Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

make the useragent header fetch properly

Browse Source 
add a salt to the generate_secret function -- that was kinda important right? lol
just pass through to `end` if not POST or GET
make it not use calls to hostname and dig in lua scripts, use haproxy backend resolving instead
improve the template a lot and make it theme-matched to my site and similar to ngx_http_js_challenge robot page
fix various bugs
This commit is contained in:
Thomas Lynch
2021-11-24 00:34:41 +11:00
parent 7a1a91f0e8
commit 6400d98975
5 changed files with 84 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/libs/http.lua
View File

@@ -609,7 +609,7 @@ function M.send(method, t)
else
return nil, "http." .. method:lower() .. ": Invalid URL schema " .. tostring(schema)
end
print("ADDR IS", addr)
local c, err = connect(socket, addr, port)
if c then

32
src/libs/utils.lua
View File

@@ -15,28 +15,16 @@ function _M.resolve_fqdn(fqdn)
return result:gsub("\n", "")
end
function _M.generate_secret(args)
--[[ args: {
-- context: enum(applet, txn),
-- mode: enum('service', 'action')
-- }
--]]
local context = args.context
local mode = args.mode or "service"
local ip = context.sf:src() or ""
local hostname = _M.get_hostname() or ""
local user_agent
if mode == "service" then
user_agent = context.headers['user-agent'] or {}
user_agent = user_agent[0]
else
user_agent = context.sf:req_hdr('user-agent') or ""
end
return context.sc:xxh32(ip .. hostname .. user_agent)
function _M.generate_secret(context, salt, is_applet)
local ip = context.sf:src()
local user_agent
if is_applet == true then
user_agent = context.headers['user-agent'] or {}
user_agent = user_agent[0]
else
user_agent = context.sf:req_hdr('user-agent')
end
return context.sc:xxh32(salt .. ip .. user_agent)
end
return _M