VPN daemon utilized by nitoTV to deliver VPN access on tvOS

@interface AppDelegate () 
@property (nonatomic, strong) NSXPCConnection *daemonConnection;
@end


//this is just a partial implementation to give a quick App Side example of toggling the VPN until i can update the sample code.

@implementation AppDelegate 

- (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions {

    //whatever code you already have here, ie setting up UI if not using storyboard
    
    [self _setupDaemonConnection];    
    return YES;
}

- (void)daemonDidRequestQueuedNotification {
    NSLog(@"*** [nitoTV] :: daemonDidRequestQueuedNotification");
 
    [self _notifyDaemonOfMessageHandled];
}

- (void)_setupDaemonConnection {
    
    if (self.daemonConnection) {
        [self.daemonConnection invalidate];
        self.daemonConnection = nil;
    }
    
    self.daemonConnection = [[NSXPCConnection alloc] initWithMachServiceName:@"com.nito.vpnd"];
    self.daemonConnection.remoteObjectInterface = [NSXPCInterface interfaceWithProtocol:@protocol(VPNDaemonProtocol)];
    
    self.daemonConnection.exportedInterface = [NSXPCInterface interfaceWithProtocol:@protocol(VPNApplicationProtocol)];
    self.daemonConnection.exportedObject = self;
    
    [self.daemonConnection resume];
    
    // Handle connection errors
    __weak AppDelegate *weakSelf = self;
    self.daemonConnection.interruptionHandler = ^{
        NSLog(@"interruption handler called");
        
        [weakSelf.daemonConnection invalidate];
        weakSelf.daemonConnection = nil;
        
        // Re-create connection
        [weakSelf _setupDaemonConnection];
    };
    
    self.daemonConnection.invalidationHandler = ^{
        NSLog(@"invalidation handler called");
        
        [weakSelf.daemonConnection invalidate];
        weakSelf.daemonConnection = nil;
        
        // Notify of failed connection
        [weakSelf _notifyDaemonFailedToConnect];
    };
    
    // Notify daemon that we've now launched
    @try {
        [[self.daemonConnection remoteObjectProxyWithErrorHandler:^(NSError * _Nonnull error) {
            NSLog(@"%@", error);
            
            if (error.code == NSXPCConnectionInvalid) {
                [weakSelf _notifyDaemonFailedToConnect];
            }
        }] applicationDidLaunch];

    } @catch (NSException *e) {
        [self _notifyDaemonFailedToConnect];
        return;
    }
    
    NSLog(@"*** [nitoTV] :: Setup daemon connection: %@", self.daemonConnection);
}

- (void)_notifyDaemonFailedToConnect {
    if (!self.applicationIsActive) {
        self.pendingDaemonConnectionAlert = YES;
        return;
    }
    
    // That's not good...
    UIAlertController *av = [UIAlertController alertControllerWithTitle:@"Error" message:@"Could not connect to VPN daemon.\n\nPlease restart nitoTV." preferredStyle:UIAlertControllerStyleAlert];
    
    UIAlertAction *action = [UIAlertAction actionWithTitle:@"OK" style:UIAlertActionStyleCancel handler:^(UIAlertAction * _Nonnull action) {}];
    [av addAction:action];
    
    [self.window.rootViewController presentViewController:av animated:YES completion:nil];
    
    NSLog(@"*** [nitoTV] :: ERROR :: Failed to setup daemon connection: %@", self.daemonConnection);
}

- (void)toggleVPN {
    @try{
           [[self.daemonConnection remoteObjectProxy] applicationRequestsToggleVPN];
       } @catch (NSException *e) {
           NSLog(@"[nitoTV] failed to applicationRequestsVPNStatus with exception: %@", e);
           // Error previous shown
       }
}

- (void)requestExpirationStatus {
    @try{
           [[self.daemonConnection remoteObjectProxy] applicationRequestExpirationStatus];
       } @catch (NSException *e) {
           NSLog(@"[nitoTV] failed to applicationRequestExpirationStatus with exception: %@", e);
           // Error previous shown
       }
}

- (void)requestVPNStatus {
    @try{
           [[self.daemonConnection remoteObjectProxy] applicationRequestsVPNStatus];
       } @catch (NSException *e) {
           NSLog(@"[nitoTV] failed to applicationRequestsVPNStatus with exception: %@", e);
           // Error previous shown
       }
}

