API Security - API Firewall

This video is aimed at creating awareness of the need for API Security.

Links:
1. Install and Run the Demo App
pip install connexion[swagger-ui]
cd /tmp
git clone https://github.com/zalando/connexion
cd /tmp/connexion/examples/openapi3/methodresolver
ls -la
cat app.py
python3 app.py

2. Pull the Firewall Docker image and build a Container
docker pull wallarm/api-firewall
docker run -d -v /tmp/connexion/examples/openapi3/methodresolver/openapi/:/tmp -e APIFW_SERVER_URL=http://192.168.8.120:9090/v1.0/ -e APIFW_API_SPECS=/tmp/pets-api.yaml -e APIFW_REQUEST_VALIDATION=BLOCK -e APIFW_RESPONSE_VALIDATION=BLOCK -p 8282:8282 wallarm/api-firewall

docker container ls or docker ps
docker logs container ID

NB: Change the IP address to reflect your environment.

3. Test the Firewall
Start the app in the background
{cd /tmp/connexion-master/examples/openapi3/methodresolver}
{nohup python3 app.py}

Find the api specification file
{find / -name pets-api.yaml} and view specifications

Test API on physical host {another SSH session} – Make a put request with some data
curl -X PUT -H 'content-type: application/json' -d '{"name":"homyak-2", "tag":"aa"}' http://127.0.0.1:9090/v1.0/pets/3

Observer the result and attempt a malicious request and observe the response
curl -X PUT -H 'content-type: application/json' -d '{"name":223, "tag":"aa"}' http://178.79.152.114:8282/v1.0/pets/3

View the container logs for Firewall actions {docker logs container ID}