2020-10-08 15:06:42 +08:00
|
|
|
package waf
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"bytes"
|
|
|
|
|
"encoding/base64"
|
2021-07-18 15:51:49 +08:00
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/utils"
|
|
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/utils/jsonutils"
|
2020-10-08 15:06:42 +08:00
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/waf/requests"
|
|
|
|
|
"github.com/dchest/captcha"
|
|
|
|
|
"github.com/iwind/TeaGo/logs"
|
2021-07-18 15:51:49 +08:00
|
|
|
"github.com/iwind/TeaGo/types"
|
2020-10-08 15:06:42 +08:00
|
|
|
"net/http"
|
2021-07-18 15:51:49 +08:00
|
|
|
"strconv"
|
|
|
|
|
"strings"
|
2020-10-08 15:06:42 +08:00
|
|
|
"time"
|
|
|
|
|
)
|
|
|
|
|
|
2021-07-18 15:51:49 +08:00
|
|
|
var captchaValidator = NewCaptchaValidator()
|
2020-10-08 15:06:42 +08:00
|
|
|
|
|
|
|
|
type CaptchaValidator struct {
|
|
|
|
|
}
|
|
|
|
|
|
2021-07-18 15:51:49 +08:00
|
|
|
func NewCaptchaValidator() *CaptchaValidator {
|
|
|
|
|
return &CaptchaValidator{}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (this *CaptchaValidator) Run(request requests.Request, writer http.ResponseWriter) {
|
|
|
|
|
var info = request.WAFRaw().URL.Query().Get("info")
|
|
|
|
|
if len(info) == 0 {
|
|
|
|
|
writer.WriteHeader(http.StatusBadRequest)
|
|
|
|
|
_, _ = writer.Write([]byte("invalid request"))
|
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
m, err := utils.SimpleDecryptMap(info)
|
|
|
|
|
if err != nil {
|
|
|
|
|
_, _ = writer.Write([]byte("invalid request"))
|
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
timestamp := m.GetInt64("timestamp")
|
|
|
|
|
if timestamp < time.Now().Unix()-600 { // 10分钟之后信息过期
|
|
|
|
|
http.Redirect(writer, request.WAFRaw(), m.GetString("url"), http.StatusTemporaryRedirect)
|
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
var actionConfig = &CaptchaAction{}
|
|
|
|
|
err = jsonutils.MapToObject(m.GetMap("action"), actionConfig)
|
|
|
|
|
if err != nil {
|
|
|
|
|
http.Redirect(writer, request.WAFRaw(), m.GetString("url"), http.StatusTemporaryRedirect)
|
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
var setId = m.GetInt64("setId")
|
|
|
|
|
var originURL = m.GetString("url")
|
|
|
|
|
|
|
|
|
|
if request.WAFRaw().Method == http.MethodPost && len(request.WAFRaw().FormValue("GOEDGE_WAF_CAPTCHA_ID")) > 0 {
|
2021-11-17 16:16:09 +08:00
|
|
|
this.validate(actionConfig, m.GetInt64("policyId"), m.GetInt64("groupId"), setId, originURL, request, writer)
|
2020-10-08 15:06:42 +08:00
|
|
|
} else {
|
2021-07-18 15:51:49 +08:00
|
|
|
this.show(actionConfig, request, writer)
|
2020-10-08 15:06:42 +08:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2021-07-18 15:51:49 +08:00
|
|
|
func (this *CaptchaValidator) show(actionConfig *CaptchaAction, request requests.Request, writer http.ResponseWriter) {
|
2020-10-08 15:06:42 +08:00
|
|
|
// show captcha
|
|
|
|
|
captchaId := captcha.NewLen(6)
|
|
|
|
|
buf := bytes.NewBuffer([]byte{})
|
|
|
|
|
err := captcha.WriteImage(buf, captchaId, 200, 100)
|
|
|
|
|
if err != nil {
|
|
|
|
|
logs.Error(err)
|
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
2021-07-18 15:51:49 +08:00
|
|
|
var lang = actionConfig.Language
|
|
|
|
|
if len(lang) == 0 {
|
|
|
|
|
acceptLanguage := request.WAFRaw().Header.Get("Accept-Language")
|
|
|
|
|
if len(acceptLanguage) > 0 {
|
|
|
|
|
langIndex := strings.Index(acceptLanguage, ",")
|
|
|
|
|
if langIndex > 0 {
|
|
|
|
|
lang = acceptLanguage[:langIndex]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
if len(lang) == 0 {
|
|
|
|
|
lang = "en-US"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
var msgTitle = ""
|
|
|
|
|
var msgPrompt = ""
|
|
|
|
|
var msgButtonTitle = ""
|
2021-12-02 12:08:59 +08:00
|
|
|
var msgRequestId = ""
|
2021-07-18 15:51:49 +08:00
|
|
|
|
|
|
|
|
switch lang {
|
|
|
|
|
case "en-US":
|
|
|
|
|
msgTitle = "Verify Yourself"
|
|
|
|
|
msgPrompt = "Input verify code above:"
|
|
|
|
|
msgButtonTitle = "Verify Yourself"
