Method validateGeeTestForm

internal/waf/captcha_validator.go:759–852

(actionConfig *CaptchaAction, policyId int64, groupId int64, setId int64, originURL string, req requests.Request, writer http.ResponseWriter, useLocalFirewall bool)

}

func (this *CaptchaValidator) validateGeeTestForm(actionConfig *CaptchaAction, policyId int64, groupId int64, setId int64, originURL string, req requests.Request, writer http.ResponseWriter, useLocalFirewall bool) (allow bool) {
	var geeTestConfig = actionConfig.GeeTestConfig
	if geeTestConfig == nil || !geeTestConfig.IsOn {
		return
	}

	defer func() {
		if allow {
			// 清除计数
			CaptchaDeleteCacheKey(req)

			var life = CaptchaSeconds
			if actionConfig.Life > 0 {
				life = types.Int(actionConfig.Life)
			}

			// 加入到白名单
			SharedIPWhiteList.RecordIP(wafutils.ComposeIPType(setId, req), actionConfig.Scope, req.WAFServerId(), req.WAFRemoteIP(), time.Now().Unix()+int64(life), policyId, false, groupId, setId, "")

			// 记录到Cookie
			this.setCookie(writer, setId, life)

			writer.WriteHeader(http.StatusOK)
		} else {
			// 增加计数
			CaptchaIncreaseFails(req, actionConfig, policyId, groupId, setId, CaptchaPageCodeSubmit, useLocalFirewall)

			writer.WriteHeader(http.StatusBadRequest)
		}
	}()

	if req.WAFRaw().Body == nil || req.WAFRaw().ContentLength <= 0 || req.WAFRaw().ContentLength > 2048 {
		return false
	}

	data, err := io.ReadAll(req.WAFRaw().Body)
	if err != nil {
		return false
	}

	var m = maps.Map{}
	err = json.Unmarshal(data, &m)
	if err != nil {
		return false
	}

	const GeeTestAPIServer = "https://gcaptcha4.geetest.com"
	var GeeTestAPIURL = GeeTestAPIServer + "/validate" + "?captcha_id=" + geeTestConfig.CaptchaId

	var lotNumber = m.GetString("lot_number")

	var hash = hmac.New(sha256.New, []byte(geeTestConfig.CaptchaKey))
	hash.Write([]byte(lotNumber))
	var signToken = hex.EncodeToString(hash.Sum(nil))

	var query = url.Values{
		"lot_number":     []string{lotNumber},
		"captcha_output": []string{m.GetString("captcha_output")},