aiwaf 0.1.8.3__tar.gz → 0.1.8.4__tar.gz

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.8.3
+Version: 0.1.8.4
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba
@@ -89,7 +89,17 @@ aiwaf/
 **Exempt Path & IP Awareness**
 
 **Exempt Paths:**
-Set `AIWAF_EXEMPT_PATHS` in your Django `settings.py` (not in your code). Fully respects this setting across all modules — exempt paths are:
+AI‑WAF automatically exempts common login paths (`/admin/`, `/login/`, `/accounts/login/`, etc.) from all blocking mechanisms. You can add additional exempt paths in your Django `settings.py`:
+
+```python
+AIWAF_EXEMPT_PATHS = [
+    "/api/webhooks/",
+    "/health/",
+    "/special-endpoint/",
+]
+```
+
+All exempt paths are:
   - Skipped from keyword learning
   - Immune to AI blocking
   - Ignored in log training

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/README.md

@@ -68,7 +68,17 @@ aiwaf/
 **Exempt Path & IP Awareness**
 
 **Exempt Paths:**
-Set `AIWAF_EXEMPT_PATHS` in your Django `settings.py` (not in your code). Fully respects this setting across all modules — exempt paths are:
+AI‑WAF automatically exempts common login paths (`/admin/`, `/login/`, `/accounts/login/`, etc.) from all blocking mechanisms. You can add additional exempt paths in your Django `settings.py`:
+
+```python
+AIWAF_EXEMPT_PATHS = [
+    "/api/webhooks/",
+    "/health/",
+    "/special-endpoint/",
+]
+```
+
+All exempt paths are:
   - Skipped from keyword learning
   - Immune to AI blocking
   - Ignored in log training

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/aiwaf/middleware.py

@@ -22,10 +22,28 @@ def is_ip_exempted(ip):
 
 def is_exempt_path(path):
     path = path.lower()
+    
+    # Default login paths that should always be exempt
+    default_login_paths = [
+        "/admin/login/",
+        "/admin/",
+        "/login/",
+        "/accounts/login/",
+        "/auth/login/",
+        "/signin/",
+    ]
+    
+    # Check default login paths
+    for login_path in default_login_paths:
+        if path.startswith(login_path):
+            return True
+    
+    # Check user-configured exempt paths
     exempt_paths = getattr(settings, "AIWAF_EXEMPT_PATHS", [])
     for exempt in exempt_paths:
         if path == exempt or path.startswith(exempt.rstrip("/") + "/"):
             return True
+    
     return False
 
 MODEL_PATH = getattr(

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/aiwaf/trainer.py

@@ -34,6 +34,23 @@ IPExemption = apps.get_model("aiwaf", "IPExemption")
 
 def is_exempt_path(path: str) -> bool:
     path = path.lower()
+    
+    # Default login paths that should always be exempt
+    default_login_paths = [
+        "/admin/login/",
+        "/admin/",
+        "/login/",
+        "/accounts/login/",
+        "/auth/login/",
+        "/signin/",
+    ]
+    
+    # Check default login paths
+    for login_path in default_login_paths:
+        if path.startswith(login_path):
+            return True
+    
+    # Check user-configured exempt paths
     for exempt in getattr(settings, "AIWAF_EXEMPT_PATHS", []):
         if path == exempt or path.startswith(exempt.rstrip("/") + "/"):
             return True
@@ -116,6 +133,7 @@ def train() -> None:
 
     parsed = []
     ip_404   = defaultdict(int)
+    ip_404_login = defaultdict(int)  # Track 404s on login paths separately
     ip_times = defaultdict(list)
 
     for line in raw_lines:
@@ -125,15 +143,24 @@ def train() -> None:
         parsed.append(rec)
         ip_times[rec["ip"]].append(rec["timestamp"])
         if rec["status"] == "404":
-            ip_404[rec["ip"]] += 1
+            if is_exempt_path(rec["path"]):
+                ip_404_login[rec["ip"]] += 1  # Login path 404s
+            else:
+                ip_404[rec["ip"]] += 1  # Non-login path 404s
 
-    # 3. Optional immediate 404‐flood blocking
+    # 3. Optional immediate 404‐flood blocking (only for non-login paths)
     for ip, count in ip_404.items():
         if count >= 6:
-            BlacklistEntry.objects.get_or_create(
-                ip_address=ip,
-                defaults={"reason": "Excessive 404s (≥6)"}
-            )
+            # Only block if they have significant non-login 404s
+            login_404s = ip_404_login.get(ip, 0)
+            total_404s = count + login_404s
+            
+            # Don't block if majority of 404s are on login paths
+            if count > login_404s:  # More non-login 404s than login 404s
+                BlacklistEntry.objects.get_or_create(
+                    ip_address=ip,
+                    defaults={"reason": f"Excessive 404s (≥6 non-login, {count}/{total_404s})"}
+                )
 
     feature_dicts = []
     for r in parsed:

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/aiwaf.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.8.3
+Version: 0.1.8.4
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba
@@ -89,7 +89,17 @@ aiwaf/
 **Exempt Path & IP Awareness**
 
 **Exempt Paths:**
-Set `AIWAF_EXEMPT_PATHS` in your Django `settings.py` (not in your code). Fully respects this setting across all modules — exempt paths are:
+AI‑WAF automatically exempts common login paths (`/admin/`, `/login/`, `/accounts/login/`, etc.) from all blocking mechanisms. You can add additional exempt paths in your Django `settings.py`:
+
+```python
+AIWAF_EXEMPT_PATHS = [
+    "/api/webhooks/",
+    "/health/",
+    "/special-endpoint/",
+]
+```
+
+All exempt paths are:
   - Skipped from keyword learning
   - Immune to AI blocking
   - Ignored in log training

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "aiwaf"
-version = "0.1.8.3"
+version = "0.1.8.4"
 description = "AI-powered Web Application Firewall"
 readme = "README.md"
 requires-python = ">=3.8"

{aiwaf-0.1.8.3 → aiwaf-0.1.8.4}/setup.py

@@ -9,7 +9,7 @@ long_description = (HERE / "README.md").read_text(encoding="utf-8")
 
 setup(
     name="aiwaf",
-    version="0.1.8.3",
+    version="0.1.8.4",
     description="AI‑driven, self‑learning Web Application Firewall for Django",
     long_description=long_description,
     long_description_content_type="text/markdown",