cloudarmor

type Headers map[string]string

type Origin struct {
	IP                string `yaml:"ip"`
	RegionCode        string `yaml:"region_code"`
	ASN               int64  `yaml:"asn"`
	UserIP            string `yaml:"user_ip"`
	TLSJA3Fingerprint string `yaml:"tls_ja3_fingerprint"`
	TLSJA4Fingerprint string `yaml:"tls_ja4_fingerprint"`
}

type RecaptchaAction struct {
	Score         float64 `yaml:"score"`
	CaptchaStatus string  `yaml:"captcha_status"`
	Action        string  `yaml:"action"`
	Valid         bool    `yaml:"valid"`
}

type RecaptchaExemption struct {
	Valid bool `yaml:"valid"`
}

type RecaptchaSession struct {
	Score float64 `yaml:"score"`
	Valid bool    `yaml:"valid"`
}

type Request struct {
	Method  string            `yaml:"method"`
	Headers map[string]string `yaml:"headers"`
	Path    string            `yaml:"path"`
	Query   string            `yaml:"query"`
	Scheme  string            `yaml:"scheme"`
	Params  map[string]any    `yaml:"params"`
	Body    string            `yaml:"body"`
}

type Rules struct {
	// contains filtered or unexported fields
}

type RulesOption func(*Rules) (*Rules, error)

type TestCase struct {
	Name         string     `yaml:"name"`
	When         *Variables `yaml:"when"`
	ExpectOutput bool       `yaml:"expect"`
	ExpectError  string     `yaml:"error"`
}

type TestStatus struct {
	Name string
	Pass bool
	Fail string
}

type TestSuite struct {
	Name  string      `yaml:"name"`
	Expr  string      `yaml:"expr"`
	Tests []*TestCase `yaml:"tests"`
}

type Token struct {
	RecaptchaExemption *RecaptchaExemption `yaml:"recaptcha_exemption"`
	RecaptchaAction    *RecaptchaAction    `yaml:"recaptcha_action"`
	RecaptchaSession   *RecaptchaSession   `yaml:"recaptcha_session"`
}

type Variables struct {
	Request *Request `yaml:"request"`
	Origin  *Origin  `yaml:"origin"`
	Token   *Token   `yaml:"token"`
}

type VendorRuleSet struct {

	// Next ID: 7
	// Name of the ruleset provided by Vendor
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Version of the ruleset provided by Vendor, if any.
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// Category of the ruleset, e.g. SQLi, XSS
	Category string `protobuf:"bytes,3,opt,name=category,proto3" json:"category,omitempty"`
	// Release notes corresponding to the rulesets
	ChangeLog *VendorRuleSet_ChangeLog `protobuf:"bytes,4,opt,name=change_log,json=changeLog,proto3" json:"change_log,omitempty"`
	// Transformations should be applied sequentially to the input request
	// before evaluating CEL Expression
	// Rule shall be evaluated only once all the transformations were applied.
	Transformations []string `protobuf:"bytes,5,rep,name=transformations,proto3" json:"transformations,omitempty"`
	// collection of rules under the ruleset
	Rules []*VendorRuleSet_VendorRule `protobuf:"bytes,6,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type VendorRuleSet_ChangeLog struct {

	// This will be used to surface changelog information through
	// documentation
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// this determines whether the ruleset description should be public
	// e.g. Included in the release notes
	AlwaysPublic bool `protobuf:"varint,2,opt,name=always_public,json=alwaysPublic,proto3" json:"always_public,omitempty"`
	// this is set if it should be included in a CVE release
	UseForCve bool `protobuf:"varint,3,opt,name=use_for_cve,json=useForCve,proto3" json:"use_for_cve,omitempty"`
	// contains filtered or unexported fields
}

type VendorRuleSet_VendorRule struct {

	// Next ID: 7
	// Unique ID associated with each rule
	// For incremental updates, the rule ID remains unchanged but follows a
	// versioning format. Example: id191190.0 to id191190.1
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// CEL expression
	// Defines the rule logic in CEL string format using Cloud Armor (CA)
	// attributes.
	CelExpression string `protobuf:"bytes,2,opt,name=cel_expression,json=celExpression,proto3" json:"cel_expression,omitempty"`
	// Array of Key value pairs of tags and additional info associated
	// with the tag separated by ':'
	Tags []string `protobuf:"bytes,3,rep,name=tags,proto3" json:"tags,omitempty"`
	// Curl commands that would generate the matching expression for rule
	E2ETestCommand []string `protobuf:"bytes,4,rep,name=e2e_test_command,json=e2eTestCommand,proto3" json:"e2e_test_command,omitempty"`
	// By default, it would be false.
	// If true, the rule shall only be evaluated if enabled by customers.
	OptIn bool `protobuf:"varint,6,opt,name=opt_in,json=optIn,proto3" json:"opt_in,omitempty"`
	// contains filtered or unexported fields
}

type VendorRulesetCollection struct {

	// Next ID: 4
	// Unique ID associated with the ruleset collection
	Uuid string `protobuf:"bytes,1,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// Metadata for the ruleset
	RulesetMetadata *VendorRulesetCollection_RulesetMetadata `protobuf:"bytes,2,opt,name=ruleset_metadata,json=rulesetMetadata,proto3" json:"ruleset_metadata,omitempty"`
	// Collection of vendor rulesets
	RuleSets []*VendorRuleSet `protobuf:"bytes,3,rep,name=rule_sets,json=ruleSets,proto3" json:"rule_sets,omitempty"`
	// contains filtered or unexported fields
}

type VendorRulesetCollection_RulesetMetadata struct {

	// Next ID: 6
	// ruleset creation date
	CreationDate *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=creation_date,json=creationDate,proto3" json:"creation_date,omitempty"`
	// ruleset modification date
	UpdationDate *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=updation_date,json=updationDate,proto3" json:"updation_date,omitempty"`
	// Name of the owner of the rulesets, e.g.   Imperva
	Owner string `protobuf:"bytes,3,opt,name=owner,proto3" json:"owner,omitempty"`
	// A description of the ruleset's purpose
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// Encryption key identifier
	EncryptionkeyId string `protobuf:"bytes,5,opt,name=encryptionkey_id,json=encryptionkeyId,proto3" json:"encryptionkey_id,omitempty"`
	// contains filtered or unexported fields
}