posture

type ActiveServiceProvider ¶ added in v1.2.9

type ActiveServiceProvider interface {
	GetActiveDialServices() []*rest_model.ServiceDetail
	GetActiveBindServices() []*rest_model.ServiceDetail
}

ActiveServiceProvider supplies information about services currently in use by the client, enabling the cache to determine which posture checks are relevant.

type ActiveServiceProviderFunc ¶ added in v1.2.9

type ActiveServiceProviderFunc func() []*rest_model.ServiceDetail

ActiveServiceProviderFunc is a function adapter that implements ActiveServiceProvider for both dial and bind service queries.

func (f ActiveServiceProviderFunc) GetActiveDialServices() []*rest_model.ServiceDetail

type ApiSessionProvider ¶ added in v1.2.9

type ApiSessionProvider interface {
	GetCurrentApiSession() edge_apis.ApiSession
}

ApiSessionProvider supplies the current API session, enabling submitters to determine the appropriate destination for posture responses based on authentication type.

type Cache ¶

type Cache struct {
	DomainProvider    DomainProvider
	MacProvider       MacProvider
	OsProvider        OsProvider
	ProcessProvider   ProcessProvider
	TotpTokenProvider edge_apis.TotpTokenProvider
	// contains filtered or unexported fields
}

Cache manages device posture data collection, tracking changes over time and coordinating submission of posture responses when device state changes or policies require updates.

func NewCache(activeServiceProvider ActiveServiceProvider, submitter Submitter, totpTokenProvider edge_apis.TotpTokenProvider, closeNotify <-chan struct{}) *Cache

func (cache *Cache) Evaluate()

func (cache *Cache) GetAllResponses() []rest_model.PostureResponseCreate

func (cache *Cache) GetChangedResponses(currentData, candidateData *CacheData, activeQueryTypes map[string]string) []rest_model.PostureResponseCreate

func (cache *Cache) InitializePostureOnEdgeRouter(conn edge.RouterConn) error

func (cache *Cache) OnUnlock(event UnlockEvent)

func (cache *Cache) SendResponses(responses []rest_model.PostureResponseCreate) []error

func (cache *Cache) SetDomainProviderFunc(f func() string)

func (cache *Cache) SetMacProviderFunc(f func() []string)

func (cache *Cache) SetOsProviderFunc(f func() OsInfo)

func (cache *Cache) SetProcessProviderFunc(f func(string) ProcessInfo)

func (cache *Cache) SetTotpProviderFunc(f func() <-chan edge_apis.TotpTokenResult)

func (cache *Cache) SetTotpToken(token *rest_model.TotpToken)

func (cache *Cache) SimulateUnlock()

func (cache *Cache) SimulateWake()

type CacheData ¶ added in v0.15.46

type CacheData struct {
	Processes    cmap.ConcurrentMap[string, ProcessInfo] // map[processPath]ProcessInfo
	MacAddresses []string
	Os           OsInfo
	Domain       string
	TotpToken    edge_apis.TotpTokenResult
	OnWake       WakeEvent
	OnUnlock     UnlockEvent
	Index        uint64
	Responses    []rest_model.PostureResponseCreate
}

CacheData holds the current snapshot of device posture information including running processes, network configuration, operating system details, and authentication state.

func NewCacheData() *CacheData

type DefaultMacProvider ¶ added in v1.2.9

type DefaultMacProvider struct{}

DefaultMacProvider queries the system's network interfaces to collect MAC addresses.

func (p *DefaultMacProvider) GetMacAddresses() []string

type DefaultOsProvider ¶ added in v1.2.9

type DefaultOsProvider struct{}

DefaultOsProvider queries platform information to determine OS type and version.

func (provider DefaultOsProvider) GetOsInfo() OsInfo

type DefaultProcessProvider ¶ added in v1.2.9

type DefaultProcessProvider struct{}

func (p *DefaultProcessProvider) GetProcessInfo(providedPath string) ProcessInfo

type DomainProvider ¶ added in v1.2.9

type DomainProvider interface {
	GetDomain() string
}

DomainProvider supplies the Windows domain name that the device is joined to, used for domain membership posture checks.

func DomainFuncAsProvider(f func() string) DomainProvider

func NewDomainProvider() DomainProvider

type DomainProviderFunc ¶ added in v1.2.9

type DomainProviderFunc func() string

DomainProviderFunc is a function adapter that implements DomainProvider.

func (f DomainProviderFunc) GetDomain() string

type EmptyDomainProvider ¶ added in v1.2.9

type EmptyDomainProvider struct{}

func (p *EmptyDomainProvider) GetDomain() string

type EventState ¶ added in v1.2.9

type EventState interface {
	// ListenForWake registers a callback for system wake events, returning a function
	// to stop listening.
	ListenForWake(func(WakeEvent)) (stop func(), err error)

