mirror of
https://gitee.com/samwaf/SamWaf.git
synced 2026-11-02 19:21:44 +08:00
279 lines
7.7 KiB
Go
279 lines
7.7 KiB
Go
package api
|
|
|
|
import (
|
|
"SamWaf/common/uuid"
|
|
"SamWaf/common/zlog"
|
|
"SamWaf/enums"
|
|
"SamWaf/global"
|
|
"SamWaf/model"
|
|
"SamWaf/model/common/response"
|
|
"SamWaf/model/request"
|
|
"SamWaf/model/spec"
|
|
"SamWaf/utils"
|
|
"errors"
|
|
"fmt"
|
|
"github.com/gin-gonic/gin"
|
|
"gorm.io/gorm"
|
|
"strings"
|
|
)
|
|
|
|
type WafRuleAPi struct {
|
|
}
|
|
|
|
func (w *WafRuleAPi) AddApi(c *gin.Context) {
|
|
ruleHelper := &utils.RuleHelper{}
|
|
var req request.WafRuleAddReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
var ruleTool = model.RuleTool{}
|
|
ruleInfo, err := ruleTool.LoadRule(req.RuleJson)
|
|
if err != nil {
|
|
response.FailWithMessage("规则解析错误", c)
|
|
return
|
|
}
|
|
var ruleCode = uuid.GenUUID()
|
|
if req.IsManualRule == 1 {
|
|
ruleCodeFormDRL, err := ruleHelper.ExtractRuleName(req.RuleJson)
|
|
if err != nil {
|
|
response.FailWithMessage(err.Error(), c)
|
|
}
|
|
if ruleCodeFormDRL != "{SamWafUUID}" {
|
|
ruleCode = ruleCodeFormDRL
|
|
}
|
|
}
|
|
if ruleInfo.RuleBase.RuleDomainCode == "请选择网站" {
|
|
response.FailWithMessage("请选择网站", c)
|
|
return
|
|
}
|
|
count := wafRuleService.CheckIsExistApi(ruleInfo.RuleBase.RuleName, ruleInfo.RuleBase.RuleDomainCode)
|
|
if count > 0 {
|
|
response.FailWithMessage("当前规则已存在", c)
|
|
return
|
|
}
|
|
chsName := ruleInfo.RuleBase.RuleName
|
|
|
|
if req.IsManualRule == 1 {
|
|
existBean := wafRuleService.GetDetailByCodeApi(ruleCode)
|
|
if existBean.RuleCode != "" {
|
|
response.FailWithMessage("当前编码已存在，请刷新页面重新尝试", c)
|
|
return
|
|
}
|
|
}
|
|
ruleInfo.RuleBase.RuleName = strings.Replace(ruleCode, "-", "", -1)
|
|
|
|
var ruleContent = ruleTool.GenRuleInfo(ruleInfo, chsName)
|
|
if req.IsManualRule == 1 {
|
|
ruleContent = ruleInfo.RuleContent
|
|
//检查规则是否合法
|
|
err = ruleHelper.CheckRuleAvailable(ruleContent)
|
|
if err != nil {
|
|
response.FailWithMessage("规则校验失败", c)
|
|
return
|
|
}
|
|
}
|
|
|
|
err = wafRuleService.AddApi(req, ruleCode, chsName, ruleInfo.RuleBase.RuleDomainCode, ruleContent)
|
|
if err == nil {
|
|
w.NotifyWaf(ruleInfo.RuleBase.RuleDomainCode)
|
|
response.OkWithMessage("添加成功", c)
|
|
return
|
|
} else {
|
|
|
|
response.FailWithMessage("添加失败", c)
|
|
return
|
|
}
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
return
|
|
}
|
|
}
|
|
func (w *WafRuleAPi) GetDetailApi(c *gin.Context) {
|
|
var req request.WafRuleDetailReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
wafHost := wafRuleService.GetDetailApi(req)
|
|
response.OkWithDetailed(wafHost, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafRuleAPi) GetListApi(c *gin.Context) {
|
|
var req request.WafRuleSearchReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
wafRules, total, _ := wafRuleService.GetListApi(req)
|
|
response.OkWithDetailed(response.PageResult{
|
|
List: wafRules,
|
|
Total: total,
|
|
PageIndex: req.PageIndex,
|
|
PageSize: req.PageSize,
|
|
}, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
func (w *WafRuleAPi) GetListByHostCodeApi(c *gin.Context) {
|
|
var req request.WafRuleSearchReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
wafRules, total, _ := wafRuleService.GetListByHostCodeApi(req)
|
|
response.OkWithDetailed(response.PageResult{
|
|
List: wafRules,
|
|
Total: total,
|
|
PageIndex: req.PageIndex,
|
|
PageSize: req.PageSize,
|
|
}, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafRuleAPi) DelRuleApi(c *gin.Context) {
|
|
var req request.WafRuleDelReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
wafRule := wafRuleService.GetDetailByCodeApi(req.CODE)
|
|
err = wafRuleService.DelRuleApi(req)
|
|
//TODO 通知引擎重新加载某个网站的规则信息
|
|
if err != nil && errors.Is(err, gorm.ErrRecordNotFound) {
|
|
