Validate Token for /backend/bugs

eclipse · May 20, 2020 · 072e82c · 072e82c
1 parent 7a648f8
commit 072e82c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/docker/.env.sample b/docker/.env.sample
@@ -15,6 +15,9 @@ HAPROXY_STATS_PASSWORD=changeme
 FRONTEND_BUGS_USER=vulas
 FRONTEND_BUGS_PASSWORD=changeme
 
+# Token for updating(PUT) or creating(POST) bugs
+BACKEND_BUGS_TOKEN=FD262258-9E0E-494F-AB98-10352914D7A6
+
 # *** OPTIONAL SETTINGS ***
 # Jira (optional)
 JIRA_USER=

diff --git a/docker/haproxy/conf/haproxy.cfg b/docker/haproxy/conf/haproxy.cfg
@@ -30,6 +30,12 @@ frontend http-in
     compression algo gzip
 
     acl is_blue  dst_port 8080 
+
+    acl valid_token req.hdr(X-Vulas-Client-Token) -m str "${BACKEND_BUGS_TOKEN}"
+    acl valid_http_method method POST PUT
+    acl valid_path path -m  sub /backend/bugs
+    http-request deny if valid_path valid_http_method !valid_token
+
     acl is_backend path_beg -i /backend
     acl is_cia path_beg -i /cia
     acl is_bugs_admin path_beg -i /bugs