|
2021-12-02 12:08:59 +08:00
|
|
|
msgRequestId = "Request ID"
|
2021-07-18 15:51:49 +08:00
|
|
|
case "zh-CN":
|
|
|
|
|
msgTitle = "身份验证"
|
|
|
|
|
msgPrompt = "请输入上面的验证码"
|
|
|
|
|
msgButtonTitle = "提交验证"
|
2021-12-02 12:08:59 +08:00
|
|
|
msgRequestId = "请求ID"
|
2021-07-18 15:51:49 +08:00
|
|
|
default:
|
|
|
|
|
msgTitle = "Verify Yourself"
|
|
|
|
|
msgPrompt = "Input verify code above:"
|
|
|
|
|
msgButtonTitle = "Verify Yourself"
|
2021-12-02 12:08:59 +08:00
|
|
|
msgRequestId = "Request ID"
|
2021-07-18 15:51:49 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
writer.Header().Set("Content-Type", "text/html; charset=utf-8")
|
2020-10-08 15:06:42 +08:00
|
|
|
_, _ = writer.Write([]byte(`<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
2021-07-18 15:51:49 +08:00
|
|
|
<title>` + msgTitle + `</title>
|
|
|
|
|
<script type="text/javascript">
|
|
|
|
|
if (window.addEventListener != null) {
|
|
|
|
|
window.addEventListener("load", function () {
|
|
|
|
|
document.getElementById("GOEDGE_WAF_CAPTCHA_CODE").focus()
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
</script>
|
2021-12-02 12:08:59 +08:00
|
|
|
<style type="text/css">
|
|
|
|
|
form { width: 20em; margin: 0 auto; text-align: center; }
|
|
|
|
|
.input { font-size:16px;line-height:24px; letter-spacing: 15px; padding-left: 10px; width: 140px; }
|
|
|
|
|
address { margin-top: 1em; padding-top: 0.5em; border-top: 1px #ccc solid; text-align: center; }
|
|
|
|
|
</style>
|
2020-10-08 15:06:42 +08:00
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<form method="POST">
|
2021-07-18 15:51:49 +08:00
|
|
|
<input type="hidden" name="GOEDGE_WAF_CAPTCHA_ID" value="` + captchaId + `"/>
|
2020-10-08 15:06:42 +08:00
|
|
|
<img src="data:image/png;base64, ` + base64.StdEncoding.EncodeToString(buf.Bytes()) + `"/>` + `
|
|
|
|
|
<div>
|
2021-07-18 15:51:49 +08:00
|
|
|
<p>` + msgPrompt + `</p>
|
2021-12-02 12:08:59 +08:00
|
|
|
<input type="text" name="GOEDGE_WAF_CAPTCHA_CODE" id="GOEDGE_WAF_CAPTCHA_CODE" maxlength="6" autocomplete="off" z-index="1" class="input"/>
|
2020-10-08 15:06:42 +08:00
|
|
|
</div>
|
|
|
|
|
<div>
|
2021-07-18 15:51:49 +08:00
|
|
|
<button type="submit" style="line-height:24px;margin-top:10px">` + msgButtonTitle + `</button>
|
2020-10-08 15:06:42 +08:00
|
|
|
</div>
|
|
|
|
|
</form>
|
2021-12-02 12:08:59 +08:00
|
|
|
<address>` + msgRequestId + `: ` + request.Format("${requestId}") + `</address>
|
2020-10-08 15:06:42 +08:00
|
|
|
</body>
|
|
|
|
|
</html>`))
|
|
|
|
|
}
|
|
|
|
|
|
2021-11-17 16:16:09 +08:00
|
|
|
func (this *CaptchaValidator) validate(actionConfig *CaptchaAction, policyId int64, groupId int64, setId int64, originURL string, request requests.Request, writer http.ResponseWriter) (allow bool) {
|
2021-07-18 15:51:49 +08:00
|
|
|
captchaId := request.WAFRaw().FormValue("GOEDGE_WAF_CAPTCHA_ID")
|
2020-10-08 15:06:42 +08:00
|
|
|
if len(captchaId) > 0 {
|
2021-07-18 15:51:49 +08:00
|
|
|
captchaCode := request.WAFRaw().FormValue("GOEDGE_WAF_CAPTCHA_CODE")
|
2020-10-08 15:06:42 +08:00
|
|
|
if captcha.VerifyString(captchaId, captchaCode) {
|
2021-07-18 15:51:49 +08:00
|
|
|
var life = CaptchaSeconds
|
|
|
|
|
if actionConfig.Life > 0 {
|
|
|
|
|
life = types.Int(actionConfig.Life)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 加入到白名单
|
2022-01-10 19:54:10 +08:00
|
|
|
SharedIPWhiteList.RecordIP("set:"+strconv.FormatInt(setId, 10), actionConfig.Scope, request.WAFServerId(), request.WAFRemoteIP(), time.Now().Unix()+int64(life), policyId, false, groupId, setId, "")
|
2021-07-18 15:51:49 +08:00
|
|
|
|
|
|
|
|
http.Redirect(writer, request.WAFRaw(), originURL, http.StatusSeeOther)
|
2020-10-08 15:06:42 +08:00
|
|
|
|
|
|
|
|
return false
|
|
|
|
|
} else {
|
2021-07-18 15:51:49 +08:00
|
|
|
http.Redirect(writer, request.WAFRaw(), request.WAFRaw().URL.String(), http.StatusSeeOther)
|
2020-10-08 15:06:42 +08:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return true
|
|
|
|
|
}
|
