actix-modsecurity 0.1.2

ModSecurity middleware service and library for Actix Web
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

use actix_modsecurity::{Middleware, ModSecurity};
use actix_web::test::{self, TestRequest};

mod common;

const RULES: &str = r#"
SecRuleEngine On

SecRule REQUEST_URI "@rx admin" "id:1,phase:1,deny,status:401"

SecRule REQUEST_HEADERS:X-Client-Port "@streq 22" \
    "id:'1234567',\
    log,\
    msg:'Blocking SSH port',\
    phase:1,\
    t:none,\
    status:403,\
    deny
"#;

#[actix_web::test]
async fn test_middleware() {
    common::setup();

    let mut security = ModSecurity::new();
    security.add_rules(RULES).expect("Failed to add rules");

    let mw: Middleware = security.into();
    let srv = test::init_service(actix_web::App::new().wrap(mw)).await;

    let req = TestRequest::with_uri("/").to_request();
    let res = test::call_service(&srv, req).await;
    assert_eq!(res.status().to_string(), "404 Not Found");

    let req = TestRequest::with_uri("/admin").to_request();
    let res = test::call_service(&srv, req).await;
    assert_eq!(res.status().to_string(), "401 Unauthorized");

    let req = TestRequest::with_uri("/")
        .insert_header(("X-Client-Port", 22))
        .to_request();
    let res = test::call_service(&srv, req).await;
    assert_eq!(res.status().to_string(), "403 Forbidden");
}