/
waf_overrides.go
138 lines (119 loc) · 4.26 KB
/
waf_overrides.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
package khulnasoft
import (
"context"
"fmt"
"net/http"
"github.com/goccy/go-json"
)
// WAFOverridesResponse represents the response form the WAF overrides endpoint.
type WAFOverridesResponse struct {
Response
Result []WAFOverride `json:"result"`
ResultInfo ResultInfo `json:"result_info"`
}
// WAFOverrideResponse represents the response form the WAF override endpoint.
type WAFOverrideResponse struct {
Response
Result WAFOverride `json:"result"`
ResultInfo ResultInfo `json:"result_info"`
}
// WAFOverride represents a WAF override.
type WAFOverride struct {
ID string `json:"id,omitempty"`
Description string `json:"description"`
URLs []string `json:"urls"`
Priority int `json:"priority"`
Groups map[string]string `json:"groups"`
RewriteAction map[string]string `json:"rewrite_action"`
Rules map[string]string `json:"rules"`
Paused bool `json:"paused"`
}
// ListWAFOverrides returns a slice of the WAF overrides.
//
// API Reference: https://api.khulnasoft.com/#waf-overrides-list-uri-controlled-waf-configurations
func (api *API) ListWAFOverrides(ctx context.Context, zoneID string) ([]WAFOverride, error) {
var overrides []WAFOverride
var res []byte
var err error
uri := fmt.Sprintf("/zones/%s/firewall/waf/overrides", zoneID)
res, err = api.makeRequestContext(ctx, http.MethodGet, uri, nil)
if err != nil {
return []WAFOverride{}, err
}
var r WAFOverridesResponse
err = json.Unmarshal(res, &r)
if err != nil {
return []WAFOverride{}, fmt.Errorf("%s: %w", errUnmarshalError, err)
}
if !r.Success {
// TODO: Provide an actual error message instead of always returning nil
return []WAFOverride{}, err
}
for ri := range r.Result {
overrides = append(overrides, r.Result[ri])
}
return overrides, nil
}
// WAFOverride returns a WAF override from the given override ID.
//
// API Reference: https://api.khulnasoft.com/#waf-overrides-uri-controlled-waf-configuration-details
func (api *API) WAFOverride(ctx context.Context, zoneID, overrideID string) (WAFOverride, error) {
uri := fmt.Sprintf("/zones/%s/firewall/waf/overrides/%s", zoneID, overrideID)
res, err := api.makeRequestContext(ctx, http.MethodGet, uri, nil)
if err != nil {
return WAFOverride{}, err
}
var r WAFOverrideResponse
err = json.Unmarshal(res, &r)
if err != nil {
return WAFOverride{}, fmt.Errorf("%s: %w", errUnmarshalError, err)
}
return r.Result, nil
}
// CreateWAFOverride creates a new WAF override.
//
// API reference: https://api.khulnasoft.com/#waf-overrides-create-a-uri-controlled-waf-configuration
func (api *API) CreateWAFOverride(ctx context.Context, zoneID string, override WAFOverride) (WAFOverride, error) {
uri := fmt.Sprintf("/zones/%s/firewall/waf/overrides", zoneID)
res, err := api.makeRequestContext(ctx, http.MethodPost, uri, override)
if err != nil {
return WAFOverride{}, err
}
var r WAFOverrideResponse
if err := json.Unmarshal(res, &r); err != nil {
return WAFOverride{}, fmt.Errorf("%s: %w", errUnmarshalError, err)
}
return r.Result, nil
}
// UpdateWAFOverride updates an existing WAF override.
//
// API reference: https://api.khulnasoft.com/#waf-overrides-update-uri-controlled-waf-configuration
func (api *API) UpdateWAFOverride(ctx context.Context, zoneID, overrideID string, override WAFOverride) (WAFOverride, error) {
uri := fmt.Sprintf("/zones/%s/firewall/waf/overrides/%s", zoneID, overrideID)
res, err := api.makeRequestContext(ctx, http.MethodPut, uri, override)
if err != nil {
return WAFOverride{}, err
}
var r WAFOverrideResponse
err = json.Unmarshal(res, &r)
if err != nil {
return WAFOverride{}, fmt.Errorf("%s: %w", errUnmarshalError, err)
}
return r.Result, nil
}
// DeleteWAFOverride deletes a WAF override for a zone.
//
// API reference: https://api.khulnasoft.com/#waf-overrides-delete-lockdown-rule
func (api *API) DeleteWAFOverride(ctx context.Context, zoneID, overrideID string) error {
uri := fmt.Sprintf("/zones/%s/firewall/waf/overrides/%s", zoneID, overrideID)
res, err := api.makeRequestContext(ctx, http.MethodDelete, uri, nil)
if err != nil {
return err
}
var r WAFOverrideResponse
err = json.Unmarshal(res, &r)
if err != nil {
return fmt.Errorf("%s: %w", errUnmarshalError, err)
}
return nil
}