Fijxu/lua-cs-bouncer-mcaptcha
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

exit with ngx.DECLINED when the request is allowed (#62)

Browse source
This commit is contained in:
blotus 2024-02-06 12:05:35 +01:00 committed by GitHub
parent 0e4983a1a3
commit 26e9c0c19c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
lib/crowdsec.lua
View file

@ -569,11 +569,11 @@ end
function csmod.Allow(ip) function csmod.Allow(ip)
if runtime.conf["ENABLED"] == "false" then if runtime.conf["ENABLED"] == "false" then
return "Disabled", nil ngx.exit(ngx.DECLINED)
end end
if ngx.req.is_internal() then if ngx.req.is_internal() then
return ngx.exit(ngx.DECLINED)
end end
local remediationSource = flag.BOUNCER_SOURCE local remediationSource = flag.BOUNCER_SOURCE
@ -583,7 +583,7 @@ function csmod.Allow(ip)
for k, v in pairs(runtime.conf["EXCLUDE_LOCATION"]) do for k, v in pairs(runtime.conf["EXCLUDE_LOCATION"]) do
if ngx.var.uri == v then if ngx.var.uri == v then
ngx.log(ngx.ERR, "whitelisted location: " .. v) ngx.log(ngx.ERR, "whitelisted location: " .. v)
return ngx.exit(ngx.DECLINED)
end end
local uri_to_check = v local uri_to_check = v
if utils.ends_with(uri_to_check, "/") == false then if utils.ends_with(uri_to_check, "/") == false then
@ -667,8 +667,7 @@ function csmod.Allow(ip)
end end
-- captcha is valid, we redirect the IP to its previous URI but in GET method -- captcha is valid, we redirect the IP to its previous URI but in GET method
ngx.req.set_method(ngx.HTTP_GET) ngx.req.set_method(ngx.HTTP_GET)
ngx.redirect(previous_uri) return ngx.redirect(previous_uri)
return
else else
ngx.log(ngx.ALERT, "Invalid captcha from " .. ip) ngx.log(ngx.ALERT, "Invalid captcha from " .. ip)
end end
@ -708,9 +707,11 @@ function csmod.Allow(ip)
ngx.log(ngx.ERR, "Lua shared dict (crowdsec cache) is full, please increase dict size in config") ngx.log(ngx.ERR, "Lua shared dict (crowdsec cache) is full, please increase dict size in config")
end end
ngx.log(ngx.ALERT, "[Crowdsec] denied '" .. ip .. "' with '"..remediation.."'") ngx.log(ngx.ALERT, "[Crowdsec] denied '" .. ip .. "' with '"..remediation.."'")
return
end end
end end
end end
ngx.exit(ngx.DECLINED)
end end