feat(pedm): add version check API and signature check API

crates/devolutions-pedm-shared/devolutions-pedm-client-http/docs/AboutData.md

@@ -9,6 +9,7 @@ Name | Type | Description | Notes
 **run_id** | **i32** |  | 
 **start_time** | **String** |  | 
 **startup_request_count** | **i32** |  | 
+**version** | **String** |  | 
 
 [[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
 

crates/devolutions-pedm-shared/devolutions-pedm-client-http/docs/Profile.md

@@ -10,6 +10,7 @@ Name | Type | Description | Notes
 **id** | [**uuid::Uuid**](uuid::Uuid.md) |  | 
 **name** | **String** |  | 
 **prompt_secure_desktop** | **bool** |  | 
+**target_must_be_signed** | **bool** |  | 
 
 [[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
 

crates/devolutions-pedm-shared/devolutions-pedm-client-http/src/models/about_data.rs

@@ -24,16 +24,25 @@ pub struct AboutData {
     pub start_time: String,
     #[serde(rename = "StartupRequestCount")]
     pub startup_request_count: i32,
+    #[serde(rename = "Version")]
+    pub version: String,
 }
 
 impl AboutData {
-    pub fn new(current_request_count: i32, run_id: i32, start_time: String, startup_request_count: i32) -> AboutData {
+    pub fn new(
+        current_request_count: i32,
+        run_id: i32,
+        start_time: String,
+        startup_request_count: i32,
+        version: String,
+    ) -> AboutData {
         AboutData {
             current_request_count,
             last_request_time: None,
             run_id,
             start_time,
             startup_request_count,
+            version,
         }
     }
 }

crates/devolutions-pedm-shared/devolutions-pedm-client-http/src/models/profile.rs

@@ -25,6 +25,8 @@ pub struct Profile {
     pub name: String,
     #[serde(rename = "PromptSecureDesktop")]
     pub prompt_secure_desktop: bool,
+    #[serde(rename = "TargetMustBeSigned")]
+    pub target_must_be_signed: bool,
 }
 
 impl Profile {
@@ -35,6 +37,7 @@ impl Profile {
         id: uuid::Uuid,
         name: String,
         prompt_secure_desktop: bool,
+        target_must_be_signed: bool,
     ) -> Profile {
         Profile {
             default_elevation_kind,
@@ -43,6 +46,7 @@ impl Profile {
             id,
             name,
             prompt_secure_desktop,
+            target_must_be_signed,
         }
     }
 }

crates/devolutions-pedm-shared/src/policy.rs

@@ -317,6 +317,7 @@ pub struct Profile {
     pub elevation_settings: ElevationConfigurations,
     pub default_elevation_kind: ElevationKind,
     pub prompt_secure_desktop: bool,
+    pub target_must_be_signed: bool,
 }
 
 impl Identifiable for Profile {

crates/devolutions-pedm/openapi/dotnet-client/Devolutions.Pedm.Client.sln

@@ -1,21 +1,25 @@
 Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio Version 17
-VisualStudioVersion = 17.12.35506.116 d17.12
-MinimumVisualStudioVersion = 10.0.40219.1
-Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Devolutions.Pedm.Client", "src\Devolutions.Pedm.Client\Devolutions.Pedm.Client.csproj", "{0EB49E08-5842-4A2E-A5AC-926E6DD65C15}"
+# Visual Studio 2012
+VisualStudioVersion = 12.0.0.0
+MinimumVisualStudioVersion = 10.0.0.1
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Devolutions.Pedm.Client", "src\Devolutions.Pedm.Client\Devolutions.Pedm.Client.csproj", "0eb49e08-5842-4a2e-a5ac-926e6dd65c15"
 EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
 		Release|Any CPU = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{0EB49E08-5842-4A2E-A5AC-926E6DD65C15}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{0EB49E08-5842-4A2E-A5AC-926E6DD65C15}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{0EB49E08-5842-4A2E-A5AC-926E6DD65C15}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{0EB49E08-5842-4A2E-A5AC-926E6DD65C15}.Release|Any CPU.Build.0 = Release|Any CPU
+		0eb49e08-5842-4a2e-a5ac-926e6dd65c15.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		0eb49e08-5842-4a2e-a5ac-926e6dd65c15.Debug|Any CPU.Build.0 = Debug|Any CPU
+		0eb49e08-5842-4a2e-a5ac-926e6dd65c15.Release|Any CPU.ActiveCfg = Release|Any CPU
+		0eb49e08-5842-4a2e-a5ac-926e6dd65c15.Release|Any CPU.Build.0 = Release|Any CPU
+		{19F1DEBC-DE5E-4517-8062-F000CD499087}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{19F1DEBC-DE5E-4517-8062-F000CD499087}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{19F1DEBC-DE5E-4517-8062-F000CD499087}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{19F1DEBC-DE5E-4517-8062-F000CD499087}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
 	EndGlobalSection
-EndGlobal
+EndGlobal

