export_configuration.go

package appsec

import (
	"context"
	"encoding/json"
	"errors"
	"fmt"
	"net/http"
	"net/url"
	"reflect"
	"time"

	"github.com/akamai/AkamaiOPEN-edgegrid-golang/v10/pkg/edgegriderr"
	"github.com/akamai/AkamaiOPEN-edgegrid-golang/v10/pkg/session"
	validation "github.com/go-ozzo/ozzo-validation/v4"
)

type (
	// The ExportConfiguration interface supports exporting comprehensive details about a security
	// configuration version. This operation returns more data than Get configuration version details,
	// including rate and security policies, rules, hostnames, and numerous additional settings.
	ExportConfiguration interface {
		// GetExportConfiguration returns comprehensive details about a security configuration version.
		//
		// See: https://techdocs.akamai.com/application-security/reference/get-export-config-version
		GetExportConfiguration(ctx context.Context, params GetExportConfigurationRequest) (*GetExportConfigurationResponse, error)
	}

	// ConditionsValue is a slice of strings that describe conditions.
	ConditionsValue []string

	// GetExportConfigurationRequest is used to call GetExportConfiguration.
	GetExportConfigurationRequest struct {
		ConfigID int    `json:"configId"`
		Version  int    `json:"version"`
		Source   string `json:"source,omitempty"`
	}

	// EvaluatingSecurityPolicy is returned from a call to GetExportConfiguration.
	EvaluatingSecurityPolicy struct {
		EffectiveSecurityControls struct {
			ApplyApplicationLayerControls bool `json:"applyApplicationLayerControls,omitempty"`
			ApplyRateControls             bool `json:"applyRateControls,omitempty"`
			ApplySlowPostControls         bool `json:"applySlowPostControls,omitempty"`
		}
		Hostnames        []string `json:"hostnames,omitempty"`
		SecurityPolicyID string   `json:"id"`
	}

	// GetExportConfigurationResponse is returned from a call to GetExportConfiguration.
	GetExportConfigurationResponse struct {
		ConfigID   int    `json:"configId"`
		ConfigName string `json:"configName"`
		Version    int    `json:"version"`
		BasedOn    int    `json:"basedOn"`
		Staging    struct {
			Status string `json:"status"`
		} `json:"staging"`
		Production struct {
			Status string `json:"status"`
		} `json:"production"`
		TargetProduct   string    `json:"targetProduct"`
		CreateDate      time.Time `json:"-"`
		CreatedBy       string    `json:"createdBy"`
		SelectedHosts   []string  `json:"selectedHosts"`
		SelectableHosts []string  `json:"selectableHosts"`
		RatePolicies    []struct {
			AdditionalMatchOptions []struct {
				PositiveMatch bool     `json:"positiveMatch"`
				Type          string   `json:"type"`
				Values        []string `json:"values"`
			} `json:"additionalMatchOptions,omitempty"`
			AllTraffic            bool                         `json:"allTraffic,omitempty"`
			AverageThreshold      int                          `json:"averageThreshold"`
			BurstThreshold        int                          `json:"burstThreshold"`
			BurstWindow           *int                         `json:"burstWindow,omitempty"`
			ClientIdentifier      string                       `json:"clientIdentifier,omitempty"`
			Condition             *RatePolicyCondition         `json:"condition,omitempty"`
			CreateDate            time.Time                    `json:"-"`
			Description           string                       `json:"description,omitempty"`
			FileExtensions        *RatePolicyFileExtensions    `json:"fileExtensions,omitempty"`
			Hosts                 *RatePoliciesHosts           `json:"hosts,omitempty"`
			Hostnames             []string                     `json:"hostnames,omitempty"`
			ID                    int                          `json:"id"`
			MatchType             string                       `json:"matchType"`
			Name                  string                       `json:"name"`
			Path                  *RatePoliciesPath            `json:"path,omitempty"`
			PathMatchType         string                       `json:"pathMatchType,omitempty"`
			PathURIPositiveMatch  bool                         `json:"pathUriPositiveMatch"`
			QueryParameters       *RatePoliciesQueryParameters `json:"queryParameters,omitempty"`
			RequestType           string                       `json:"requestType"`
			SameActionOnIpv6      bool                         `json:"sameActionOnIpv6"`
			Type                  string                       `json:"type"`
			UpdateDate            time.Time                    `json:"-"`
			UseXForwardForHeaders bool                         `json:"useXForwardForHeaders"`
			Used                  bool                         `json:"-"`
		} `json:"ratePolicies"`
		ReputationProfiles []struct {
			Condition       *ConditionReputationProfile `json:"condition,omitempty"`
			Context         string                      `json:"context,omitempty"`
			ContextReadable string                      `json:"-"`

