Clean up Cloudflare Tunnel connections

type Cloudflare = {

  token: string;

  email: string;

  key: string;

};

/**

 * Clean up Cloudflare Tunnel connections

 * Removes a connection (aka Cloudflare Tunnel Connector) from a Cloudflare Tunnel independently of its current state. If no connector id (client_id) is provided all connectors will be removed. We recommend running this command after rotating tokens.

 */

export async function main(

  auth: Cloudflare,

  account_identifier: string,

  tunnel_id: string,

  client_id: string | undefined,

  body: { [k: string]: unknown }

) {

  const url = new URL(

    `https://api.cloudflare.com/client/v4/accounts/${account_identifier}/cfd_tunnel/${tunnel_id}/connections`

  );

  for (const [k, v] of [["client_id", client_id]]) {

    if (v !== undefined && v !== "") {

      url.searchParams.append(k, v);

    }

  }

  const response = await fetch(url, {

    method: "DELETE",

    headers: {

      "X-AUTH-EMAIL": auth.email,

      "X-AUTH-KEY": auth.key,

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}