	// ListenForUnlock registers a callback for device unlock events, returning a function
	// to stop listening.
	ListenForUnlock(func(event UnlockEvent)) (stop func(), err error)
}

EventState provides platform-specific monitoring of system events that may affect posture compliance, such as waking from sleep or unlocking the device.

func NewEventState() EventState

type MacProvider ¶ added in v1.2.9

type MacProvider interface {
	GetMacAddresses() []string
}

MacProvider supplies the list of MAC addresses for network interfaces on the device, used for MAC address posture checks.

func NewMacProvider() MacProvider

type MacProviderFunc ¶ added in v1.2.9

type MacProviderFunc func() []string

MacProviderFunc is a function adapter that implements MacProvider.

func (f MacProviderFunc) GetMacAddresses() []string

type MultiDestinationError ¶ added in v1.2.9

type MultiDestinationError struct {
	// contains filtered or unexported fields
}

MultiDestinationError aggregates errors from posture response submission attempts to multiple destinations (controller and routers), providing detailed failure information.

func (e *MultiDestinationError) Error() string

func (e *MultiDestinationError) HasErrors() bool

type MultiSubmitter ¶ added in v1.2.9

type MultiSubmitter struct {
	ApiSessionProvider       ApiSessionProvider
	LegacySubmitter          Submitter
	RouterConnectionProvider RouterConnectionProvider
}

MultiSubmitter routes posture responses to appropriate destinations based on session type and router capabilities. Legacy sessions always submit to the controller, while OIDC sessions submit to routers that support posture checks and fall back to the controller for older routers.

func NewMultiSubmitter(apiSessionProvider ApiSessionProvider, legacySubmitter Submitter, routerConnectionProvider RouterConnectionProvider) *MultiSubmitter

func (m *MultiSubmitter) SendPostureResponse(response rest_model.PostureResponseCreate) error

func (m *MultiSubmitter) SendPostureResponseBulk(responses []rest_model.PostureResponseCreate) error

type NoOpEventState ¶ added in v1.2.9

type NoOpEventState struct {
	// contains filtered or unexported fields
}

NoOpEventState is a placeholder implementation that stores callbacks without actually monitoring system events. Platform-specific implementations should be used for production deployments.

func (n *NoOpEventState) ListenForUnlock(f func(event UnlockEvent)) (stop func(), err error)

func (n *NoOpEventState) ListenForWake(f func(WakeEvent)) (stop func(), err error)

type OsInfo ¶

type OsInfo struct {
	Type    string
	Version string
}

OsInfo contains the operating system type and semantic version.

type OsProvider ¶ added in v1.2.9

type OsProvider interface {
	GetOsInfo() OsInfo
}

OsProvider supplies operating system type and version information for OS posture checks.

func NewOsProvider() OsProvider

type OsProviderFunc ¶ added in v1.2.9

type OsProviderFunc func() OsInfo

OsProviderFunc is a function adapter that implements OsProvider.

func (f OsProviderFunc) GetOsInfo() OsInfo

type ProcessInfo ¶

type ProcessInfo struct {
	IsRunning          bool
	Hash               string
	SignerFingerprints []string
	QueryId            string
}

ProcessInfo contains details about a specific process including whether it's running, its binary hash, and code signing fingerprints.

type ProcessInfoFunc ¶ added in v1.2.9

type ProcessInfoFunc func(path string) ProcessInfo

ProcessInfoFunc is a function adapter that implements ProcessProvider.

func (f ProcessInfoFunc) GetProcessInfo(path string) ProcessInfo

type ProcessProvider ¶ added in v1.2.9

type ProcessProvider interface {
	GetProcessInfo(path string) ProcessInfo
}

ProcessProvider supplies information about specific processes running on the device, including execution state, binary hash, and code signing details for process posture checks.

func NewProcessProvider() ProcessProvider

type RouterConnectionProvider ¶ added in v1.2.9

type RouterConnectionProvider interface {
	GetRouterConnections() []edge.RouterConn
}

RouterConnectionProvider supplies active router connections for submitting posture data directly to edge routers in high-availability deployments.

type Submitter ¶ added in v0.19.0

type Submitter interface {
	SendPostureResponse(response rest_model.PostureResponseCreate) error
	SendPostureResponseBulk(responses []rest_model.PostureResponseCreate) error
}

Submitter handles transmission of posture response data to authentication and policy enforcement endpoints.

type UnlockEvent ¶ added in v1.2.9

type UnlockEvent struct {
	At time.Time
}

UnlockEvent represents a device unlock event after screen lock, used to trigger posture re-evaluation when user authentication state changes.

type WakeEvent ¶ added in v1.2.9

type WakeEvent struct {
	At time.Time
}

WakeEvent represents a device wake event from sleep or hibernation, used to trigger posture re-evaluation when the system resumes from a suspended state.