logo Windmill Hub
Login
← Back to the list of replies

Edits history of script submission #4893 for ' Create an Access policy (cloudflare)'

  • nativets
    One script reply has been approved by the moderators
    Ap­pro­ved 
    type Cloudflare = {
  token: string;
  email: string;
  key: string;
};
/**
 * Create an Access policy
 * Create a new Access policy for an application.
 */
export async function main(
  auth: Cloudflare,
  uuid: string,
  identifier: string,
  body: {
    approval_groups?: {
      approvals_needed: number;
      email_addresses?: unknown[];
      email_list_uuid?: string;
      [k: string]: unknown;
    }[];
    approval_required?: boolean;
    decision: "allow" | "deny" | "non_identity" | "bypass";
    exclude?: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    include: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    isolation_required?: boolean;
    name: string;
    precedence?: number;
    purpose_justification_prompt?: string;
    purpose_justification_required?: boolean;
    require?: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    [k: string]: unknown;
  }
) {
  const url = new URL(
    `https://api.cloudflare.com/client/v4/zones/${identifier}/access/apps/${uuid}/policies`
  );

  const response = await fetch(url, {
    method: "POST",
    headers: {
      "X-AUTH-EMAIL": auth.email,
      "X-AUTH-KEY": auth.key,
      "Content-Type": "application/json",
      Authorization: "Bearer " + auth.token,
    },
    body: JSON.stringify(body),
  });
  if (!response.ok) {
    const text = await response.text();
    throw new Error(`${response.status} ${text}`);
  }
  return await response.json();
}

    Submitted by hugo697 383 days ago

  • nativets
    type Cloudflare = {
  token: string;
  email: string;
  key: string;
};
/**
 * Create an Access policy
 * Create a new Access policy for an application.
 */
export async function main(
  auth: Cloudflare,
  uuid: string,
  identifier: string,
  body: {
    approval_groups?: {
      approvals_needed: number;
      email_addresses?: unknown[];
      email_list_uuid?: string;
      [k: string]: unknown;
    }[];
    approval_required?: boolean;
    decision: "allow" | "deny" | "non_identity" | "bypass";
    exclude?: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    include: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    isolation_required?: boolean;
    name: string;
    precedence?: number;
    purpose_justification_prompt?: string;
    purpose_justification_required?: boolean;
    require?: (
      | { email: { email: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          email_domain: { domain: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | { everyone: { [k: string]: unknown }; [k: string]: unknown }
      | { ip: { ip: string; [k: string]: unknown }; [k: string]: unknown }
      | { ip_list: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | { certificate: { [k: string]: unknown }; [k: string]: unknown }
      | { group: { id: string; [k: string]: unknown }; [k: string]: unknown }
      | {
          azureAD: { connection_id: string; id: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          "github-organization": {
            connection_id: string;
            name: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          gsuite: {
            connection_id: string;
            email: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
      | {
          okta: { connection_id: string; email: string; [k: string]: unknown };
          [k: string]: unknown;
        }
      | {
          saml: {
            attribute_name: string;
            attribute_value: string;
            [k: string]: unknown;
          };
          [k: string]: unknown;
        }
    )[];
    [k: string]: unknown;
  }
) {
  const url = new URL(
    `https://api.cloudflare.com/client/v4/zones/${identifier}/access/apps/${uuid}/policies`
  );

  const response = await fetch(url, {
    method: "POST",
    headers: {
      "X-AUTH-EMAIL": auth.email,
      "X-AUTH-KEY": auth.key,
      "Content-Type": "application/json",
      Authorization: "Bearer " + auth.token,
    },
    body: JSON.stringify(body),
  });
  if (!response.ok) {
    const text = await response.text();
    throw new Error(`${response.status} ${text}`);
  }
  return await response.json();
}

    Submitted by hugo697 920 days ago

← Back to the list of replies