From cbde5767f1c94b500853ca5487bf0c5a2f1d4044 Mon Sep 17 00:00:00 2001
From: potatso <bangzhiliang@gmail.com>
Date: Tue, 4 Jul 2023 13:00:44 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20=E6=96=B0=E5=A2=9Eapisix=E6=8F=92?=
 =?UTF-8?q?=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 lib/apisix-coraza.lua | 80 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 80 insertions(+)
 create mode 100644 lib/apisix-coraza.lua

diff --git a/lib/apisix-coraza.lua b/lib/apisix-coraza.lua
new file mode 100644
index 0000000..ccd30be
--- /dev/null
+++ b/lib/apisix-coraza.lua
@@ -0,0 +1,80 @@
+--
+-- Licensed to the Apache Software Foundation (ASF) under one or more
+-- contributor license agreements.  See the NOTICE file distributed with
+-- this work for additional information regarding copyright ownership.
+-- The ASF licenses this file to You under the Apache License, Version 2.0
+-- (the "License"); you may not use this file except in compliance with
+-- the License.  You may obtain a copy of the License at
+--
+--     http://www.apache.org/licenses/LICENSE-2.0
+--
+-- Unless required by applicable law or agreed to in writing, software
+-- distributed under the License is distributed on an "AS IS" BASIS,
+-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+-- See the License for the specific language governing permissions and
+-- limitations under the License.
+--
+local core = require("apisix.core")
+local core_log = core.log
+local coraza = require "resty.coraza"
+
+
+
+local schema = {
+    type = "object",
+    properties = {
+        body = {
+            description = "coraza waf plugins.",
+            type = "string"
+        },
+    },
+    required = {"body"},
+}
+
+local plugin_name = "apisix-coraza"
+
+local _M = {
+    version = 0.1,
+    priority = 12,
+    name = plugin_name,
+    schema = schema,
+}
+
+function _M.check_schema(conf)
+    core.log.error("check coraza schema")
+    return core.schema.check(schema, conf)
+end
+
+function _M.init()
+    -- call this function when plugin is loaded
+    core_log.info("coraza init")
+    coraza.do_init()
+    coraza.rules_add([[SecRule REQUEST_HEADERS:User-Agent "Mozilla" "phase:1, id:3,drop,status:452,log,msg:'Blocked User-Agent'"]])
+end
+
+function _M.access(conf, ctx)
+    core.log.info("plugin access phase, conf: ", core.json.delay_encode(conf))
+    -- each connection will be created a transaction
+    coraza.do_access_filter()
+    return coraza.do_handle()
+end
+
+function _M.header_filter(conf, ctx)
+    core.log.info("plugin access phase, conf: ", core.json.delay_encode(conf))
+    -- each connection will be created a transaction
+    coraza.do_header_filter()
+    ngx.status, _ = coraza.do_handle()
+    core.response.clear_header_as_body_modified()
+end
+
+function _M.destroy()
+    core.log.info("coraza destroy")
+end
+
+
+function _M.log(conf, ctx)
+    coraza.do_log()
+    coraza.do_free()
+end
+
+return _M
\ No newline at end of file