			Enabled          bool   `json:"-"`
			ID               int    `json:"id"`
			Name             string `json:"name"`
			SharedIPHandling string `json:"sharedIpHandling"`
			Threshold        int    `json:"threshold"`
		} `json:"reputationProfiles"`
		CustomRules []struct {
			ID            int      `json:"id"`
			Name          string   `json:"name"`
			Description   string   `json:"description,omitempty"`
			Version       int      `json:"-"`
			RuleActivated bool     `json:"-"`
			Structured    bool     `json:"-"`
			Tag           []string `json:"tag,omitempty"`
			Conditions    []struct {
				Name                  *json.RawMessage `json:"name,omitempty"`
				NameCase              *bool            `json:"nameCase,omitempty"`
				NameWildcard          *bool            `json:"nameWildcard,omitempty"`
				PositiveMatch         bool             `json:"positiveMatch"`
				Type                  string           `json:"type"`
				Value                 *json.RawMessage `json:"value,omitempty"`
				ValueCase             *bool            `json:"valueCase,omitempty"`
				ValueExactMatch       *bool            `json:"valueExactMatch,omitempty"`
				ValueIgnoreSegment    *bool            `json:"valueIgnoreSegment,omitempty"`
				ValueNormalize        *bool            `json:"valueNormalize,omitempty"`
				ValueRecursive        *bool            `json:"valueRecursive,omitempty"`
				ValueWildcard         *bool            `json:"valueWildcard,omitempty"`
				UseXForwardForHeaders *bool            `json:"useXForwardForHeaders,omitempty"`
			} `json:"conditions,omitempty"`

