local detector = require('waf.detector')
local analyzer = require('waf.analyzer')
local filter = require('waf.filter')
local limits = require('waf.limits')
local config = require('waf.config')
local ban = require('waf.ban')
local log = require('utils.log')

local default_code = config.code
local duration = config.duration
local valid_ips = config.ips
local ban_add = ban.add
local ban_check = ban.check
local headers
local meta
local client_ip = ngx.var.remote_addr

local function answer(code)
	code = code or default_code
	return ngx.exit(444)
end

local function valid(ip)
	for k=1,#valid_ips do
		if valid_ips[k] == ip then return end
	end
	return false
end

log.name = 'waf'
log.level = 'trace'

if valid(client_ip) then return true end
if ban_check(client_ip) or ngx.var.is_bot == '1' then return answer() end

if not detector then 
	log.error('Не найден детектор') 
else
	headers = ngx.req.get_headers()
	meta = {
		method = ngx.var.request_method,
		uri = ngx.var.uri
	}
	local res,level = detector.check(headers,meta)
	if not res then 
		ban_add(client_ip, duration/level)
		if level==1 then return answer() end
	end
end

if not limits then 
	log.error('Не найден лимитизатор')	 
else
	local res,level = limits.check(meta,client_ip)
	if not res then 
		ban_add(client_ip, duration/level)
		if level==1 then return answer() end
	end	
end

if not analyzer then 
	log.error('Не найден анализатор')	 
else
	local res,level = analyzer.check()
	if not res then 
		ban_add(client_ip, duration/level)
		if level==1 then return answer() end
	end	
end

if not filter then 
	log.error('Не найден фильтр') 
else
	local res = filter.check()
	if not res then 
		ban_add(client_ip, duration)
		return answer()
	end	
end