code: func (fw *FirewallSSO) MatchesNetwork(ctx context.Context, info map[string]string) bool {
  	if len(fw.Networks) == 0 {
  		log.LoggerWContext(ctx).Debug("No network defined. Allowing all networks")
  		return true
  	}
  	ip := net.ParseIP(info["ip"])
  
  	if ip == nil {
  		log.LoggerWContext(ctx).Error(fmt.Sprintf("%s isn't a valid IP address. Cannot validate the network it belongs to.", ip))
  		return false
  	}
  
  	for _, net := range fw.Networks {
  		if net.IpNet.Contains(ip) {
  			log.LoggerWContext(ctx).Debug(fmt.Sprintf("%s matches network %s", ip, net.Cidr))
  			return true
  		}
  	}
  	log.LoggerWContext(ctx).Debug(fmt.Sprintf("%s doesn't match any configured network", ip))
  	return false
  }
docs: // Check if info["ip"] is part of the configured networks if any
  // If there isn't any network, all networks are allowed
  // Otherwise, if the IP is part of one of the networks, this succeeds, otherwise it fails