add 'force-risky-operation' header when configuring both perf_mode_https and perf_mode_level to "all-resources"

Author: BrachaY

incapsula/client.go

@@ -76,27 +76,32 @@ func (c *Client) PostFormWithHeaders(url string, data url.Values) (*http.Respons
 		return nil, fmt.Errorf("Error preparing request: %s", err)
 	}
 
-	SetHeaders(c, req, contentTypeApplicationUrlEncoded)
+	SetHeaders(c, req, contentTypeApplicationUrlEncoded, nil)
 	return c.httpClient.Do(req)
 }
 
-func (c *Client) DoJsonRequestWithHeaders(method string, url string, data []byte) (*http.Response, error) {
+func (c *Client) DoJsonRequestWithCustomHeaders(method string, url string, data []byte, headers map[string]string) (*http.Response, error) {
 	req, err := PrepareJsonRequest(method, url, data)
 	if err != nil {
 		return nil, fmt.Errorf("Error preparing request: %s", err)
 	}
 
-	SetHeaders(c, req, contentTypeApplicationJson)
+	SetHeaders(c, req, contentTypeApplicationJson, headers)
+
 	return c.httpClient.Do(req)
 }
 
+func (c *Client) DoJsonRequestWithHeaders(method string, url string, data []byte) (*http.Response, error) {
+	return c.DoJsonRequestWithCustomHeaders(method, url, data, nil)
+}
+
 func (c *Client) DoJsonRequestWithHeadersForm(method string, url string, data []byte, contentType string) (*http.Response, error) {
 	req, err := PrepareJsonRequest(method, url, data)
 	if err != nil {
 		return nil, fmt.Errorf("Error preparing request: %s", err)
 	}
 
-	SetHeaders(c, req, contentType)
+	SetHeaders(c, req, contentType, nil)
 	return c.httpClient.Do(req)
 }
 
@@ -108,9 +113,16 @@ func PrepareJsonRequest(method string, url string, data []byte) (*http.Request,
 	return http.NewRequest(method, url, bytes.NewReader(data))
 }
 
-func SetHeaders(c *Client, req *http.Request, contentType string) {
+func SetHeaders(c *Client, req *http.Request, contentType string, customHeaders map[string]string) {
 	req.Header.Set("Content-Type", contentType)
 	req.Header.Set("x-api-id", c.config.APIID)
 	req.Header.Set("x-api-key", c.config.APIKey)
 	req.Header.Set("x-tf-provider-ver", c.providerVersion)
+
+	if customHeaders != nil {
+		for name, value := range customHeaders {
+			req.Header.Set(name, value)
+		}
+	}
+
 }

incapsula/client_performance.go

@@ -6,8 +6,11 @@ import (
 	"io/ioutil"
 	"log"
 	"net/http"
+	"strconv"
 )
 
+const FORCE_RISKY_OP_HEADER_NAME = "force-risky-operation"
+
 // PerformanceSettings is a struct that encompasses all the properties for performance settings
 type PerformanceSettings struct {
 	Mode struct {
@@ -93,8 +96,15 @@ func (c *Client) UpdatePerformanceSettings(siteID string, performanceSettings *P
 
 	// Post request to Incapsula
 	log.Printf("[DEBUG] Incapsula Update Incap Performance Settings JSON request: %s\n", string(performanceSettingsJSON))
+
+	var headers = map[string]string{}
+	if performanceSettings.Mode.HTTPS == "include_all_resources" && performanceSettings.Mode.Level == "all_resources" {
+		log.Printf("[DEBUG] Incapsula Update Incap Performance Settings  - adding header: %s\n", FORCE_RISKY_OP_HEADER_NAME)
+		headers[FORCE_RISKY_OP_HEADER_NAME] = strconv.FormatBool(true)
+	}
+
 	reqURL := fmt.Sprintf("%s/sites/%s/settings/cache", c.config.BaseURLRev2, siteID)
-	resp, err := c.DoJsonRequestWithHeaders(http.MethodPut, reqURL, performanceSettingsJSON)
+	resp, err := c.DoJsonRequestWithCustomHeaders(http.MethodPut, reqURL, performanceSettingsJSON, headers)
 	if err != nil {
 		return nil, fmt.Errorf("Error from Incapsula service when updating Incap Performance Settings for Site ID %s: %s", siteID, err)
 	}