type Cloudflare = {

  token: string;

  email: string;

  key: string;

};

/**

 * Get a short-lived certificate CA

 * Fetches a short-lived certificate CA and its public key.

 */

export async function main(auth: Cloudflare, uuid: string, identifier: string) {

  const url = new URL(

    `https://api.cloudflare.com/client/v4/zones/${identifier}/access/apps/${uuid}/ca`

  );

  const response = await fetch(url, {

    method: "GET",

    headers: {

      "X-AUTH-EMAIL": auth.email,

      "X-AUTH-KEY": auth.key,

      Authorization: "Bearer " + auth.token,

    },

    body: undefined,

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}