Do I have to change my report and approve workflow?

[gabrielyncas]

Hello!

I recently receive an email that says that the two endpoints /v1/devices/*/approve and /v1/devices/*/report will be deprecated soon. In my app I don't call these endpoints directly but I made a call to reportDevice and approveDevice methods on castleInstance. These two methods will be deprecated too? I think so, but I'm asking to make sure.

Thanks in advance.

[NedjaEM]

Hey @gabrielyncas, that's correct, the reportDevice and approveDevice methods will be deprecated, so you'll need to update your reporting and approval workflow. We recommend switching to Lists for managing device approvals and reports. You can read more on a suggested list flow here. You can add devices to a list programmatically using the Lists API.

[gabrielyncas]

Hello @NedjaEM , thanks for the response. Could you provide a guide/docs of how to do this using the npm SDK? I didn't find a method to create a policy for example

[NedjaEM]

Hi @gabrielyncas, we recommend relying on the Lists API to add devices to lists. Policies would need to be created directly from the Castle dashboard atm.

[gabrielyncas]

Ok @NedjaEM, thanks. I access the castle dashboard here and got some Lists already created:

• Blocked users
• Blocked devices
• Blocked IPs
• Trusted Users
• Trusted devices
• Trusted IPs
• Compromised users
• Challenged devices

Could you tell me if these lists are created by default by Castle? If not created, I will create a Reported Devices list. Otherwise I will use the existent Blocked devices list

[NedjaEM]

@gabrielyncas these lists are created by default. If you're looking to keep a list of device + user combinations, I recommend creating a new Reported Devices list with two fields (device fp and user id).

[gabrielyncas]

@NedjaEM Thanks for the answer. I have another doubt, I don't undertand quite well all Castle's features but in my company code they just call the reportDevice method passing just the device token like below:

castleInstance.reportDevice({
    device_token,
  })

In this case what does the reportDevice method will do? I tried to find in the docs but I couldn't find anything. I say this because I think it is just reporting a device, not blocking his access or nothing like that, but I don't know. I need to know what this code is actualy doing to write the new one.