# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

require 'date'
require 'google/apis/core/base_service'
require 'google/apis/core/json_representation'
require 'google/apis/core/hashable'
require 'google/apis/errors'

module Google
  module Apis
    module WebsecurityscannerV1alpha
      
      # Scan authentication configuration.
      class Authentication
        include Google::Apis::Core::Hashable
      
        # Describes authentication configuration that uses a custom account.
        # Corresponds to the JSON property `customAccount`
        # @return [Google::Apis::WebsecurityscannerV1alpha::CustomAccount]
        attr_accessor :custom_account
      
        # Describes authentication configuration that uses a Google account.
        # Corresponds to the JSON property `googleAccount`
        # @return [Google::Apis::WebsecurityscannerV1alpha::GoogleAccount]
        attr_accessor :google_account
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @custom_account = args[:custom_account] if args.key?(:custom_account)
          @google_account = args[:google_account] if args.key?(:google_account)
        end
      end
      
      # A CrawledUrl resource represents a URL that was crawled during a ScanRun. Web
      # Security Scanner Service crawls the web applications, following all links
      # within the scope of sites, to find the URLs to test against.
      class CrawledUrl
        include Google::Apis::Core::Hashable
      
        # Output only. The body of the request that was used to visit the URL.
        # Corresponds to the JSON property `body`
        # @return [String]
        attr_accessor :body
      
        # Output only. The http method of the request that was used to visit the URL, in
        # uppercase.
        # Corresponds to the JSON property `httpMethod`
        # @return [String]
        attr_accessor :http_method
      
        # Output only. The URL that was crawled.
        # Corresponds to the JSON property `url`
        # @return [String]
        attr_accessor :url
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @body = args[:body] if args.key?(:body)
          @http_method = args[:http_method] if args.key?(:http_method)
          @url = args[:url] if args.key?(:url)
        end
      end
      
      # Describes authentication configuration that uses a custom account.
      class CustomAccount
        include Google::Apis::Core::Hashable
      
        # Required. The login form URL of the website.
        # Corresponds to the JSON property `loginUrl`
        # @return [String]
        attr_accessor :login_url
      
        # Required. Input only. The password of the custom account. The credential is
        # stored encrypted and not returned in any response nor included in audit logs.
        # Corresponds to the JSON property `password`
        # @return [String]
        attr_accessor :password
      
        # Required. The user name of the custom account.
        # Corresponds to the JSON property `username`
        # @return [String]
        attr_accessor :username
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @login_url = args[:login_url] if args.key?(:login_url)
          @password = args[:password] if args.key?(:password)
          @username = args[:username] if args.key?(:username)
        end
      end
      
      # A generic empty message that you can re-use to avoid defining duplicated empty
      # messages in your APIs. A typical example is to use it as the request or the
      # response type of an API method. For instance: service Foo ` rpc Bar(google.
      # protobuf.Empty) returns (google.protobuf.Empty); `
      class Empty
        include Google::Apis::Core::Hashable
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
        end
      end
      
      # A Finding resource represents a vulnerability instance identified during a
      # ScanRun.
      class Finding
        include Google::Apis::Core::Hashable
      
        # The body of the request that triggered the vulnerability.
        # Corresponds to the JSON property `body`
        # @return [String]
        attr_accessor :body
      
        # The description of the vulnerability.
        # Corresponds to the JSON property `description`
        # @return [String]
        attr_accessor :description
      
        # The URL where the browser lands when the vulnerability is detected.
        # Corresponds to the JSON property `finalUrl`
        # @return [String]
        attr_accessor :final_url
      
        # The type of the Finding.
        # Corresponds to the JSON property `findingType`
        # @return [String]
        attr_accessor :finding_type
      
        # If the vulnerability was originated from nested IFrame, the immediate parent
        # IFrame is reported.
        # Corresponds to the JSON property `frameUrl`
        # @return [String]
        attr_accessor :frame_url
      
        # The URL produced by the server-side fuzzer and used in the request that
        # triggered the vulnerability.
        # Corresponds to the JSON property `fuzzedUrl`
        # @return [String]
        attr_accessor :fuzzed_url
      
        # The http method of the request that triggered the vulnerability, in uppercase.
        # Corresponds to the JSON property `httpMethod`
        # @return [String]
        attr_accessor :http_method
      
