Function buildNetworkACLRule

internal/cli/network_acl.go:458–526

buildNetworkACLRule creates a NetworkACLRule from the provided inputs.

(inputs *ruleInputs)

// buildNetworkACLRule creates a NetworkACLRule from the provided inputs.
func buildNetworkACLRule(inputs *ruleInputs) (*management.NetworkACLRule, error) {
	rule := &management.NetworkACLRule{
		Scope: &inputs.Scope,
	}

	// Set the action.
	rule.Action = &management.NetworkACLRuleAction{}
	switch inputs.Action {
	case "block":
		rule.Action.Block = auth0.Bool(true)
	case "allow":
		rule.Action.Allow = auth0.Bool(true)
	case "log":
		rule.Action.Log = auth0.Bool(true)
	case "redirect":
		rule.Action.Redirect = auth0.Bool(true)
		rule.Action.RedirectURI = &inputs.RedirectURI
	}

	// Build match criteria.
	match := &management.NetworkACLRuleMatch{}
	matchProvided := false

	if len(inputs.ASNs) > 0 {
		match.Asns = inputs.ASNs
		matchProvided = true
	}
	if len(inputs.CountryCodes) > 0 {
		match.GeoCountryCodes = &inputs.CountryCodes
		matchProvided = true
	}
	if len(inputs.SubdivCodes) > 0 {
		match.GeoSubdivisionCodes = &inputs.SubdivCodes
		matchProvided = true
	}
	if len(inputs.IPv4CIDRs) > 0 {
		match.IPv4Cidrs = &inputs.IPv4CIDRs
		matchProvided = true
	}
	if len(inputs.IPv6CIDRs) > 0 {
		match.IPv6Cidrs = &inputs.IPv6CIDRs
		matchProvided = true
	}
	if len(inputs.JA3) > 0 {
		match.Ja3Fingerprints = &inputs.JA3
		matchProvided = true
	}
	if len(inputs.JA4) > 0 {
		match.Ja4Fingerprints = &inputs.JA4
		matchProvided = true
	}
	if len(inputs.UserAgents) > 0 {
		match.UserAgents = &inputs.UserAgents
		matchProvided = true
	}

	if !matchProvided {
		return nil, fmt.Errorf("at least one match criteria must be provided")