Enable or Disable a Hostname for Client Authentication

type Cloudflare = {

  token: string;

  email: string;

  key: string;

};

/**

 * Enable or Disable a Hostname for Client Authentication

 * Associate a hostname to a certificate and enable, disable or invalidate the association. If disabled, client certificate will not be sent to the hostname even if activated at the zone level. 100 maximum associations on a single certificate are allowed. Note: Use a null value for parameter *enabled* to invalidate the association.

 */

export async function main(

  auth: Cloudflare,

  zone_identifier: string,

  body: {

    config: {

      cert_id?: string;

      enabled?: boolean;

      hostname?: string;

      [k: string]: unknown;

    }[];

    [k: string]: unknown;

  }

) {

  const url = new URL(

    `https://api.cloudflare.com/client/v4/zones/${zone_identifier}/origin_tls_client_auth/hostnames`

  );

  const response = await fetch(url, {

    method: "PUT",

    headers: {

      "X-AUTH-EMAIL": auth.email,

      "X-AUTH-KEY": auth.key,

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}