        # The resource name of the Finding. The name follows the format of 'projects/`
        # projectId`/scanConfigs/`scanConfigId`/scanruns/`scanRunId`/findings/`findingId`
        # '. The finding IDs are generated by the system.
        # Corresponds to the JSON property `name`
        # @return [String]
        attr_accessor :name
      
        # Information reported for an outdated library.
        # Corresponds to the JSON property `outdatedLibrary`
        # @return [Google::Apis::WebsecurityscannerV1alpha::OutdatedLibrary]
        attr_accessor :outdated_library
      
        # The URL containing human-readable payload that user can leverage to reproduce
        # the vulnerability.
        # Corresponds to the JSON property `reproductionUrl`
        # @return [String]
        attr_accessor :reproduction_url
      
        # The tracking ID uniquely identifies a vulnerability instance across multiple
        # ScanRuns.
        # Corresponds to the JSON property `trackingId`
        # @return [String]
        attr_accessor :tracking_id
      
        # Information regarding any resource causing the vulnerability such as
        # JavaScript sources, image, audio files, etc.
        # Corresponds to the JSON property `violatingResource`
        # @return [Google::Apis::WebsecurityscannerV1alpha::ViolatingResource]
        attr_accessor :violating_resource
      
        # Information about vulnerable or missing HTTP Headers.
        # Corresponds to the JSON property `vulnerableHeaders`
        # @return [Google::Apis::WebsecurityscannerV1alpha::VulnerableHeaders]
        attr_accessor :vulnerable_headers
      
        # Information about vulnerable request parameters.
        # Corresponds to the JSON property `vulnerableParameters`
        # @return [Google::Apis::WebsecurityscannerV1alpha::VulnerableParameters]
        attr_accessor :vulnerable_parameters
      
        # Information reported for an XSS.
        # Corresponds to the JSON property `xss`
        # @return [Google::Apis::WebsecurityscannerV1alpha::Xss]
        attr_accessor :xss
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @body = args[:body] if args.key?(:body)
          @description = args[:description] if args.key?(:description)
          @final_url = args[:final_url] if args.key?(:final_url)
          @finding_type = args[:finding_type] if args.key?(:finding_type)
          @frame_url = args[:frame_url] if args.key?(:frame_url)
          @fuzzed_url = args[:fuzzed_url] if args.key?(:fuzzed_url)
          @http_method = args[:http_method] if args.key?(:http_method)
          @name = args[:name] if args.key?(:name)
          @outdated_library = args[:outdated_library] if args.key?(:outdated_library)
          @reproduction_url = args[:reproduction_url] if args.key?(:reproduction_url)
          @tracking_id = args[:tracking_id] if args.key?(:tracking_id)
          @violating_resource = args[:violating_resource] if args.key?(:violating_resource)
          @vulnerable_headers = args[:vulnerable_headers] if args.key?(:vulnerable_headers)
          @vulnerable_parameters = args[:vulnerable_parameters] if args.key?(:vulnerable_parameters)
          @xss = args[:xss] if args.key?(:xss)
        end
      end
      
      # A FindingTypeStats resource represents stats regarding a specific FindingType
      # of Findings under a given ScanRun.
      class FindingTypeStats
        include Google::Apis::Core::Hashable
      
        # The count of findings belonging to this finding type.
        # Corresponds to the JSON property `findingCount`
        # @return [Fixnum]
        attr_accessor :finding_count
      
        # The finding type associated with the stats.
        # Corresponds to the JSON property `findingType`
        # @return [String]
        attr_accessor :finding_type
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @finding_count = args[:finding_count] if args.key?(:finding_count)
          @finding_type = args[:finding_type] if args.key?(:finding_type)
        end
      end
      
      # Describes authentication configuration that uses a Google account.
      class GoogleAccount
        include Google::Apis::Core::Hashable
      
        # Required. Input only. The password of the Google account. The credential is
        # stored encrypted and not returned in any response nor included in audit logs.
        # Corresponds to the JSON property `password`
        # @return [String]
        attr_accessor :password
      
        # Required. The user name of the Google account.
        # Corresponds to the JSON property `username`
        # @return [String]
        attr_accessor :username
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @password = args[:password] if args.key?(:password)
          @username = args[:username] if args.key?(:username)
        end
      end
      
      # Describes a HTTP Header.
      class Header
        include Google::Apis::Core::Hashable
      
        # Header name.
        # Corresponds to the JSON property `name`
        # @return [String]
        attr_accessor :name
      
        # Header value.
        # Corresponds to the JSON property `value`
        # @return [String]
        attr_accessor :value
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @name = args[:name] if args.key?(:name)
          @value = args[:value] if args.key?(:value)
        end
      end
      