			EffectiveTimePeriod *CustomRuleEffectivePeriod `json:"effectiveTimePeriod,omitempty"`
			SamplingRate        int                        `json:"samplingRate,omitempty"`
			LoggingOptions      *json.RawMessage           `json:"loggingOptions,omitempty"`
			Operation           string                     `json:"operation,omitempty"`
		} `json:"customRules"`
		Rulesets []struct {
			ID               int            `json:"id"`
			RulesetVersionID int            `json:"rulesetVersionId"`
			Type             string         `json:"type"`
			ReleaseDate      time.Time      `json:"releaseDate"`
			Rules            *RulesetsRules `json:"rules,omitempty"`
			AttackGroups     []struct {
				Group     string `json:"group"`
				GroupName string `json:"groupName"`
				Threshold int    `json:"threshold,omitempty"`
			} `json:"attackGroups,omitempty"`
		} `json:"rulesets"`
		MatchTargets struct {
			APITargets []struct {
				Sequence int    `json:"sequence"`
				ID       int    `json:"id,omitempty"`
				TargetID int    `json:"targetId"`
				Type     string `json:"type,omitempty"`
				Apis     []struct {
					ID   int    `json:"id,omitempty"`
					Name string `json:"name,omitempty"`
				} `json:"apis,omitempty"`
				SecurityPolicy struct {
					PolicyID string `json:"policyId,omitempty"`
				} `json:"securityPolicy,omitempty"`
				BypassNetworkLists []struct {
					Name string `json:"name,omitempty"`
					ID   string `json:"id,omitempty"`
				} `json:"bypassNetworkLists,omitempty"`
			} `json:"apiTargets,omitempty"`
			WebsiteTargets []struct {
				Type               string `json:"type"`
				BypassNetworkLists []struct {
					ID   string `json:"id"`
					Name string `json:"name"`
				} `json:"bypassNetworkLists,omitempty"`
				DefaultFile                  string   `json:"defaultFile"`
				FilePaths                    []string `json:"filePaths,omitempty"`
				FileExtensions               []string `json:"fileExtensions,omitempty"`
				Hostnames                    []string `json:"hostnames,omitempty"`
				ID                           int      `json:"id"`
				IsNegativeFileExtensionMatch bool     `json:"isNegativeFileExtensionMatch"`
				IsNegativePathMatch          bool     `json:"isNegativePathMatch"`
				SecurityPolicy               struct {
					PolicyID string `json:"policyId"`
				} `json:"securityPolicy"`
				Sequence int `json:"-"`
			} `json:"websiteTargets"`
		} `json:"matchTargets"`
		SecurityPolicies []struct {
			ID                      string `json:"id"`
			Name                    string `json:"name"`
			HasRatePolicyWithAPIKey bool   `json:"hasRatePolicyWithApiKey"`
			SecurityControls        struct {
				ApplyAPIConstraints           bool `json:"applyApiConstraints"`
				ApplyApplicationLayerControls bool `json:"applyApplicationLayerControls"`
				ApplyBotmanControls           bool `json:"applyBotmanControls"`
				ApplyNetworkLayerControls     bool `json:"applyNetworkLayerControls"`
				ApplyRateControls             bool `json:"applyRateControls"`
				ApplyReputationControls       bool `json:"applyReputationControls"`
				ApplySlowPostControls         bool `json:"applySlowPostControls"`
				ApplyMalwareControls          bool `json:"applyMalwareControls"`
			} `json:"securityControls"`
			WebApplicationFirewall struct {
				RuleActions []struct {
					Action                 string              `json:"action"`
					ID                     int                 `json:"id"`
					RulesetVersionID       int                 `json:"rulesetVersionId"`
					Conditions             *RuleConditions     `json:"conditions,omitempty"`
					AdvancedExceptionsList *AdvancedExceptions `json:"advancedExceptions,omitempty"`
					Exception              *RuleException      `json:"exception,omitempty"`
				} `json:"ruleActions,omitempty"`
				AttackGroupActions []struct {
					Action                 string                         `json:"action"`
					Group                  string                         `json:"group"`
					RulesetVersionID       int                            `json:"rulesetVersionId"`
					AdvancedExceptionsList *AttackGroupAdvancedExceptions `json:"advancedExceptions,omitempty"`
					Exception              *AttackGroupException          `json:"exception,omitempty"`
				} `json:"attackGroupActions,omitempty"`
				Evaluation  *WebApplicationFirewallEvaluation `json:"evaluation,omitempty"`
				ThreatIntel string                            `json:"threatIntel"`
			} `json:"webApplicationFirewall"`
			CustomRuleActions []struct {
				Action string `json:"action"`
				ID     int    `json:"id"`
			} `json:"customRuleActions,omitempty"`
			APIRequestConstraints *APIRequestConstraintsexp `json:"apiRequestConstraints,omitempty"`
			ClientReputation      struct {
				ReputationProfileActions *ClientReputationReputationProfileActions `json:"reputationProfileActions,omitempty"`
			} `json:"clientReputation"`
			RatePolicyActions              *SecurityPoliciesRatePolicyActions    `json:"ratePolicyActions,omitempty"`
			MalwarePolicyActions           []MalwarePolicyActionBody             `json:"malwarePolicyActions,omitempty"`
			IPGeoFirewall                  *IPGeoFirewall                        `json:"ipGeoFirewall,omitempty"`
			PenaltyBox                     *SecurityPoliciesPenaltyBox           `json:"penaltyBox,omitempty"`
			EvaluationPenaltyBox           *SecurityPoliciesPenaltyBox           `json:"evaluationPenaltyBox,omitempty"`
			PenaltyBoxConditions           *SecurityPoliciesPenaltyBoxConditions `json:"penaltyBoxConditions,omitempty"`
			EvaluationPenaltyBoxConditions *SecurityPoliciesPenaltyBoxConditions `json:"evaluationPenaltyBoxConditions,omitempty"`
			SlowPost                       *SlowPostexp                          `json:"slowPost,omitempty"`
			LoggingOverrides               *LoggingOverridesexp                  `json:"loggingOverrides,omitempty"`
			AttackPayloadLoggingOverrides  *AttackPayloadLoggingOverrides        `json:"attackPayloadLoggingOverrides,omitempty"`
			PragmaHeader                   *GetAdvancedSettingsPragmaResponse    `json:"pragmaHeader,omitempty"`
			EvasivePathMatch               *EvasivePathMatchexp                  `json:"evasivePathMatch,omitempty"`
			RequestBody                    *RequestBody                          `json:"requestBody,omitempty"`
			BotManagement                  *BotManagement                        `json:"botManagement,omitempty"`
		} `json:"securityPolicies"`
		Siem            *Siemexp            `json:"siem,omitempty"`
		AdvancedOptions *AdvancedOptionsexp `json:"advancedOptions,omitempty"`
		CustomDenyList  *CustomDenyListexp  `json:"customDenyList,omitempty"`
		Evaluating      struct {
			SecurityPolicies []EvaluatingSecurityPolicy `json:"securityPolicies,omitempty"`
		} `json:"evaluating,omitempty"`
		MalwarePolicies           []MalwarePolicyBody      `json:"malwarePolicies,omitempty"`
		CustomBotCategories       []map[string]interface{} `json:"customBotCategories,omitempty"`
		CustomDefinedBots         []map[string]interface{} `json:"customDefinedBots,omitempty"`
		CustomBotCategorySequence []string                 `json:"customBotCategorySequence,omitempty"`
		CustomClients             []map[string]interface{} `json:"customClients,omitempty"`
		CustomClientSequence      []string                 `json:"customClientSequence,omitempty"`
		ResponseActions           *ResponseActions         `json:"responseActions,omitempty"`
		AdvancedSettings          *AdvancedSettings        `json:"advancedSettings,omitempty"`
	}

