Créer des ACL réseau

Créer une nouvelle liste de contrôle d’accès pour votre application.

POST https://{tenantDomain}/api/v2/network-acls

Go

Go

package example

import (
    context "context"

    management "github.com/auth0/go-auth0/management/management"
    client "github.com/auth0/go-auth0/management/management/client"
    option "github.com/auth0/go-auth0/management/management/option"
)

func do() {
    client := client.NewClient(
        option.WithToken(
            "<token>",
        ),
    )
    request := &management.CreateNetworkAclRequestContent{
        Description: "description",
        Active: true,
        Priority: 1.1,
        Rule: &management.NetworkAclRule{
            Action: &management.NetworkAclAction{},
            Scope: management.NetworkAclRuleScopeEnumManagement,
        },
    }
    client.NetworkAcls.Create(
        context.TODO(),
        request,
    )
}

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        token: "<token>",
    });
    await client.networkAcls.create({
        description: "description",
        active: true,
        priority: 1.1,
        rule: {
            action: {},
            scope: "management",
        },
    });
}
main();

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        token: "<token>",
    });
    await client.networkAcls.create({
        description: "description",
        active: true,
        priority: 1.1,
        rule: {
            action: {},
            scope: "management",
        },
    });
}
main();

curl --request POST \
  --url https://{tenantDomain}/api/v2/network-acls \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "active": true,
  "description": "<string>",
  "rule": {
    "action": {
      "allow": true,
      "block": true,
      "log": true,
      "redirect": true,
      "redirect_uri": "<string>"
    },
    "match": {
      "asns": [
        123
      ],
      "connecting_ipv4_cidrs": [
        "127.0.0.1"
      ],
      "connecting_ipv6_cidrs": [
        "2606:4700:3108::ac42:2835"
      ],
      "geo_country_codes": [
        "<string>"
      ],
      "geo_subdivision_codes": [
        "<string>"
      ],
      "hostnames": [
        "<string>"
      ],
      "ipv4_cidrs": [
        "127.0.0.1"
      ],
      "ipv6_cidrs": [
        "2606:4700:3108::ac42:2835"
      ],
      "ja3_fingerprints": [
        "<string>"
      ],
      "ja4_fingerprints": [
        "<string>"
      ],
      "user_agents": [
        "<string>"
      ]
    },
    "not_match": {
      "asns": [
        123
      ],
      "connecting_ipv4_cidrs": [
        "127.0.0.1"
      ],
      "connecting_ipv6_cidrs": [
        "2606:4700:3108::ac42:2835"
      ],
      "geo_country_codes": [
        "<string>"
      ],
      "geo_subdivision_codes": [
        "<string>"
      ],
      "hostnames": [
        "<string>"
      ],
      "ipv4_cidrs": [
        "127.0.0.1"
      ],
      "ipv6_cidrs": [
        "2606:4700:3108::ac42:2835"
      ],
      "ja3_fingerprints": [
        "<string>"
      ],
      "ja4_fingerprints": [
        "<string>"
      ],
      "user_agents": [
        "<string>"
      ]
    }
  },
  "priority": 50
}
'

import requests

url = "https://{tenantDomain}/api/v2/network-acls"