      # Response for the `ListCrawledUrls` method.
      class ListCrawledUrlsResponse
        include Google::Apis::Core::Hashable
      
        # The list of CrawledUrls returned.
        # Corresponds to the JSON property `crawledUrls`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::CrawledUrl>]
        attr_accessor :crawled_urls
      
        # Token to retrieve the next page of results, or empty if there are no more
        # results in the list.
        # Corresponds to the JSON property `nextPageToken`
        # @return [String]
        attr_accessor :next_page_token
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @crawled_urls = args[:crawled_urls] if args.key?(:crawled_urls)
          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
        end
      end
      
      # Response for the `ListFindingTypeStats` method.
      class ListFindingTypeStatsResponse
        include Google::Apis::Core::Hashable
      
        # The list of FindingTypeStats returned.
        # Corresponds to the JSON property `findingTypeStats`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::FindingTypeStats>]
        attr_accessor :finding_type_stats
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @finding_type_stats = args[:finding_type_stats] if args.key?(:finding_type_stats)
        end
      end
      
      # Response for the `ListFindings` method.
      class ListFindingsResponse
        include Google::Apis::Core::Hashable
      
        # The list of Findings returned.
        # Corresponds to the JSON property `findings`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::Finding>]
        attr_accessor :findings
      
        # Token to retrieve the next page of results, or empty if there are no more
        # results in the list.
        # Corresponds to the JSON property `nextPageToken`
        # @return [String]
        attr_accessor :next_page_token
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @findings = args[:findings] if args.key?(:findings)
          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
        end
      end
      
      # Response for the `ListScanConfigs` method.
      class ListScanConfigsResponse
        include Google::Apis::Core::Hashable
      
        # Token to retrieve the next page of results, or empty if there are no more
        # results in the list.
        # Corresponds to the JSON property `nextPageToken`
        # @return [String]
        attr_accessor :next_page_token
      
        # The list of ScanConfigs returned.
        # Corresponds to the JSON property `scanConfigs`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::ScanConfig>]
        attr_accessor :scan_configs
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
          @scan_configs = args[:scan_configs] if args.key?(:scan_configs)
        end
      end
      
      # Response for the `ListScanRuns` method.
      class ListScanRunsResponse
        include Google::Apis::Core::Hashable
      
        # Token to retrieve the next page of results, or empty if there are no more
        # results in the list.
        # Corresponds to the JSON property `nextPageToken`
        # @return [String]
        attr_accessor :next_page_token
      
        # The list of ScanRuns returned.
        # Corresponds to the JSON property `scanRuns`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::ScanRun>]
        attr_accessor :scan_runs
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
          @scan_runs = args[:scan_runs] if args.key?(:scan_runs)
        end
      end
      
      # Information reported for an outdated library.
      class OutdatedLibrary
        include Google::Apis::Core::Hashable
      
        # URLs to learn more information about the vulnerabilities in the library.
        # Corresponds to the JSON property `learnMoreUrls`
        # @return [Array<String>]
        attr_accessor :learn_more_urls
      
        # The name of the outdated library.
        # Corresponds to the JSON property `libraryName`
        # @return [String]
        attr_accessor :library_name
      
        # The version number.
        # Corresponds to the JSON property `version`
        # @return [String]
        attr_accessor :version
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @learn_more_urls = args[:learn_more_urls] if args.key?(:learn_more_urls)
          @library_name = args[:library_name] if args.key?(:library_name)
          @version = args[:version] if args.key?(:version)
        end
      end
      
      # A ScanConfig resource contains the configurations to launch a scan. next id:
      # 12
      class ScanConfig
        include Google::Apis::Core::Hashable
      
        # Scan authentication configuration.
        # Corresponds to the JSON property `authentication`
        # @return [Google::Apis::WebsecurityscannerV1alpha::Authentication]
        attr_accessor :authentication
      
        # The excluded URL patterns as described in https://cloud.google.com/security-
        # command-center/docs/how-to-use-web-security-scanner#excluding_urls
        # Corresponds to the JSON property `blacklistPatterns`
        # @return [Array<String>]
        attr_accessor :blacklist_patterns
      
        # Required. The user provided display name of the ScanConfig.
        # Corresponds to the JSON property `displayName`
        # @return [String]
        attr_accessor :display_name
      
