cfmgrv4/app/Services/Cloudflare/Firewall.php

<?php

namespace App\Services\Cloudflare;

use App\Entities\Cloudflare\FirewallEntity;
use App\Entities\Cloudflare\ZoneEntity;
use App\Models\Cloudflare\AccountModel;
use App\Models\Cloudflare\FirewallModel;

class Firewall extends Cloudflare
{
    private ?ZoneEntity $_parent_entity = null;
    private ?FirewallModel $_model = null;
    private ?AccountModel $_accountModel = null;
    public function __construct(ZoneEntity $zone_entity)
    {
        $this->_parent_entity = $zone_entity;
        $account_entity = $this->getAccountModel()->getEntityByPK($this->getParentEntity()->getParent());
        if ($account_entity === null) {
            throw new \Exception("해당 계정정보를 찾을수 없습니다.");
        }
        $auth_entity = $this->getAuthModel()->getEntityByPK($account_entity->getParent());
        if ($auth_entity === null) {
            throw new \Exception("해당 계정정보를 찾을수 없습니다.");
        }
        parent::__construct($auth_entity);
    }
    protected function getParentEntity(): ZoneEntity
    {
        if ($this->_parent_entity === null) {
            throw new \Exception(__FUNCTION__ . "에서 부모정보가 없습니다.");
        }
        return $this->_parent_entity;
    }
    protected function getModel(): FirewallModel
    {
        if ($this->_model === null) {
            $this->_model = new FirewallModel();
        }
        return $this->_model;
    }
    protected function getAccountModel(): AccountModel
    {
        if ($this->_accountModel === null) {
            $this->_accountModel = new AccountModel();
        }
        return $this->_accountModel;
    }
    protected function getArrayByResult(\stdClass $rule, array $formDatas = []): array
    {
        // log_message("debug", var_export($result, true));
        $formDatas[FirewallModel::PK] = $rule->id;
        $formDatas[FirewallModel::PARENT] = $this->getParentEntity()->getPK();
        $formDatas['mode'] = $rule->action;
        $formDatas[FirewallModel::TITLE] = $rule->description;
        $formDatas['expression'] = $rule->expression;
        $formDatas['enabled'] = isset($rule->enabled) && $rule->enabled ? "on" : "off";
        $formDatas['updated_at'] = date("Y-m-d H:i:s");
        $formDatas['created_at'] = $rule->last_updated;
        // log_message("debug", print_r($formDatas, true));
        return $formDatas;
    }
    public function modify(FirewallEntity $entity, array $formDatas): FirewallEntity
    {
        $datas = [
            'id' => $entity->getPK(),      // 수정할 rule의 ID
            "action" => $entity->mode,
            "description" => $entity->description,
            "expression" => $entity->expression,
            'enabled' => isset($formDatas['enabled']) && $formDatas['enabled'] === "on" ? true : false  // true/false 값으로 설정
        ];
        // 인코딩된 JSON을 확인
        // throw new \Exception("Firewall:" . __FUNCTION__ . "\n" . json_encode($datas, JSON_PRETTY_PRINT) . "\n" . var_export($datas, true));
        $response = $this->getMySocket()->patch("zones/{$this->getParentEntity()->getPK()}/rulesets/{$entity->getRulesetID()}/rules/{$entity->getPK()}", $datas);
        $body = json_decode($response->getBody());
        foreach ($body->result->rules as $rule) {
            if ($rule->id === $entity->getPK()) {
                $formDatas = ['rulesetid' => $body->result->id];
                $formDatas = $this->getArrayByResult($rule, $formDatas);
                $entity = $this->getModel()->modify($entity, $formDatas);
            }
        }
        return $entity;
    }
    //Reload
    public function reload(): array
    {
        log_message("notice", "\n-----------Zone {$this->getParentEntity()->getTitle()}의 Firewall 처리 시작-----------");
        $entitys = [];
        try {
            $response = $this->getMySocket()->get("zones/{$this->getParentEntity()->getPK()}//rulesets/phases/http_request_firewall_custom/entrypoint");
            $body = json_decode($response->getBody());
            foreach ($body->result->rules as $rule) {
                if (!is_object(value: $rule) || get_class($rule) !== 'stdClass') {
                    log_message("error", "Firewall: rule is not a stdClass:\n" . var_export($rule, true) . "\n");
                } else {
                    $formDatas                              = ['rulesetid' => $body->result->id];
                    $formDatas                              = $this->getArrayByResult($rule, $formDatas);
                    $entitys[$formDatas[FirewallModel::PK]] = $this->getModel()->modify(new FirewallEntity(), $formDatas);
                }
            }
        } catch (\Exception $e) {
            log_message("error", $e->getMessage());
            throw new \Exception($e->getMessage());
        }
        log_message("notice", "\n-----------Zone {$this->getParentEntity()->getTitle()}의 Firewall처리[" . count($entitys) . "개] 완료-----------");
        return $entitys;
    }
}