aiwaf 0.1.8.2__py3-none-any.whl → 0.1.8.4__py3-none-any.whl

aiwaf/middleware.py

@@ -22,10 +22,28 @@ def is_ip_exempted(ip):
 
 def is_exempt_path(path):
     path = path.lower()
+    
+    # Default login paths that should always be exempt
+    default_login_paths = [
+        "/admin/login/",
+        "/admin/",
+        "/login/",
+        "/accounts/login/",
+        "/auth/login/",
+        "/signin/",
+    ]
+    
+    # Check default login paths
+    for login_path in default_login_paths:
+        if path.startswith(login_path):
+            return True
+    
+    # Check user-configured exempt paths
     exempt_paths = getattr(settings, "AIWAF_EXEMPT_PATHS", [])
     for exempt in exempt_paths:
         if path == exempt or path.startswith(exempt.rstrip("/") + "/"):
             return True
+    
     return False
 
 MODEL_PATH = getattr(

aiwaf/trainer.py

@@ -34,6 +34,23 @@ IPExemption = apps.get_model("aiwaf", "IPExemption")
 
 def is_exempt_path(path: str) -> bool:
     path = path.lower()
+    
+    # Default login paths that should always be exempt
+    default_login_paths = [
+        "/admin/login/",
+        "/admin/",
+        "/login/",
+        "/accounts/login/",
+        "/auth/login/",
+        "/signin/",
+    ]
+    
+    # Check default login paths
+    for login_path in default_login_paths:
+        if path.startswith(login_path):
+            return True
+    
+    # Check user-configured exempt paths
     for exempt in getattr(settings, "AIWAF_EXEMPT_PATHS", []):
         if path == exempt or path.startswith(exempt.rstrip("/") + "/"):
             return True
@@ -116,6 +133,7 @@ def train() -> None:
 
     parsed = []
     ip_404   = defaultdict(int)
+    ip_404_login = defaultdict(int)  # Track 404s on login paths separately
     ip_times = defaultdict(list)
 
     for line in raw_lines:
@@ -125,15 +143,24 @@ def train() -> None:
         parsed.append(rec)
         ip_times[rec["ip"]].append(rec["timestamp"])
         if rec["status"] == "404":
-            ip_404[rec["ip"]] += 1
+            if is_exempt_path(rec["path"]):
+                ip_404_login[rec["ip"]] += 1  # Login path 404s
+            else:
+                ip_404[rec["ip"]] += 1  # Non-login path 404s
 
-    # 3. Optional immediate 404‐flood blocking
+    # 3. Optional immediate 404‐flood blocking (only for non-login paths)
     for ip, count in ip_404.items():
         if count >= 6:
-            BlacklistEntry.objects.get_or_create(
-                ip_address=ip,
-                defaults={"reason": "Excessive 404s (≥6)"}
-            )
+            # Only block if they have significant non-login 404s
+            login_404s = ip_404_login.get(ip, 0)
+            total_404s = count + login_404s
+            
+            # Don't block if majority of 404s are on login paths
+            if count > login_404s:  # More non-login 404s than login 404s
+                BlacklistEntry.objects.get_or_create(
+                    ip_address=ip,
+                    defaults={"reason": f"Excessive 404s (≥6 non-login, {count}/{total_404s})"}
+                )
 
     feature_dicts = []
     for r in parsed:
@@ -167,7 +194,10 @@ def train() -> None:
     df = pd.DataFrame(feature_dicts)
     feature_cols = [c for c in df.columns if c != "ip"]
     X = df[feature_cols].astype(float).values
-    model = IsolationForest(contamination=0.01, random_state=42)
+    model = IsolationForest(
+        contamination=getattr(settings, "AIWAF_AI_CONTAMINATION", 0.05), 
+        random_state=42
+    )
     model.fit(X)
 
     os.makedirs(os.path.dirname(MODEL_PATH), exist_ok=True)

{aiwaf-0.1.8.2.dist-info → aiwaf-0.1.8.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.8.2
+Version: 0.1.8.4
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba
@@ -89,7 +89,17 @@ aiwaf/
 **Exempt Path & IP Awareness**
 