	// RatePoliciesPath is returned as part of GetExportConfigurationResponse.
	RatePoliciesPath struct {
		PositiveMatch bool                    `json:"positiveMatch"`
		Values        *RatePoliciesPathValues `json:"values,omitempty"`
	}

	// ReputationProfileActionsexp is returned as part of GetExportConfigurationResponse.
	ReputationProfileActionsexp []struct {
		Action string `json:"action"`
		ID     int    `json:"id"`
	}

	// RatePolicyActionsexp is returned as part of GetExportConfigurationResponse.
	RatePolicyActionsexp []struct {
		ID         int    `json:"id"`
		Ipv4Action string `json:"ipv4Action"`
		Ipv6Action string `json:"ipv6Action"`
	}

	// SlowRateThresholdExp is returned as part of GetExportConfigurationResponse.
	SlowRateThresholdExp struct {
		Period int `json:"period"`
		Rate   int `json:"rate"`
	}

	// DurationThresholdExp is returned as part of GetExportConfigurationResponse.
	DurationThresholdExp struct {
		Timeout int `json:"timeout"`
	}

	// SlowPostexp is returned as part of GetExportConfigurationResponse.
	SlowPostexp struct {
		Action            string                `json:"action"`
		SlowRateThreshold *SlowRateThresholdExp `json:"slowRateThreshold,omitempty"`
		DurationThreshold *DurationThresholdExp `json:"durationThreshold,omitempty"`
	}

	// AdvancedOptionsexp is returned as part of GetExportConfigurationResponse.
	AdvancedOptionsexp struct {
		Logging              *Loggingexp                        `json:"logging"`
		AttackPayloadLogging *AttackPayloadLogging              `json:"attackPayloadLogging"`
		EvasivePathMatch     *EvasivePathMatchexp               `json:"evasivePathMatch,omitempty"`
		Prefetch             *Prefetch                          `json:"prefetch"`
		PragmaHeader         *GetAdvancedSettingsPragmaResponse `json:"pragmaHeader,omitempty"`
		RequestBody          *RequestBody                       `json:"requestBody,omitempty"`
		PIILearning          *PIILearningexp                    `json:"piiLearning,omitempty"`
	}

