set-credentials.sh

#!/bin/bash

: <<DOC
Script to add the required credentials into your login keychain to allow repeated use.

1. Ask for the instance list, show list, ask to apply to one, multiple or all
2. Ask for the username (show any existing value of first instance in list as default)
3. Ask for the password (show the associated user if already existing)
4. Loop through each selected instance, check for an existing keychain entry, create or overwrite
5. Check the credentials are working using the API
DOC

# source the _common-framework.sh file
# TIP for Visual Studio Code - Add Custom Arg '-x' to the Shellcheck extension settings
source "_common-framework.sh"

# reduce the curl tries
max_tries_override=2

# Command line override for the above settings
while [[ "$#" -gt 0 ]]; do
    key="$1"
    case $key in
        -v|--verbose)
            verbose=1
        ;;
    esac
    # Shift after checking all the cases to get the next option
    shift
done
echo

# ------------------------------------------------------------------------------------
# 1. Ask for the instance list, show list, ask to apply to one, multiple or all
# ------------------------------------------------------------------------------------

choose_destination_instances

# ------------------------------------------------------------------------------------
# 2. Ask for the username (show any existing value of first instance in list as default)
# ------------------------------------------------------------------------------------

echo "Enter username for ${instance_choice_array[0]}"
read -r -p "User : " inputted_username
if [[ ! $inputted_username ]]; then
    echo "No username supplied"
    exit 1
fi

# check for existing service entry in login keychain
instance_base="${instance_choice_array[0]/*:\/\//}"
kc_check=$(security find-internet-password -s "${instance_choice_array[0]}" -l "$instance_base ($inputted_username)" -a "$inputted_username" -g 2>/dev/null)

if [[ $kc_check ]]; then
    echo "Keychain entry for $inputted_username found on $instance_base"
else
    echo "Keychain entry for $inputted_username not found on $instance_base"
fi

echo
# check for existing password entry in login keychain
instance_pass=$(security find-internet-password -s "${instance_choice_array[0]}" -l "$instance_base ($inputted_username)" -a "$inputted_username" -w -g 2>&1)

if [[ $instance_pass ]]; then
    echo "Password for $inputted_username found on $instance_base"
else
    echo "Password for $inputted_username not found on $instance_base"
fi

echo "Enter password for $inputted_username on $instance_base"
[[ $instance_pass ]] && echo "(or press ENTER to use existing password from keychain for $inputted_username)"
read -r -s -p "Pass : " inputted_password
if [[ "$inputted_password" ]]; then
    instance_pass="$inputted_password"
elif [[ ! $instance_pass ]]; then
    echo "No password supplied"
    exit 1
fi

# ------------------------------------------------------------------------------------
# 3. Loop through each selected instance
# ------------------------------------------------------------------------------------
echo
echo
for instance in "${instance_choice_array[@]}"; do
    instance_base="${instance/*:\/\//}"
    security add-internet-password -U -s "$instance" -l "$instance_base ($inputted_username)" -a "$inputted_username" -w "$instance_pass"
    echo "Credentials for $instance_base (user $inputted_username) added to keychain"
done

# ------------------------------------------------------------------------------------
# 4. Verify the credentials
# ------------------------------------------------------------------------------------

check_credentials() {
    # grab the Jamf Pro version to check that communication is working.
    jss_url="$instance"
    set_credentials "$jss_url"
    # send request
    curl_url="$jss_url/api/v1/jamf-pro-version"
    curl_args=("--request")
    curl_args+=("GET")
    curl_args+=("--header")
    curl_args+=("Accept: application/json")
    send_curl_request
}

echo
for instance in "${instance_choice_array[@]}"; do
    instance_base="${instance/*:\/\//}"
    echo "Checking credentials for $instance_base (user $inputted_username)"
    check_credentials
    # print out version
    version=$( ljt /version < "$curl_output_file" )
    if [[ $version ]]; then
        echo "Connection successful. Jamf Pro version: $version"
    fi
done

echo
echo "Script complete"
echo