response.FailWithMessage("请检测参数", c)
|
|
return
|
|
} else if err != nil {
|
|
response.FailWithMessage("发生错误", c)
|
|
} else {
|
|
w.NotifyWaf(wafRule.HostCode)
|
|
response.OkWithMessage("删除成功", c)
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
func (w *WafRuleAPi) ModifyRuleApi(c *gin.Context) {
|
|
ruleHelper := &utils.RuleHelper{}
|
|
var req request.WafRuleEditReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
var ruleTool = model.RuleTool{}
|
|
rule := wafRuleService.GetDetailByCodeApi(req.CODE)
|
|
|
|
if req.IsManualRule == 1 {
|
|
ruleCodeFormDRL, err := ruleHelper.ExtractRuleName(req.RuleJson)
|
|
if err != nil {
|
|
response.FailWithMessage(err.Error(), c)
|
|
}
|
|
if rule.RuleCode != ruleCodeFormDRL {
|
|
zlog.Debug(fmt.Sprintf("原始的规则码 %v， 需要替换的规则码 %v", rule.RuleCode, ruleCodeFormDRL))
|
|
beforeJson := req.RuleJson
|
|
req.RuleJson = strings.Replace(req.RuleJson, ruleCodeFormDRL, strings.Replace(rule.RuleCode, "-", "", -1), -1)
|
|
zlog.Debug(fmt.Sprintf("原始信息 %v 替换后信息 %v ", beforeJson, req.RuleJson))
|
|
|
|
}
|
|
}
|
|
ruleInfo, err := ruleTool.LoadRule(req.RuleJson)
|
|
if err != nil {
|
|
response.FailWithMessage("解析错误", c)
|
|
return
|
|
}
|
|
|
|
var ruleName = ruleInfo.RuleBase.RuleName //中文名
|
|
ruleInfo.RuleBase.RuleName = strings.Replace(rule.RuleCode, "-", "", -1)
|
|
var ruleContent = ruleTool.GenRuleInfo(ruleInfo, ruleName)
|
|
if req.IsManualRule == 1 {
|
|
ruleContent = ruleInfo.RuleContent
|
|
//检查规则是否合法
|
|
err = ruleHelper.CheckRuleAvailable(ruleContent)
|
|
if err != nil {
|
|
response.FailWithMessage("规则校验失败", c)
|
|
return
|
|
}
|
|
}
|
|
|
|
err = wafRuleService.ModifyApi(req, ruleName, ruleInfo.RuleBase.RuleDomainCode, ruleContent)
|
|
if err != nil {
|
|
response.FailWithMessage("编辑发生错误", c)
|
|
} else {
|
|
w.NotifyWaf(ruleInfo.RuleBase.RuleDomainCode)
|
|
response.OkWithMessage("编辑成功", c)
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
/*
|
|
*
|
|
通知到waf引擎实时生效
|
|
*/
|
|
func (w *WafRuleAPi) NotifyWaf(host_code string) {
|
|
var ruleconfig []model.Rules
|
|
global.GWAF_LOCAL_DB.Where("host_code = ? and rule_status<>999", host_code).Find(&ruleconfig)
|
|
var chanInfo = spec.ChanCommonHost{
|
|
HostCode: host_code,
|
|
Type: enums.ChanTypeRule,
|
|
Content: ruleconfig,
|
|
}
|
|
global.GWAF_CHAN_MSG <- chanInfo
|
|
}
|
|
|
|
// BatchDelRuleApi 批量删除规则
|
|
func (w *WafRuleAPi) BatchDelRuleApi(c *gin.Context) {
|
|
var req request.WafRuleBatchDelReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
// 先获取要删除的记录对应的HostCode，用于后续通知WAF引擎
|
|
hostCodes, err := wafRuleService.GetHostCodesByCodes(req.Codes)
|
|
if err != nil {
|
|
response.FailWithMessage("获取网站信息失败", c)
|
|
return
|
|
}
|
|
|
|
// 执行批量删除
|
|
err = wafRuleService.BatchDelApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("批量删除失败: "+err.Error(), c)
|
|
} else {
|
|
// 通知所有相关的网站更新配置
|
|
for _, hostCode := range hostCodes {
|
|
w.NotifyWaf(hostCode)
|
|
}
|
|
response.OkWithMessage(fmt.Sprintf("成功删除 %d 条记录", len(req.Codes)), c)
|
|
}
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
// DelAllRuleApi 删除指定网站的所有规则
|
|
func (w *WafRuleAPi) DelAllRuleApi(c *gin.Context) {
|
|
var req request.WafRuleDelAllReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
// 先获取要删除的记录对应的HostCode，用于后续通知WAF引擎
|
|
hostCodes, err := wafRuleService.GetHostCodes()
|
|
if err != nil {
|
|
response.FailWithMessage("获取网站信息失败", c)
|
|
return
|
|
}
|
|
|
|
err = wafRuleService.DelAllApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("全部删除失败: "+err.Error(), c)
|
|
} else {
|
|
// 通知所有相关的网站更新配置
|
|
for _, hostCode := range hostCodes {
|
|
w.NotifyWaf(hostCode)
|
|
}
|
|
if len(req.HostCode) > 0 {
|
|
response.OkWithMessage("成功删除该网站的所有规则", c)
|
|
} else {
|
|
response.OkWithMessage("成功删除所有规则", c)
|
|
}
|
|
}
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|