 **Exempt Paths:**
-Set `AIWAF_EXEMPT_PATHS` in your Django `settings.py` (not in your code). Fully respects this setting across all modules — exempt paths are:
+AI‑WAF automatically exempts common login paths (`/admin/`, `/login/`, `/accounts/login/`, etc.) from all blocking mechanisms. You can add additional exempt paths in your Django `settings.py`:
+
+```python
+AIWAF_EXEMPT_PATHS = [
+    "/api/webhooks/",
+    "/health/",
+    "/special-endpoint/",
+]
+```
+
+All exempt paths are:
   - Skipped from keyword learning
   - Immune to AI blocking
   - Ignored in log training
@@ -164,6 +174,7 @@ AIWAF_ACCESS_LOG = "/var/log/nginx/access.log"
 ```python
 AIWAF_MODEL_PATH         = BASE_DIR / "aiwaf" / "resources" / "model.pkl"
 AIWAF_MIN_FORM_TIME      = 1.0        # minimum seconds between GET and POST
+AIWAF_AI_CONTAMINATION   = 0.05       # AI anomaly detection sensitivity (5%)
 AIWAF_RATE_WINDOW        = 10         # seconds
 AIWAF_RATE_MAX           = 20         # max requests per window
 AIWAF_RATE_FLOOD         = 10         # flood threshold

{aiwaf-0.1.8.2.dist-info → aiwaf-0.1.8.4.dist-info}/RECORD

@@ -1,10 +1,10 @@
 aiwaf/__init__.py,sha256=nQFpJ1YpX48snzLjEQCf8zD2YNh8v0b_kPTrXx8uBYc,46
 aiwaf/apps.py,sha256=nCez-Ptlv2kaEk5HenA8b1pATz1VfhrHP1344gwcY1A,142
 aiwaf/blacklist_manager.py,sha256=sM6uTH7zD6MOPGb0kzqV2aFut2vxKgft_UVeRJr7klw,392
-aiwaf/middleware.py,sha256=0tmOTErZBy524O6gtKKo4liWYiovAVMgxEk91L-ngZk,9246
+aiwaf/middleware.py,sha256=3zFW0hGPpNti2_6Vbamw8m8YiqcJ2jC5sygWNxJPsMU,9670
 aiwaf/models.py,sha256=XaG1pd_oZu3y-fw66u4wblGlWcUY9gvsTNKGD0kQk7Y,1672
 aiwaf/storage.py,sha256=bxCILzzvA1-q6nwclRE8WrfoRhe25H4VrsQDf0hl_lY,1903
-aiwaf/trainer.py,sha256=Xs_AuA7RCa1oyo5-lJYlnRYUiaq-HY2KXAviAdiGnzU,6217
+aiwaf/trainer.py,sha256=IUPCGVe0RT6sRHecBeNZuKop2d6APzXlvv3nirgKQLI,7319
 aiwaf/utils.py,sha256=RkEUWhhHy6tOk7V0UYv3cN4xhOR_7aBy9bjhwuV2cdA,1436
 aiwaf/management/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 aiwaf/management/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -14,8 +14,8 @@ aiwaf/management/commands/detect_and_train.py,sha256=-o-LZ7QZ5GeJPCekryox1DGXKMm
 aiwaf/resources/model.pkl,sha256=5t6h9BX8yoh2xct85MXOO60jdlWyg1APskUOW0jZE1Y,1288265
 aiwaf/templatetags/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 aiwaf/templatetags/aiwaf_tags.py,sha256=XXfb7Tl4DjU3Sc40GbqdaqOEtKTUKELBEk58u83wBNw,357
-aiwaf-0.1.8.2.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
-aiwaf-0.1.8.2.dist-info/METADATA,sha256=Q93RjqYRrVZ9PwQCHVF2LNgM5bvY1TZxnIgnbPV29-c,7178
-aiwaf-0.1.8.2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-aiwaf-0.1.8.2.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
-aiwaf-0.1.8.2.dist-info/RECORD,,
+aiwaf-0.1.8.4.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
+aiwaf-0.1.8.4.dist-info/METADATA,sha256=abO7KBH2-WR5UDKt_bawhvXohcIToLXKQm_J33uwjRY,7435
+aiwaf-0.1.8.4.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+aiwaf-0.1.8.4.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
+aiwaf-0.1.8.4.dist-info/RECORD,,