Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

gitignore docker-compose, remove some unnecessary comments, change cookie name

Browse Source
This commit is contained in:
Thomas Lynch
2021-11-24 00:46:44 +11:00
parent 6400d98975
commit f7f6ecd276
2 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
docker-compose.yml

9
src/scripts/hcaptcha.lua
View File

@ -8,12 +8,9 @@ local json = require("json")
local captcha_secret = os.getenv("HCAPTCHA_SECRET") local captcha_secret = os.getenv("HCAPTCHA_SECRET")
local captcha_sitekey = os.getenv("HCAPTCHA_SITEKEY") local captcha_sitekey = os.getenv("HCAPTCHA_SITEKEY")
local cookie_secret = os.getenv("COOKIE_SECRET") local cookie_secret = os.getenv("COOKIE_SECRET")
-- HaProxy Lua is not capable of FQDN resolution :( -- bypased by using alternative core.backends["hcaptcha"].servers["hcaptcha"]:get_addr()
local captcha_provider_domain = "hcaptcha.com" local captcha_provider_domain = "hcaptcha.com"
--local captcha_provider_ip = utils.resolve_fqdn(captcha_provider_domain)
local body_template = [[ local body_template = [[
<!DOCTYPE html> <!DOCTYPE html>
@ -81,7 +78,7 @@ function _M.view(applet)
local floating_hash = utils.generate_secret(applet, cookie_secret, true) local floating_hash = utils.generate_secret(applet, cookie_secret, true)
applet:add_header( applet:add_header(
"set-cookie", "set-cookie",
string.format("z_ddos_protection=%s; Max-Age=14400; Path=/", floating_hash) string.format("z_ddos_captcha=%s; Max-Age=14400; Path=/", floating_hash)
) )
-- else -- else
-- core.Debug("HCAPTCHA FAILED: " .. json.encode(api_response)) -- core.Debug("HCAPTCHA FAILED: " .. json.encode(api_response))
@ -101,9 +98,9 @@ end
function _M.check_captcha_status(txn) function _M.check_captcha_status(txn)
local parsed_request_cookies = cookie.get_cookie_table(txn.sf:hdr("Cookie")) local parsed_request_cookies = cookie.get_cookie_table(txn.sf:hdr("Cookie"))
local expected_cookie = utils.generate_secret(txn, cookie_secret) local expected_cookie = utils.generate_secret(txn, cookie_secret)
--core.Debug("RECEIVED SECRET COOKIE: " .. parsed_request_cookies["z_ddos_protection"]) --core.Debug("RECEIVED SECRET COOKIE: " .. parsed_request_cookies["z_ddos_captcha"])
--core.Debug("EXPECTED SECRET COOKIE: " .. expected_cookie) --core.Debug("EXPECTED SECRET COOKIE: " .. expected_cookie)
if parsed_request_cookies["z_ddos_protection"] == expected_cookie then if parsed_request_cookies["z_ddos_captcha"] == expected_cookie then
core.Debug("CAPTCHA STATUS CHECK SUCCESS") core.Debug("CAPTCHA STATUS CHECK SUCCESS")
return txn:set_var("txn.captcha_passed", true) return txn:set_var("txn.captcha_passed", true)
end end