access_ca_certificate.go

package cloudflare

import (
	"encoding/json"
	"fmt"

	"github.com/pkg/errors"
)

// AccessCACertificate is the structure of the CA certificate used for
// short lived certificates.
type AccessCACertificate struct {
	ID        string `json:"id"`
	Aud       string `json:"aud"`
	PublicKey string `json:"public_key"`
}

// AccessCACertificateListResponse represents the response of all CA
// certificates within Access.
type AccessCACertificateListResponse struct {
	Response
	Result []AccessCACertificate `json:"result"`
}

// AccessCACertificateResponse represents the response of a single CA
// certificate.
type AccessCACertificateResponse struct {
	Response
	Result AccessCACertificate `json:"result"`
}

// AccessCACertificates returns all CA certificates within Access.
//
// API reference: https://api.cloudflare.com/#access-short-lived-certificates-list-short-lived-certificates
func (api *API) AccessCACertificates(accountID string) ([]AccessCACertificate, error) {
	uri := fmt.Sprintf("/accounts/%s/access/apps/ca", accountID)

	res, err := api.makeRequest("GET", uri, nil)
	if err != nil {
		return []AccessCACertificate{}, errors.Wrap(err, errMakeRequestError)
	}

	var accessCAListResponse AccessCACertificateListResponse
	err = json.Unmarshal(res, &accessCAListResponse)
	if err != nil {
		return []AccessCACertificate{}, errors.Wrap(err, errUnmarshalError)
	}

	return accessCAListResponse.Result, nil
}

// AccessCACertificate returns a single CA certificate associated with an Access
// Application.
//
// API reference: https://api.cloudflare.com/#access-short-lived-certificates-short-lived-certificate-details
func (api *API) AccessCACertificate(accountID, applicationID string) (AccessCACertificate, error) {
	uri := fmt.Sprintf("/accounts/%s/access/apps/%s/ca", accountID, applicationID)

	res, err := api.makeRequest("GET", uri, nil)
	if err != nil {
		return AccessCACertificate{}, errors.Wrap(err, errMakeRequestError)
	}

	var accessCAResponse AccessCACertificateResponse
	err = json.Unmarshal(res, &accessCAResponse)
	if err != nil {
		return AccessCACertificate{}, errors.Wrap(err, errUnmarshalError)
	}

	return accessCAResponse.Result, nil
}

// CreateAccessCACertificate creates a new CA certificate for an Access
// Application.
//
// API reference: https://api.cloudflare.com/#access-short-lived-certificates-create-short-lived-certificate
func (api *API) CreateAccessCACertificate(accountID, applicationID string) (AccessCACertificate, error) {
	uri := fmt.Sprintf(
		"/accounts/%s/access/apps/%s/ca",
		accountID,
		applicationID,
	)

	res, err := api.makeRequest("POST", uri, nil)
	if err != nil {
		return AccessCACertificate{}, errors.Wrap(err, errMakeRequestError)
	}

	var accessCACertificate AccessCACertificateResponse
	err = json.Unmarshal(res, &accessCACertificate)
	if err != nil {
		return AccessCACertificate{}, errors.Wrap(err, errUnmarshalError)
	}

	return accessCACertificate.Result, nil
}

// DeleteAccessCACertificate deletes an Access CA certificate on a defined
// Access Application.
//
// API reference: https://api.cloudflare.com/#access-short-lived-certificates-delete-access-certificate
func (api *API) DeleteAccessCACertificate(accountID, applicationID string) error {
	uri := fmt.Sprintf(
		"/accounts/%s/access/apps/%s/ca",
		accountID,
		applicationID,
	)

	_, err := api.makeRequest("DELETE", uri, nil)
	if err != nil {
		return errors.Wrap(err, errMakeRequestError)
	}

	return nil
}