	// CustomDenyListexp is returned as part of GetExportConfigurationResponse.
	CustomDenyListexp []struct {
		Description string `json:"description,omitempty"`
		Name        string `json:"name"`
		ID          string `json:"id"`
		Parameters  []struct {
			DisplayName string `json:"-"`
			Name        string `json:"name"`
			Value       string `json:"value"`
		} `json:"parameters"`
	}

	// CustomRuleActionsexp  is returned as part of GetExportConfigurationResponse.
	CustomRuleActionsexp []struct {
		Action string `json:"action"`
		ID     int    `json:"id"`
	}

	// Siemexp is returned as part of GetExportConfigurationResponse.
	Siemexp struct {
		EnableForAllPolicies    bool     `json:"enableForAllPolicies,omitempty"`
		EnableSiem              bool     `json:"enableSiem"`
		EnabledBotmanSiemEvents bool     `json:"enabledBotmanSiemEvents,omitempty"`
		FirewallPolicyIDs       []string `json:"firewallPolicyIds,omitempty"`
		SiemDefinitionID        int      `json:"siemDefinitionId,omitempty"`
	}

	// PenaltyBoxexp is returned as part of GetExportConfigurationResponse.
	PenaltyBoxexp struct {
		Action               string `json:"action"`
		PenaltyBoxProtection bool   `json:"penaltyBoxProtection"`
	}

	// APIRequestConstraintsexp is returned as part of GetExportConfigurationResponse.
	APIRequestConstraintsexp struct {
		Action       string `json:"action,omitempty"`
		APIEndpoints []struct {
			Action string `json:"action"`
			ID     int    `json:"id"`
		} `json:"apiEndpoints,omitempty"`
	}

	// Evaluationexp is returned as part of GetExportConfigurationResponse.
	Evaluationexp struct {
		AttackGroupActions []struct {
			Action string `json:"action"`
			Group  string `json:"group"`
		} `json:"attackGroupActions"`
		EvaluationID      int `json:"evaluationId"`
		EvaluationVersion int `json:"evaluationVersion"`
		RuleActions       []struct {
			Action     string          `json:"action"`
			ID         int             `json:"id"`
			Conditions *RuleConditions `json:"conditions,omitempty"`
			Exception  *RuleException  `json:"exception,omitempty"`
		} `json:"ruleActions"`
		RulesetVersionID int `json:"rulesetVersionId"`
	}

	// ConditionReputationProfile is returned as part of GetExportConfigurationResponse.
	ConditionReputationProfile struct {
		AtomicConditions *AtomicConditionsexp `json:"atomicConditions,omitempty"`
		CanDelete        bool                 `json:"-"`
		ConfigVersionID  int                  `json:"-"`
		ID               int                  `json:"-"`
		Name             string               `json:"-"`
		PositiveMatch    *json.RawMessage     `json:"positiveMatch,omitempty"`
		UUID             string               `json:"-"`
		Version          int64                `json:"-"`
	}

	// HeaderCookieOrParamValuesattackgroup is returned as part of GetExportConfigurationResponse.
	HeaderCookieOrParamValuesattackgroup []struct {
		Criteria []struct {
			Hostnames []string `json:"hostnames,omitempty"`
			Paths     []string `json:"paths,omitempty"`
			Values    []string `json:"values,omitempty"`
		} `json:"criteria"`
		ValueWildcard bool     `json:"valueWildcard,omitempty"`
		Values        []string `json:"values,omitempty"`
	}

	// SpecificHeaderCookieOrParamNameValueexp is returned as part of GetExportConfigurationResponse.
	SpecificHeaderCookieOrParamNameValueexp struct {
		Name     *json.RawMessage `json:"name,omitempty"`
		Selector string           `json:"selector,omitempty"`
		Value    *json.RawMessage `json:"value,omitempty"`
	}

