Implement X-Callback-Secret for validating API requests

2026-04-11 13:47:05 +02:00 · 2025-12-15 23:16:48 +01:00
parent c57322e38d
commit 53bb0eb79d
14 changed files with 159 additions and 16 deletions
--- a/internal/fail2ban/connector_agent.go
+++ b/internal/fail2ban/connector_agent.go
@@ -61,9 +61,10 @@ func (ac *AgentConnector) Server() config.Fail2banServer {
 }

 func (ac *AgentConnector) ensureAction(ctx context.Context) error {
+	settings := config.GetSettings()
 	payload := map[string]any{
 		"name":        "ui-custom-action",
-		"config":      config.BuildFail2banActionConfig(config.GetCallbackURL(), ac.server.ID),
+		"config":      config.BuildFail2banActionConfig(config.GetCallbackURL(), ac.server.ID, settings.CallbackSecret),
 		"callbackUrl": config.GetCallbackURL(),
 		"setDefault":  true,
 	}