Generate Pre Shared Key (PSK) for IPsec tunnels

type Cloudflare = {

  token: string;

  email: string;

  key: string;

};

/**

 * Generate Pre Shared Key (PSK) for IPsec tunnels

 * Generates a Pre Shared Key for a specific IPsec tunnel used in the IKE session. Use `?validate_only=true` as an optional query parameter to only run validation without persisting changes. After a PSK is generated, the PSK is immediately persisted to Cloudflare's edge and cannot be retrieved later. Note the PSK in a safe place.

 */

export async function main(

  auth: Cloudflare,

  tunnel_identifier: string,

  account_identifier: string

) {

  const url = new URL(

    `https://api.cloudflare.com/client/v4/accounts/${account_identifier}/magic/ipsec_tunnels/${tunnel_identifier}/psk_generate`

  );

  const response = await fetch(url, {

    method: "POST",

    headers: {

      "X-AUTH-EMAIL": auth.email,

      "X-AUTH-KEY": auth.key,

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: undefined,

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}