	// AtomicConditionsexp is returned as part of GetExportConfigurationResponse.
	AtomicConditionsexp []struct {
		CheckIps      *json.RawMessage `json:"checkIps,omitempty"`
		ClassName     string           `json:"className,omitempty"`
		Index         int              `json:"index,omitempty"`
		PositiveMatch *json.RawMessage `json:"positiveMatch,omitempty"`
		Value         []string         `json:"value,omitempty"`
		Name          *json.RawMessage `json:"name,omitempty"`
		NameCase      bool             `json:"nameCase,omitempty"`
		NameWildcard  *json.RawMessage `json:"nameWildcard,omitempty"`
		ValueCase     bool             `json:"valueCase,omitempty"`
		ValueWildcard *json.RawMessage `json:"valueWildcard,omitempty"`
		Host          []string         `json:"host,omitempty"`
	}

	// Loggingexp is returned as part of GetExportConfigurationResponse.
	Loggingexp struct {
		AllowSampling bool `json:"allowSampling"`
		Cookies       struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"cookies"`
		CustomHeaders struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"customHeaders"`
		StandardHeaders struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"standardHeaders"`
	}

	// LoggingOverridesexp is returned as part of GetExportConfigurationResponse.
	LoggingOverridesexp struct {
		AllowSampling bool `json:"allowSampling"`
		Cookies       struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"cookies"`
		CustomHeaders struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"customHeaders"`
		Override        bool `json:"override"`
		StandardHeaders struct {
			Type   string   `json:"type"`
			Values []string `json:"values,omitempty"`
		} `json:"standardHeaders"`
	}

	// AttackPayloadLogging is returned as part of GetExportConfigurationResponse.
	AttackPayloadLogging struct {
		Enabled     bool `json:"enabled"`
		RequestBody struct {
			Type string `json:"type"`
		} `json:"requestBody"`
		ResponseBody struct {
			Type string `json:"type"`
		} `json:"responseBody"`
	}

	// AttackPayloadLoggingOverrides is returned as part of GetExportConfigurationResponse.
	AttackPayloadLoggingOverrides struct {
		Enabled     bool `json:"enabled"`
		RequestBody struct {
			Type string `json:"type"`
		} `json:"requestBody"`
		ResponseBody struct {
			Type string `json:"type"`
		} `json:"responseBody"`
		Override bool `json:"override"`
	}

	// EvasivePathMatchexp contains the EnablePathMatch setting
	EvasivePathMatchexp struct {
		EnablePathMatch bool `json:"enabled"`
	}

	// PIILearningexp contains the PIILearning setting
	PIILearningexp struct {
		EnablePIILearning bool `json:"enabled"`
	}

	// Prefetch is returned as part of AdvancedOptionsexp
	Prefetch struct {
		AllExtensions      bool     `json:"allExtensions"`
		EnableAppLayer     bool     `json:"enableAppLayer"`
		EnableRateControls bool     `json:"enableRateControls"`
		Extensions         []string `json:"extensions,omitempty"`
	}

	// RequestBody is returned as part of GetExportConfigurationResponse.
	RequestBody struct {
		RequestBodyInspectionLimitInKB     string `json:"requestBodyInspectionLimitInKB"`
		RequestBodyInspectionLimitOverride bool   `json:"override"`
	}

	// ConditionsExp is returned as part of GetExportConfigurationResponse.
	ConditionsExp []struct {
		Type          string           `json:"type"`
		PositiveMatch bool             `json:"positiveMatch"`
		Name          *json.RawMessage `json:"name,omitempty"`
		NameCase      *json.RawMessage `json:"nameCase,omitempty"`
		NameWildcard  *json.RawMessage `json:"nameWildcard,omitempty"`
		Value         *json.RawMessage `json:"value,omitempty"`
		ValueCase     *json.RawMessage `json:"valueCase,omitempty"`
		ValueWildcard *json.RawMessage `json:"valueWildcard,omitempty"`
	}

	// RatePoliciesPathValues is returned as part of GetExportConfigurationResponse.
	RatePoliciesPathValues []string

	// RatePoliciesQueryParameters is returned as part of GetExportConfigurationResponse.
	RatePoliciesQueryParameters []struct {
		Name          string                             `json:"name"`
		PositiveMatch bool                               `json:"positiveMatch"`
		ValueInRange  bool                               `json:"valueInRange"`
		Values        *RatePoliciesQueryParametersValues `json:"values,omitempty"`
	}