        # A ScanRun is a output-only resource representing an actual run of the scan.
        # Corresponds to the JSON property `latestRun`
        # @return [Google::Apis::WebsecurityscannerV1alpha::ScanRun]
        attr_accessor :latest_run
      
        # The maximum QPS during scanning. A valid value ranges from 5 to 20 inclusively.
        # If the field is unspecified or its value is set 0, server will default to 15.
        # Other values outside of [5, 20] range will be rejected with INVALID_ARGUMENT
        # error.
        # Corresponds to the JSON property `maxQps`
        # @return [Fixnum]
        attr_accessor :max_qps
      
        # The resource name of the ScanConfig. The name follows the format of 'projects/`
        # projectId`/scanConfigs/`scanConfigId`'. The ScanConfig IDs are generated by
        # the system.
        # Corresponds to the JSON property `name`
        # @return [String]
        attr_accessor :name
      
        # Scan schedule configuration.
        # Corresponds to the JSON property `schedule`
        # @return [Google::Apis::WebsecurityscannerV1alpha::Schedule]
        attr_accessor :schedule
      
        # Required. The starting URLs from which the scanner finds site pages.
        # Corresponds to the JSON property `startingUrls`
        # @return [Array<String>]
        attr_accessor :starting_urls
      
        # Set of Google Cloud platforms targeted by the scan. If empty, APP_ENGINE will
        # be used as a default.
        # Corresponds to the JSON property `targetPlatforms`
        # @return [Array<String>]
        attr_accessor :target_platforms
      
        # The user agent used during scanning.
        # Corresponds to the JSON property `userAgent`
        # @return [String]
        attr_accessor :user_agent
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @authentication = args[:authentication] if args.key?(:authentication)
          @blacklist_patterns = args[:blacklist_patterns] if args.key?(:blacklist_patterns)
          @display_name = args[:display_name] if args.key?(:display_name)
          @latest_run = args[:latest_run] if args.key?(:latest_run)
          @max_qps = args[:max_qps] if args.key?(:max_qps)
          @name = args[:name] if args.key?(:name)
          @schedule = args[:schedule] if args.key?(:schedule)
          @starting_urls = args[:starting_urls] if args.key?(:starting_urls)
          @target_platforms = args[:target_platforms] if args.key?(:target_platforms)
          @user_agent = args[:user_agent] if args.key?(:user_agent)
        end
      end
      
      # A ScanRun is a output-only resource representing an actual run of the scan.
      class ScanRun
        include Google::Apis::Core::Hashable
      
        # The time at which the ScanRun reached termination state - that the ScanRun is
        # either finished or stopped by user.
        # Corresponds to the JSON property `endTime`
        # @return [String]
        attr_accessor :end_time
      
        # The execution state of the ScanRun.
        # Corresponds to the JSON property `executionState`
        # @return [String]
        attr_accessor :execution_state
      
        # Whether the scan run has found any vulnerabilities.
        # Corresponds to the JSON property `hasVulnerabilities`
        # @return [Boolean]
        attr_accessor :has_vulnerabilities
        alias_method :has_vulnerabilities?, :has_vulnerabilities
      
        # The resource name of the ScanRun. The name follows the format of 'projects/`
        # projectId`/scanConfigs/`scanConfigId`/scanRuns/`scanRunId`'. The ScanRun IDs
        # are generated by the system.
        # Corresponds to the JSON property `name`
        # @return [String]
        attr_accessor :name
      
        # The percentage of total completion ranging from 0 to 100. If the scan is in
        # queue, the value is 0. If the scan is running, the value ranges from 0 to 100.
        # If the scan is finished, the value is 100.
        # Corresponds to the JSON property `progressPercent`
        # @return [Fixnum]
        attr_accessor :progress_percent
      
        # The result state of the ScanRun. This field is only available after the
        # execution state reaches "FINISHED".
        # Corresponds to the JSON property `resultState`
        # @return [String]
        attr_accessor :result_state
      
        # The time at which the ScanRun started.
        # Corresponds to the JSON property `startTime`
        # @return [String]
        attr_accessor :start_time
      
        # The number of URLs crawled during this ScanRun. If the scan is in progress,
        # the value represents the number of URLs crawled up to now.
        # Corresponds to the JSON property `urlsCrawledCount`
        # @return [Fixnum]
        attr_accessor :urls_crawled_count
      
