Fingerprint Deny - Azion Firewall Function

00-fingerprint-deny.js

addEventListener("firewall", (event) => {
  const { headers, metadata } = event.args.log || { headers: [], metadata: [] };
  const fingerprints = event.args.fingerprints || [];
  const { server_fingerprint } = event.request.metadata;

  const getPropertiesTolLog = (obj, proptertiesList) =>
    proptertiesList.reduce((acc, prop) => {
      if (obj.hasOwnProperty(prop)) {
        acc[prop] = obj[prop];
      }
      return acc;
    }, {});

  if (headers.length > 0) {
    const headersToLog = getPropertiesTolLog(event.request.headers, headers);
    console.log("Headers", headersToLog);
  }

  if (metadata.length > 0) {
    const metadataToLog = getPropertiesTolLog(event.request.metadata, metadata);
    console.log("Metadata", metadataToLog);
  }

  if (
    fingerprints &&
    Array.isArray(event.args.fingerprints) &&
    fingerprints.some((fingerprint) => fingerprint === server_fingerprint)
  ) {
    console.log("Fingerprint matched, denying", server_fingerprint);
    event.deny(); // Bloqueia a solicitação
    return;
  }

  event.continue(); // Permite a solicitação
});

10-arguments.json

{
  "fingerprints": [],
  "log": {
    "headers": [],
    "metadata": [
      "server_fingerprint"
    ]
  }
}