crates/devolutions-pedm/openapi/dotnet-client/README.md

@@ -5,7 +5,7 @@ No description provided (generated by Openapi Generator https://github.com/opena
 This C# SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: 
-- SDK version: 2025.5.14
+- SDK version: 2025.5.15
 - Generator version: 7.7.0
 - Build package: org.openapitools.codegen.languages.CSharpClientCodegen
 

crates/devolutions-pedm/openapi/dotnet-client/api/openapi.yaml

@@ -342,6 +342,7 @@ components:
   schemas:
     AboutData:
       example:
+        Version: Version
         LastRequestTime: 2000-01-23T04:56:07.000+00:00
         StartTime: 2000-01-23T04:56:07.000+00:00
         RunId: 1
@@ -368,11 +369,14 @@ components:
         StartupRequestCount:
           format: int32
           type: integer
+        Version:
+          type: string
       required:
       - CurrentRequestCount
       - RunId
       - StartTime
       - StartupRequestCount
+      - Version
     Assignment:
       example:
         Users:
@@ -386,6 +390,7 @@ components:
           AccountName: AccountName
         Profile:
           PromptSecureDesktop: true
+          TargetMustBeSigned: true
           DefaultElevationKind: AutoApprove
           Id: 046b6c7f-0b8a-43b9-b35d-6489e6daee91
           ElevationSettings:
@@ -842,6 +847,7 @@ components:
     Profile:
       example:
         PromptSecureDesktop: true
+        TargetMustBeSigned: true
         DefaultElevationKind: AutoApprove
         Id: 046b6c7f-0b8a-43b9-b35d-6489e6daee91
         ElevationSettings:
@@ -866,13 +872,16 @@ components:
           type: string
         PromptSecureDesktop:
           type: boolean
+        TargetMustBeSigned:
+          type: boolean
       required:
       - DefaultElevationKind
       - ElevationMethod
       - ElevationSettings
       - Id
       - Name
       - PromptSecureDesktop
+      - TargetMustBeSigned
     SessionElevationConfiguration:
       example:
         Enabled: true

crates/devolutions-pedm/openapi/dotnet-client/config.json

@@ -2,7 +2,7 @@
   "packageAuthors": "Devolutions Inc.",
   "packageName": "Devolutions.Pedm.Client",
   "packageTitle": "Devolutions PEDM REST API Client",
-  "packageVersion": "2025.5.14",
+  "packageVersion": "2025.5.15",
   "packageDescription": "Client for Devolutions PEDM REST API",
   "packageGuid": "0eb49e08-5842-4a2e-a5ac-926e6dd65c15",
   "packageCopyright": "© Devolutions Inc. All rights reserved.",

crates/devolutions-pedm/openapi/dotnet-client/docs/AboutData.md

@@ -9,6 +9,7 @@ Name | Type | Description | Notes
 **RunId** | **int** |  | 
 **StartTime** | **DateTime** |  | 
 **StartupRequestCount** | **int** |  | 
+**VarVersion** | **string** |  | 
 
 [[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
 

crates/devolutions-pedm/openapi/dotnet-client/docs/Profile.md

@@ -10,6 +10,7 @@ Name | Type | Description | Notes
 **Id** | **Guid** |  | 
 **Name** | **string** |  | 
 **PromptSecureDesktop** | **bool** |  | 
+**TargetMustBeSigned** | **bool** |  | 
 
 [[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
 

crates/devolutions-pedm/openapi/dotnet-client/src/Devolutions.Pedm.Client/Client/Configuration.cs

@@ -32,7 +32,7 @@ public class Configuration : IReadableConfiguration
         /// Version of the package.
         /// </summary>
         /// <value>Version of the package.</value>
-        public const string Version = "2025.5.14";
+        public const string Version = "2025.5.15";
 