- (void)daemonProfileExpired:(BOOL)expired {
    
    if (expired){
        NSLog(@"VPN MC is expired!");
    } else {
        NSLog(@"VPN MC is not expired!");
    }
}

- (void)daemonReportsStatus:(NEVPNStatus)status {
//track current status here, connected, disconnected etc.
    NSLog(@"daemon reported status: %lu", status);
}

- (void)stopVPNService {
    
    @try{
        [[self.daemonConnection remoteObjectProxy] applicationStopVPNConnection];
    } @catch (NSException *e) {
        NSLog(@"[nitoTV] failed to startVPNPayload with exception: %@", e);
        // Error previous shown
    }
}

- (void)setCurrentInterfaceMode:(UIUserInterfaceStyle)style {
    
    @try {
        [[self.daemonConnection remoteObjectProxy] applicationChangedViewMode:style];
    } @catch (NSException *exception) {
        NSLog(@"[nitoTV] failed setCurrentInterfaceMode with exception: %@", exception);
    } @finally {
        //
    }
}

//NOTE: you will NOT be able to listen for com.apple.mobileconfig, consider creating a custom extension / UTI type that you specifically listen for. 
      

- (BOOL)application:(UIApplication *)app openURL:(NSURL *)url options:(NSDictionary<NSString *,id> *)options{
    NSLog(@"url: %@ path: %@ options: %@", url, url.path, options);
    if ([url isFileURL]){
        NSString *ext = [[[url path] pathExtension] lowercaseString];
        if ([ext isEqualToString:@"mobileconfig"]){ 
            NSLog(@"mobile config file type: %@", ext);
            [self promptToInstallMobileConfig:url.path];
            return YES;
        } else {
            NSLog(@"unrecognized file type: %@", ext);
            return NO;
        }
    }
    return YES;
}

- (void)promptToInstallMobileConfig:(NSString *)mcfile {
    
    NSDictionary *dict = [NSDictionary dictionaryWithContentsOfFile:mcfile];
    NSArray *payloads = [dict valueForKey:@"PayloadContent"];
    if (payloads.count > 0){
        NSDictionary *mainPayload = payloads[0];
        NSLog(@"[nitoTV] mainPayload: %@", mainPayload);
        NSString *payloadType = mainPayload[@"PayloadType"];
        NSString *payloadDisplayName = mainPayload[@"PayloadDisplayName"];
        NSString *payloadDescription = mainPayload[@"PayloadDescription"];

        if ([payloadType isEqualToString:@"com.apple.vpn.managed"]){
            
            NSString *title = [NSString stringWithFormat:@"Install '%@'?", payloadDisplayName];
            UIAlertController *ac = [UIAlertController alertControllerWithTitle:title message:payloadDescription preferredStyle:UIAlertControllerStyleAlert];
            UIAlertAction *okAction = [UIAlertAction actionWithTitle:@"OK" style:UIAlertActionStyleDefault handler:^(UIAlertAction * _Nonnull action) {
                
                NSLog(@"installing VPN payload: %@", payloadDisplayName);
                [self startVPNPayload:mainPayload];
            }];
            [ac addAction:okAction];
            [ac addAction:[UIAlertAction actionWithTitle:@"Cancel" style:UIAlertActionStyleCancel handler:nil]];
            dispatch_async(dispatch_get_main_queue(), ^{
                [self.window.rootViewController presentViewController:ac animated:true completion:nil];
            });
            
        }
    }
}

//where we send the mobileconfig after receiving it from promptToInstallMobileConfig
- (void)startVPNPayload:(NSDictionary *)payload {
    @try {
           [[self.daemonConnection remoteObjectProxy] applicationStartVPNConnection:payload];
       } @catch (NSException *e) {
           NSLog(@"[nitoTV] failed to startVPNPayload with exception: %@", e);
           // Error previous shown
       }
}

- (void)_notifyDaemonOfMessageHandled {
    // Let the daemon know to release the background assertion.
    @try {
        [[self.daemonConnection remoteObjectProxy] applicationDidFinishTask];
    } @catch (NSException *e) {
        // Error previous shown
    }
}
@end