Method checkKmsBoot

kms/auth-simple/index.ts:120–150

(bootInfo: BootInfo, config: AuthConfig, deviceId: string)

  }

  private checkKmsBoot(bootInfo: BootInfo, config: AuthConfig, deviceId: string): BootResponse {
    const mrAggregated = normalizeHex(bootInfo.mrAggregated);

    // check aggregated MR
    const allowedMrs = config.kms.mrAggregated.map(normalizeHex);
    if (!allowedMrs.includes(mrAggregated)) {
      return {
        isAllowed: false,
        reason: 'aggregated MR not allowed',
        gatewayAppId: config.gatewayAppId
      };
    }

    // check device ID
    if (!config.kms.allowAnyDevice) {
      const allowedDevices = config.kms.devices.map(normalizeHex);
      if (allowedDevices.length > 0 && !allowedDevices.includes(deviceId)) {
        return {
          isAllowed: false,
          reason: 'KMS is not allowed to boot on this device',
          gatewayAppId: config.gatewayAppId
        };
      }
    }

    return {
      isAllowed: true,
      reason: '',
      gatewayAppId: config.gatewayAppId
    };
  }

  private checkAppBoot(bootInfo: BootInfo, config: AuthConfig, deviceId: string): BootResponse {
    const appId = normalizeHex(bootInfo.appId);