         /// <summary>
         /// Identifier for ISO 8601 DateTime Format
@@ -116,7 +116,7 @@ public class Configuration : IReadableConfiguration
         public Configuration()
         {
             Proxy = null;
-            UserAgent = WebUtility.UrlEncode("OpenAPI-Generator/2025.5.14/csharp");
+            UserAgent = WebUtility.UrlEncode("OpenAPI-Generator/2025.5.15/csharp");
             BasePath = "http://localhost";
             DefaultHeaders = new ConcurrentDictionary<string, string>();
             ApiKey = new ConcurrentDictionary<string, string>();
@@ -539,7 +539,7 @@ public static string ToDebugReport()
             report += "    OS: " + System.Environment.OSVersion + "\n";
             report += "    .NET Framework Version: " + System.Environment.Version  + "\n";
             report += "    Version of the API: \n";
-            report += "    SDK Package Version: 2025.5.14\n";
+            report += "    SDK Package Version: 2025.5.15\n";
 
             return report;
         }

crates/devolutions-pedm/openapi/dotnet-client/src/Devolutions.Pedm.Client/Devolutions.Pedm.Client.csproj

@@ -12,7 +12,7 @@
     <Description>Client for Devolutions PEDM REST API</Description>
     <Copyright>© Devolutions Inc. All rights reserved.</Copyright>
     <RootNamespace>Devolutions.Pedm.Client</RootNamespace>
-    <Version>2025.5.14</Version>
+    <Version>2025.5.15</Version>
     <DocumentationFile>bin\$(Configuration)\$(TargetFramework)\Devolutions.Pedm.Client.xml</DocumentationFile>
     <PackageLicenseExpression>MIT OR Apache-2.0</PackageLicenseExpression>
     <RepositoryUrl>https://github.com/Devolutions/devolutions-gateway.git</RepositoryUrl>

crates/devolutions-pedm/openapi/dotnet-client/src/Devolutions.Pedm.Client/Model/AboutData.cs

@@ -44,12 +44,19 @@ protected AboutData() { }
         /// <param name="runId">runId (required).</param>
         /// <param name="startTime">startTime (required).</param>
         /// <param name="startupRequestCount">startupRequestCount (required).</param>
-        public AboutData(int currentRequestCount = default(int), DateTime lastRequestTime = default(DateTime), int runId = default(int), DateTime startTime = default(DateTime), int startupRequestCount = default(int))
+        /// <param name="varVersion">varVersion (required).</param>
+        public AboutData(int currentRequestCount = default(int), DateTime lastRequestTime = default(DateTime), int runId = default(int), DateTime startTime = default(DateTime), int startupRequestCount = default(int), string varVersion = default(string))
         {
             this.CurrentRequestCount = currentRequestCount;
             this.RunId = runId;
             this.StartTime = startTime;
             this.StartupRequestCount = startupRequestCount;
+            // to ensure "varVersion" is required (not null)
+            if (varVersion == null)
+            {
+                throw new ArgumentNullException("varVersion is a required property for AboutData and cannot be null");
+            }
+            this.VarVersion = varVersion;
             this.LastRequestTime = lastRequestTime;
         }
 
@@ -84,6 +91,12 @@ protected AboutData() { }
         [DataMember(Name = "StartupRequestCount", IsRequired = true, EmitDefaultValue = true)]
         public int StartupRequestCount { get; set; }
 
+        /// <summary>
+        /// Gets or Sets VarVersion
+        /// </summary>
+        [DataMember(Name = "Version", IsRequired = true, EmitDefaultValue = true)]
+        public string VarVersion { get; set; }
+
         /// <summary>
         /// Returns the string presentation of the object
         /// </summary>
@@ -97,6 +110,7 @@ public override string ToString()
             sb.Append("  RunId: ").Append(RunId).Append("\n");
             sb.Append("  StartTime: ").Append(StartTime).Append("\n");
             sb.Append("  StartupRequestCount: ").Append(StartupRequestCount).Append("\n");
+            sb.Append("  VarVersion: ").Append(VarVersion).Append("\n");
             sb.Append("}\n");
             return sb.ToString();
         }

crates/devolutions-pedm/openapi/dotnet-client/src/Devolutions.Pedm.Client/Model/Profile.cs