	// RatePoliciesQueryParametersValues is returned as part of GetExportConfigurationResponse.
	RatePoliciesQueryParametersValues []string

	// SecurityPoliciesPenaltyBox is returned as part of GetExportConfigurationResponse.
	SecurityPoliciesPenaltyBox struct {
		Action               string `json:"action,omitempty"`
		PenaltyBoxProtection bool   `json:"penaltyBoxProtection,omitempty"`
	}

	// SecurityPoliciesPenaltyBoxConditions is returned as part of GetExportConfigurationResponse.
	SecurityPoliciesPenaltyBoxConditions struct {
		ConditionOperator string          `json:"conditionOperator,omitempty"`
		Conditions        *RuleConditions `json:"conditions,omitempty"`
	}

	// WebApplicationFirewallEvaluation is returned as part of GetExportConfigurationResponse.
	WebApplicationFirewallEvaluation struct {
		AttackGroupActions []struct {
			Action                 string              `json:"action"`
			Group                  string              `json:"group"`
			Exception              *RuleException      `json:"exception,omitempty"`
			AdvancedExceptionsList *AdvancedExceptions `json:"advancedExceptions,omitempty"`
		} `json:"attackGroupActions,omitempty"`
		EvaluationID      int `json:"evaluationId"`
		EvaluationVersion int `json:"evaluationVersion"`
		RuleActions       []struct {
			Action                 string              `json:"action"`
			ID                     int                 `json:"id"`
			Conditions             *RuleConditions     `json:"conditions,omitempty"`
			Exception              *RuleException      `json:"exception,omitempty"`
			AdvancedExceptionsList *AdvancedExceptions `json:"advancedExceptions,omitempty"`
		} `json:"ruleActions,omitempty"`
		RulesetVersionID int `json:"rulesetVersionId"`
	}

	// RulesetsRules is returned as part of GetExportConfigurationResponse.
	RulesetsRules []struct {
		ID                  int      `json:"id"`
		InspectRequestBody  bool     `json:"inspectRequestBody"`
		InspectResponseBody bool     `json:"inspectResponseBody"`
		Outdated            bool     `json:"outdated"`
		RuleVersion         int      `json:"ruleVersion"`
		Score               int      `json:"score"`
		Tag                 string   `json:"tag"`
		Title               string   `json:"title"`
		AttackGroups        []string `json:"attackGroups,omitempty"`
	}

	// ClientReputationReputationProfileActions is returned as part of GetExportConfigurationResponse.
	ClientReputationReputationProfileActions []struct {
		Action string `json:"action"`
		ID     int    `json:"id"`
	}

	// SecurityPoliciesRatePolicyActions is returned as part of GetExportConfigurationResponse.
	SecurityPoliciesRatePolicyActions []struct {
		ID         int    `json:"id"`
		Ipv4Action string `json:"ipv4Action"`
		Ipv6Action string `json:"ipv6Action"`
	}

	// AdvancedSettings is returned as part of GetExportConfigurationResponse
	AdvancedSettings struct {
		BotAnalyticsCookieSettings              map[string]interface{} `json:"botAnalyticsCookieSettings,omitempty"`
		ClientSideSecuritySettings              map[string]interface{} `json:"clientSideSecuritySettings,omitempty"`
		TransactionalEndpointProtectionSettings map[string]interface{} `json:"transactionalEndpointProtectionSettings,omitempty"`
	}

	// ResponseActions is returned as part of GetExportConfigurationResponse
	ResponseActions struct {
		ChallengeActions           []map[string]interface{} `json:"challengeActions,omitempty"`
		ConditionalActions         []map[string]interface{} `json:"conditionalActions,omitempty"`
		CustomDenyActions          []map[string]interface{} `json:"customDenyActions,omitempty"`
		ServeAlternateActions      []map[string]interface{} `json:"serveAlternateActions,omitempty"`
		ChallengeInterceptionRules map[string]interface{}   `json:"challengeInterceptionRules,omitempty"`
		ChallengeInjectionRules    map[string]interface{}   `json:"challengeInjectionRules,omitempty"`
	}

