AuditFailure.cs

using System.Collections.Generic;
using System.Threading.Tasks;
using System.Xml;
using Waher.Networking.HTTP.Interfaces;
using Waher.Runtime.IO;
using Waher.Security.LoginMonitor;
 
namespace Waher.Security.WAF.Model.Actions
{
    public class AuditFailure : WafAuditAction
    {
        public AuditFailure()
            : base()
        {
        }
 
        public AuditFailure(XmlElement Xml, WafAction Parent, WebApplicationFirewall Document)
            : base(Xml, Parent, Document)
        {
        }
 
        public override string LocalName => nameof(AuditFailure);
 
        public override WafAction Create(XmlElement Xml, WafAction Parent, WebApplicationFirewall Document) => new AuditFailure(Xml, Parent, Document);
 
        public override async Task<WafResult?> Review(ProcessingState State)
        {
            string Message = await this.message.EvaluateAsync(State.Variables, string.Empty);
            string UserName = await this.userName.EvaluateAsync(State.Variables, string.Empty);
            string Protocol = await this.protocol.EvaluateAsync(State.Variables, "HTTP");
            KeyValuePair<string, object>[] Tags = await this.EvaluateTags(State);
 
            LoginAuditor.Fail(Message, UserName, 
                State.Request.RemoteEndPoint.RemovePortNumber(), 
                Protocol, Tags);
 
            return null;
        }
    }
}