@@ -57,7 +57,8 @@ protected Profile() { }
         /// <param name="id">id (required).</param>
         /// <param name="name">name (required).</param>
         /// <param name="promptSecureDesktop">promptSecureDesktop (required).</param>
-        public Profile(ElevationKind defaultElevationKind = default(ElevationKind), ElevationMethod elevationMethod = default(ElevationMethod), ElevationConfigurations elevationSettings = default(ElevationConfigurations), Guid id = default(Guid), string name = default(string), bool promptSecureDesktop = default(bool))
+        /// <param name="targetMustBeSigned">targetMustBeSigned (required).</param>
+        public Profile(ElevationKind defaultElevationKind = default(ElevationKind), ElevationMethod elevationMethod = default(ElevationMethod), ElevationConfigurations elevationSettings = default(ElevationConfigurations), Guid id = default(Guid), string name = default(string), bool promptSecureDesktop = default(bool), bool targetMustBeSigned = default(bool))
         {
             this.DefaultElevationKind = defaultElevationKind;
             this.ElevationMethod = elevationMethod;
@@ -75,6 +76,7 @@ protected Profile() { }
             }
             this.Name = name;
             this.PromptSecureDesktop = promptSecureDesktop;
+            this.TargetMustBeSigned = targetMustBeSigned;
         }
 
         /// <summary>
@@ -101,6 +103,12 @@ protected Profile() { }
         [DataMember(Name = "PromptSecureDesktop", IsRequired = true, EmitDefaultValue = true)]
         public bool PromptSecureDesktop { get; set; }
 
+        /// <summary>
+        /// Gets or Sets TargetMustBeSigned
+        /// </summary>
+        [DataMember(Name = "TargetMustBeSigned", IsRequired = true, EmitDefaultValue = true)]
+        public bool TargetMustBeSigned { get; set; }
+
         /// <summary>
         /// Returns the string presentation of the object
         /// </summary>
@@ -115,6 +123,7 @@ public override string ToString()
             sb.Append("  Id: ").Append(Id).Append("\n");
             sb.Append("  Name: ").Append(Name).Append("\n");
             sb.Append("  PromptSecureDesktop: ").Append(PromptSecureDesktop).Append("\n");
+            sb.Append("  TargetMustBeSigned: ").Append(TargetMustBeSigned).Append("\n");
             sb.Append("}\n");
             return sb.ToString();
         }

crates/devolutions-pedm/openapi/pedm-api.yaml

@@ -340,6 +340,7 @@ components:
       - RunId
       - StartTime
       - StartupRequestCount
+      - Version
       properties:
         CurrentRequestCount:
           type: integer
@@ -361,6 +362,8 @@ components:
         StartupRequestCount:
           type: integer
           format: int32
+        Version:
+          type: string
     Assignment:
       type: object
       required:
@@ -644,6 +647,7 @@ components:
       - Id
       - Name
       - PromptSecureDesktop
+      - TargetMustBeSigned
       properties:
         DefaultElevationKind:
           $ref: '#/components/schemas/ElevationKind'
@@ -658,6 +662,8 @@ components:
           type: string
         PromptSecureDesktop:
           type: boolean
+        TargetMustBeSigned:
+          type: boolean
     SessionElevationConfiguration:
       type: object
       required:

crates/devolutions-pedm/src/api/about.rs

@@ -21,5 +21,6 @@ pub(crate) async fn about(
         startup_request_count: state.startup_info.request_count,
         current_request_count: state.req_counter.load(Ordering::Relaxed),
         last_request_time: db.get_last_request_time().await?,
+        version: win_api_wrappers::utils::get_exe_version()?,
     }))
 }

crates/devolutions-pedm/src/api/err.rs

@@ -51,6 +51,12 @@ impl From<DbError> for HandlerError {
     }
 }
 
+impl From<anyhow::Error> for HandlerError {
+    fn from(e: anyhow::Error) -> Self {
+        Self(StatusCode::INTERNAL_SERVER_ERROR, Some(e.to_string()))
+    }
+}
+
 #[cfg(feature = "postgres")]
 impl From<tokio_postgres::Error> for HandlerError {
     fn from(e: tokio_postgres::Error) -> Self {

crates/devolutions-pedm/src/model.rs

@@ -13,6 +13,7 @@ pub(crate) struct AboutData {
     ///
     /// This can be `None` if `/about` is the first request made.
     pub last_request_time: Option<DateTime<Utc>>,
+    pub version: String,
 }
 
 /// Immutable startup info.