	// BotManagement is returned as part of GetExportConfigurationResponse
	BotManagement struct {
		AkamaiBotCategoryActions                  []map[string]interface{} `json:"akamaiBotCategoryActions,omitempty"`
		BotDetectionActions                       []map[string]interface{} `json:"botDetectionActions,omitempty"`
		BotManagementSettings                     map[string]interface{}   `json:"botManagementSettings,omitempty"`
		CustomBotCategoryActions                  []map[string]interface{} `json:"customBotCategoryActions,omitempty"`
		JavascriptInjectionRules                  map[string]interface{}   `json:"javascriptInjectionRules,omitempty"`
		TransactionalEndpoints                    *TransactionalEndpoints  `json:"transactionalEndpoints,omitempty"`
		ContentProtectionRules                    []map[string]interface{} `json:"contentProtectionRules,omitempty"`
		ContentProtectionRuleSequence             []string                 `json:"contentProtectionRuleSequence,omitempty"`
		ContentProtectionJavaScriptInjectionRules []map[string]interface{} `json:"contentProtectionJavaScriptInjectionRules,omitempty"`
	}

	// TransactionalEndpoints is returned as port of GetExportConfigurationResponse
	TransactionalEndpoints struct {
		BotProtection           []map[string]interface{} `json:"botProtection,omitempty"`
		BotProtectionExceptions map[string]interface{}   `json:"botProtectionExceptions,omitempty"`
	}
)

// Validate validates an GetExportConfigurationRequest struct.
func (v GetExportConfigurationRequest) Validate() error {
	return edgegriderr.ParseValidationErrors(validation.Errors{
		"Source": validation.Validate(v.Source, validation.In("TF").Error(
			fmt.Sprintf("value '%s' is invalid. Must be one of: 'TF' or empty", v.Source))),
	})
}

var (
	// ErrGetExportConfiguration is returned when ErrGetExportConfiguration fails
	ErrGetExportConfiguration = errors.New("get export configuration")
)

// UnmarshalJSON reads a ConditionsValue struct from its data argument.
func (c *ConditionsValue) UnmarshalJSON(data []byte) error {
	var nums interface{}
	err := json.Unmarshal(data, &nums)
	if err != nil {
		return err
	}

	items := reflect.ValueOf(nums)
	switch items.Kind() {
	case reflect.String:
		*c = append(*c, items.String())

	case reflect.Slice:
		*c = make(ConditionsValue, 0, items.Len())
		for i := 0; i < items.Len(); i++ {
			item := items.Index(i)
			switch item.Kind() {
			case reflect.String:
				*c = append(*c, item.String())
			case reflect.Interface:
				*c = append(*c, item.Interface().(string))
			}
		}
	}
	return nil
}

func (p *appsec) GetExportConfiguration(ctx context.Context, params GetExportConfigurationRequest) (*GetExportConfigurationResponse, error) {
	logger := p.Log(ctx)
	logger.Debug("GetExportConfiguration")

	if err := params.Validate(); err != nil {
		return nil, fmt.Errorf("%s: %w: %s", ErrGetExportConfiguration, ErrStructValidation, err)
	}

	uri, err := url.Parse(fmt.Sprintf("/appsec/v1/export/configs/%d/versions/%d", params.ConfigID, params.Version))
	if err != nil {
		return nil, fmt.Errorf("failed to parse url: %s", err)
	}

	if params.Source != "" {
		q := uri.Query()
		q.Add("source", params.Source)
		uri.RawQuery = q.Encode()
	}

	req, err := http.NewRequestWithContext(ctx, http.MethodGet, uri.String(), nil)
	if err != nil {
		return nil, fmt.Errorf("failed to create GetExportConfiguration request: %w", err)
	}

	var result GetExportConfigurationResponse
	resp, err := p.Exec(req, &result)
	if err != nil {
		return nil, fmt.Errorf("get export configuration request failed: %w", err)
	}
	defer session.CloseResponseBody(resp)

	if resp.StatusCode != http.StatusOK {
		return nil, p.Error(resp)
	}

	return &result, nil
}