        # The number of URLs tested during this ScanRun. If the scan is in progress, the
        # value represents the number of URLs tested up to now. The number of URLs
        # tested is usually larger than the number URLS crawled because typically a
        # crawled URL is tested with multiple test payloads.
        # Corresponds to the JSON property `urlsTestedCount`
        # @return [Fixnum]
        attr_accessor :urls_tested_count
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @end_time = args[:end_time] if args.key?(:end_time)
          @execution_state = args[:execution_state] if args.key?(:execution_state)
          @has_vulnerabilities = args[:has_vulnerabilities] if args.key?(:has_vulnerabilities)
          @name = args[:name] if args.key?(:name)
          @progress_percent = args[:progress_percent] if args.key?(:progress_percent)
          @result_state = args[:result_state] if args.key?(:result_state)
          @start_time = args[:start_time] if args.key?(:start_time)
          @urls_crawled_count = args[:urls_crawled_count] if args.key?(:urls_crawled_count)
          @urls_tested_count = args[:urls_tested_count] if args.key?(:urls_tested_count)
        end
      end
      
      # Scan schedule configuration.
      class Schedule
        include Google::Apis::Core::Hashable
      
        # Required. The duration of time between executions in days.
        # Corresponds to the JSON property `intervalDurationDays`
        # @return [Fixnum]
        attr_accessor :interval_duration_days
      
        # A timestamp indicates when the next run will be scheduled. The value is
        # refreshed by the server after each run. If unspecified, it will default to
        # current server time, which means the scan will be scheduled to start
        # immediately.
        # Corresponds to the JSON property `scheduleTime`
        # @return [String]
        attr_accessor :schedule_time
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @interval_duration_days = args[:interval_duration_days] if args.key?(:interval_duration_days)
          @schedule_time = args[:schedule_time] if args.key?(:schedule_time)
        end
      end
      
      # Request for the `StartScanRun` method.
      class StartScanRunRequest
        include Google::Apis::Core::Hashable
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
        end
      end
      
      # Request for the `StopScanRun` method.
      class StopScanRunRequest
        include Google::Apis::Core::Hashable
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
        end
      end
      
      # Information regarding any resource causing the vulnerability such as
      # JavaScript sources, image, audio files, etc.
      class ViolatingResource
        include Google::Apis::Core::Hashable
      
        # The MIME type of this resource.
        # Corresponds to the JSON property `contentType`
        # @return [String]
        attr_accessor :content_type
      
        # URL of this violating resource.
        # Corresponds to the JSON property `resourceUrl`
        # @return [String]
        attr_accessor :resource_url
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @content_type = args[:content_type] if args.key?(:content_type)
          @resource_url = args[:resource_url] if args.key?(:resource_url)
        end
      end
      
      # Information about vulnerable or missing HTTP Headers.
      class VulnerableHeaders
        include Google::Apis::Core::Hashable
      
        # List of vulnerable headers.
        # Corresponds to the JSON property `headers`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::Header>]
        attr_accessor :headers
      
        # List of missing headers.
        # Corresponds to the JSON property `missingHeaders`
        # @return [Array<Google::Apis::WebsecurityscannerV1alpha::Header>]
        attr_accessor :missing_headers
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @headers = args[:headers] if args.key?(:headers)
          @missing_headers = args[:missing_headers] if args.key?(:missing_headers)
        end
      end
      
      # Information about vulnerable request parameters.
      class VulnerableParameters
        include Google::Apis::Core::Hashable
      
        # The vulnerable parameter names.
        # Corresponds to the JSON property `parameterNames`
        # @return [Array<String>]
        attr_accessor :parameter_names
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @parameter_names = args[:parameter_names] if args.key?(:parameter_names)
        end
      end
      
      # Information reported for an XSS.
      class Xss
        include Google::Apis::Core::Hashable
      
        # An error message generated by a javascript breakage.
        # Corresponds to the JSON property `errorMessage`
        # @return [String]
        attr_accessor :error_message
      
        # Stack traces leading to the point where the XSS occurred.
        # Corresponds to the JSON property `stackTraces`
        # @return [Array<String>]
        attr_accessor :stack_traces
      
        def initialize(**args)
           update!(**args)
        end
      
        # Update properties of this object
        def update!(**args)
          @error_message = args[:error_message] if args.key?(:error_message)
          @stack_traces = args[:stack_traces] if args.key?(:stack_traces)
        end
      end
    end
  end
end
