github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 13:49:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

fini session on accept also

Browse Source
This commit is contained in:
wiaamm
2025-11-30 21:56:44 +02:00
parent 5eabf62255
commit 77bf3f8ecd
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -294,6 +294,7 @@ function NanoHandler.body_filter(conf)
local response = result[2] local response = result[2]
local modifications = result[3] local modifications = result[3]
kong.log.err("CHUNK #", ctx.body_buffer_chunk, " VERDICT: ", verdict, " (INSPECT=", nano.AttachmentVerdict.INSPECT, ", ACCEPT=", nano.AttachmentVerdict.ACCEPT, ", DROP=", nano.AttachmentVerdict.DROP, ")")
kong.log.debug("Response body chunk verdict: ", verdict, " (chunk #", ctx.body_buffer_chunk, ")") kong.log.debug("Response body chunk verdict: ", verdict, " (chunk #", ctx.body_buffer_chunk, ")")
if modifications then if modifications then
@@ -316,6 +317,12 @@ function NanoHandler.body_filter(conf)
kong.log.err("SETTING inspection_complete=true in body_filter (ACCEPT verdict during chunk)") kong.log.err("SETTING inspection_complete=true in body_filter (ACCEPT verdict during chunk)")
kong.log.err("------------------------------------------------------------------------") kong.log.err("------------------------------------------------------------------------")
ctx.inspection_complete = true ctx.inspection_complete = true
kong.log.debug("ACCEPT verdict received - finalizing session")
nano.fini_session(session_data)
nano.cleanup_all()
ctx.session_id = nil
ctx.session_data = nil
end end
else else
kong.log.warn("nano.send_body failed, failing open: ", tostring(result)) kong.log.warn("nano.send_body failed, failing open: ", tostring(result))
@@ -357,6 +364,12 @@ function NanoHandler.body_filter(conf)
kong.log.err("SETTING inspection_complete=true in body_filter (EOF processing complete)") kong.log.err("SETTING inspection_complete=true in body_filter (EOF processing complete)")
kong.log.err("------------------------------------------------------------------------") kong.log.err("------------------------------------------------------------------------")
ctx.inspection_complete = true ctx.inspection_complete = true
kong.log.debug("EOF reached - finalizing session in body_filter")
nano.fini_session(session_data)
nano.cleanup_all()
ctx.session_id = nil
ctx.session_data = nil
end end
::skip_inspection:: ::skip_inspection::
@@ -367,6 +380,11 @@ function NanoHandler.log(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
if ctx.session_id and ctx.session_data then if ctx.session_id and ctx.session_data then
if not ctx.inspection_complete then
kong.log.warn("Log phase called but body_filter may still be processing - NOT finalizing session to avoid breaking streaming")
return
end
local session_data = ctx.session_data local session_data = ctx.session_data
local session_id = ctx.session_id local session_id = ctx.session_id