payload = {
    "active": True,
    "description": "<string>",
    "rule": {
        "action": {
            "allow": True,
            "block": True,
            "log": True,
            "redirect": True,
            "redirect_uri": "<string>"
        },
        "match": {
            "asns": [123],
            "connecting_ipv4_cidrs": ["127.0.0.1"],
            "connecting_ipv6_cidrs": ["2606:4700:3108::ac42:2835"],
            "geo_country_codes": ["<string>"],
            "geo_subdivision_codes": ["<string>"],
            "hostnames": ["<string>"],
            "ipv4_cidrs": ["127.0.0.1"],
            "ipv6_cidrs": ["2606:4700:3108::ac42:2835"],
            "ja3_fingerprints": ["<string>"],
            "ja4_fingerprints": ["<string>"],
            "user_agents": ["<string>"]
        },
        "not_match": {
            "asns": [123],
            "connecting_ipv4_cidrs": ["127.0.0.1"],
            "connecting_ipv6_cidrs": ["2606:4700:3108::ac42:2835"],
            "geo_country_codes": ["<string>"],
            "geo_subdivision_codes": ["<string>"],
            "hostnames": ["<string>"],
            "ipv4_cidrs": ["127.0.0.1"],
            "ipv6_cidrs": ["2606:4700:3108::ac42:2835"],
            "ja3_fingerprints": ["<string>"],
            "ja4_fingerprints": ["<string>"],
            "user_agents": ["<string>"]
        }
    },
    "priority": 50
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}/api/v2/network-acls",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'active' => true,
    'description' => '<string>',
    'rule' => [
        'action' => [
                'allow' => true,
                'block' => true,
                'log' => true,
                'redirect' => true,
                'redirect_uri' => '<string>'
        ],
        'match' => [
                'asns' => [
                                123
                ],
                'connecting_ipv4_cidrs' => [
                                '127.0.0.1'
                ],
                'connecting_ipv6_cidrs' => [
                                '2606:4700:3108::ac42:2835'
                ],
                'geo_country_codes' => [
                                '<string>'
                ],
                'geo_subdivision_codes' => [
                                '<string>'
                ],
                'hostnames' => [
                                '<string>'
                ],
                'ipv4_cidrs' => [
                                '127.0.0.1'
                ],
                'ipv6_cidrs' => [
                                '2606:4700:3108::ac42:2835'
                ],
                'ja3_fingerprints' => [
                                '<string>'
                ],
                'ja4_fingerprints' => [
                                '<string>'
                ],
                'user_agents' => [
                                '<string>'
                ]
        ],
        'not_match' => [
                'asns' => [
                                123
                ],
                'connecting_ipv4_cidrs' => [
                                '127.0.0.1'
                ],
                'connecting_ipv6_cidrs' => [
                                '2606:4700:3108::ac42:2835'
                ],
                'geo_country_codes' => [
                                '<string>'
                ],
                'geo_subdivision_codes' => [
                                '<string>'
                ],
                'hostnames' => [
                                '<string>'
                ],
                'ipv4_cidrs' => [
                                '127.0.0.1'
                ],
                'ipv6_cidrs' => [
                                '2606:4700:3108::ac42:2835'
                ],
                'ja3_fingerprints' => [
                                '<string>'
                ],
                'ja4_fingerprints' => [
                                '<string>'
                ],
                'user_agents' => [
                                '<string>'
                ]
        ]
    ],
    'priority' => 50
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}/api/v2/network-acls")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"active\": true,\n  \"description\": \"<string>\",\n  \"rule\": {\n    \"action\": {\n      \"allow\": true,\n      \"block\": true,\n      \"log\": true,\n      \"redirect\": true,\n      \"redirect_uri\": \"<string>\"\n    },\n    \"match\": {\n      \"asns\": [\n        123\n      ],\n      \"connecting_ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"connecting_ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"geo_country_codes\": [\n        \"<string>\"\n      ],\n      \"geo_subdivision_codes\": [\n        \"<string>\"\n      ],\n      \"hostnames\": [\n        \"<string>\"\n      ],\n      \"ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"ja3_fingerprints\": [\n        \"<string>\"\n      ],\n      \"ja4_fingerprints\": [\n        \"<string>\"\n      ],\n      \"user_agents\": [\n        \"<string>\"\n      ]\n    },\n    \"not_match\": {\n      \"asns\": [\n        123\n      ],\n      \"connecting_ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"connecting_ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"geo_country_codes\": [\n        \"<string>\"\n      ],\n      \"geo_subdivision_codes\": [\n        \"<string>\"\n      ],\n      \"hostnames\": [\n        \"<string>\"\n      ],\n      \"ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"ja3_fingerprints\": [\n        \"<string>\"\n      ],\n      \"ja4_fingerprints\": [\n        \"<string>\"\n      ],\n      \"user_agents\": [\n        \"<string>\"\n      ]\n    }\n  },\n  \"priority\": 50\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}/api/v2/network-acls")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"active\": true,\n  \"description\": \"<string>\",\n  \"rule\": {\n    \"action\": {\n      \"allow\": true,\n      \"block\": true,\n      \"log\": true,\n      \"redirect\": true,\n      \"redirect_uri\": \"<string>\"\n    },\n    \"match\": {\n      \"asns\": [\n        123\n      ],\n      \"connecting_ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"connecting_ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"geo_country_codes\": [\n        \"<string>\"\n      ],\n      \"geo_subdivision_codes\": [\n        \"<string>\"\n      ],\n      \"hostnames\": [\n        \"<string>\"\n      ],\n      \"ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"ja3_fingerprints\": [\n        \"<string>\"\n      ],\n      \"ja4_fingerprints\": [\n        \"<string>\"\n      ],\n      \"user_agents\": [\n        \"<string>\"\n      ]\n    },\n    \"not_match\": {\n      \"asns\": [\n        123\n      ],\n      \"connecting_ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"connecting_ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"geo_country_codes\": [\n        \"<string>\"\n      ],\n      \"geo_subdivision_codes\": [\n        \"<string>\"\n      ],\n      \"hostnames\": [\n        \"<string>\"\n      ],\n      \"ipv4_cidrs\": [\n        \"127.0.0.1\"\n      ],\n      \"ipv6_cidrs\": [\n        \"2606:4700:3108::ac42:2835\"\n      ],\n      \"ja3_fingerprints\": [\n        \"<string>\"\n      ],\n      \"ja4_fingerprints\": [\n        \"<string>\"\n      ],\n      \"user_agents\": [\n        \"<string>\"\n      ]\n    }\n  },\n  \"priority\": 50\n}"

response = http.request(request)
puts response.read_body

Autorisations

bearerAuthoAuth2ClientCredentials

Authorization · string · header · requis

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Corps

application/jsonapplication/x-www-form-urlencoded

active · boolean · requis

Indique si cette liste de contrôle d’accès est activement utilisée

description · string · requis

Maximum string length: 255

rule · object · requis

Show child attributes

priority · number · défaut: 50

Indique l’ordre dans lequel la liste de contrôle d’accès sera évaluée par rapport aux autres règles de liste de contrôle d’accès.

Plage requise: 1 <= x <= 100

Réponse

201

Liste de contrôle d’accès réseau créée avec succès.