|
$sourceClass = $resourceType instanceof TenantConfigurationResourceType
|
|
? $this->sourceClassValue($resourceType->source_class)
|
|
: null;
|
|
|
|
$strategy = self::STRATEGIES[$canonicalType] ?? null;
|
|
|
|
if ($strategy === null) {
|
|
return [
|
|
'strategy_identifier' => 'unsupported.'.$canonicalType,
|
|
'canonical_type' => $canonicalType,
|
|
'source_class' => $sourceClass,
|
|
'preferred_identity_fields' => [],
|
|
'fallback_identity_fields' => [],
|
|
'source_composite_fields' => [],
|
|
'derived_composite_fields' => [],
|
|
'display_fields' => ['displayName', 'name'],
|
|
'secondary_fields' => [],
|
|
'requires_provider_connection_scope' => true,
|
|
'allows_derived_identity' => false,
|
|
'allows_experimental_identity' => false,
|
|
'derived_claims_allowed' => false,
|
|
'supported' => false,
|
|
];
|
|
}
|
|
|
|
return [
|
|
...$strategy,
|
|
'canonical_type' => $canonicalType,
|
|
'source_class' => $sourceClass,
|
|
'supported' => true,
|
|
];
|
|
}
|
|
|
|
private function sourceClassValue(mixed $sourceClass): ?string
|
|
{
|
|
if ($sourceClass instanceof SourceClass) {
|
|
return $sourceClass->value;
|
|
}
|
|
|
|
if (is_scalar($sourceClass)) {
|
|
$sourceClass = trim((string) $sourceClass);
|
|
|
|
return $sourceClass !== '' ? $sourceClass : null;
|
|
}
|
|
|
|
return null;
|
|
}
|
|
}
|
|
|