Function createNetworkACLCmd

internal/cli/network_acl.go:614–779

(cli *cli)

}

func createNetworkACLCmd(cli *cli) *cobra.Command {
	var inputs struct {
		Description  string
		Active       bool
		ActiveStr    string // Added for handling --active true/false.
		Priority     int
		RuleJSON     string
		Action       string
		RedirectURI  string
		ASNs         []int
		CountryCodes []string
		SubdivCodes  []string
		IPv4CIDRs    []string
		IPv6CIDRs    []string
		JA3          []string
		JA4          []string
		UserAgents   []string
		Scope        string
		isMatchRule  bool
	}

	cmd := &cobra.Command{
		Use:   "create",
		Args:  cobra.NoArgs,
		Short: "Create a new network ACL",
		Long: `Create a new network ACL.
To create interactively, use "auth0 network-acl create" with no arguments.
To create non-interactively, supply the required parameters (description, active, priority, and rule) through flags.
The --rule parameter is required and must contain a valid JSON object with action, scope, and match properties.`,
		Example: `  auth0 network-acl create
  auth0 network-acl create --description "Block IPs" --priority 1 --active true --rule '{"action":{"block":true},"scope":"tenant","match":{"ipv4_cidrs":["192.168.1.0/24","10.0.0.0/8"]}}'
  auth0 network-acl create --description "Geo Block" --priority 2 --active true --rule '{"action":{"block":true},"scope":"authentication","match":{"geo_country_codes":["US","CA"]}}'
  auth0 network-acl create --description "Redirect Traffic" --priority 3 --active true --rule '{"action":{"redirect":true,"redirect_uri":"https://example.com"},"scope":"management","match":{"ipv4_cidrs":["192.168.1.0/24"]}}'
  auth0 network-acl create -d "Block Bots" -p 4 --active true --rule '{"action":{"block":true},"scope":"tenant","match":{"user_agents":["badbot/*","malicious/*"],"ja3_fingerprints":["deadbeef","cafebabe"]}}'
  auth0 network-acl create --description "Complex Rule" --priority 5 --active true --rule '{"action":{"block":true},"scope":"tenant","match":{"ipv4_cidrs":["192.168.1.0/24"],"geo_country_codes":["US"]}}'`,
		RunE: func(cmd *cobra.Command, args []string) error {
			// Check if we're in non-interactive mode (flags provided) but rule JSON is missing.
			if !canPrompt(cmd) && !cmd.Flags().Changed("rule") {
				return fmt.Errorf("the --rule parameter is required for non-interactive mode. Please provide a valid JSON rule")
			}

			// Parse the active flag if provided.
			if cmd.Flags().Changed("active") {
				switch inputs.ActiveStr {
				case "true":
					inputs.Active = true
				case "false":
					inputs.Active = false
				default:
					return fmt.Errorf("--active must be either 'true' or 'false', got %q", inputs.ActiveStr)
				}
			}

			// Check if rule JSON was provided.
			if cmd.Flags().Changed("rule") {
				// Parse the rule JSON.
				var rule map[string]interface{}
				if err := json.Unmarshal([]byte(inputs.RuleJSON), &rule); err != nil {