howler-sentinel-plugin 0.1.0.dev11__py3-none-any.whl → 0.1.0.dev14__py3-none-any.whl

{howler_sentinel_plugin-0.1.0.dev11.dist-info → howler_sentinel_plugin-0.1.0.dev14.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: howler-sentinel-plugin
-Version: 0.1.0.dev11
+Version: 0.1.0.dev14
 Summary: A howler plugin for integration with Microsoft's Sentinel API
 License: MIT
 Author: CCCS

{howler_sentinel_plugin-0.1.0.dev11.dist-info → howler_sentinel_plugin-0.1.0.dev14.dist-info}/RECORD

@@ -2,9 +2,9 @@ sentinel/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 sentinel/odm/hit.py,sha256=hAuO2ONMK3Ml8Xu6E7tHrmZ7M6HG5tT38RD9ZxwY254,666
 sentinel/odm/models/sentinel.py,sha256=XT3XdT92uoCV5vmY9dT1jmcxRyuu9vp1gE8AwZdKBIc,337
 sentinel/routes/__init__.py,sha256=JYmKRwIfEsiPos1XuMQ2mlGDbxk6TN_cVEM0K_RNze4,130
-sentinel/routes/ingest.py,sha256=W5YcY2Es7WrOsaABOEMDPVe-4UkMw43mjI7h91nRTTQ,678
-howler_sentinel_plugin-0.1.0.dev11.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
-howler_sentinel_plugin-0.1.0.dev11.dist-info/METADATA,sha256=ZNWZ5Rl1oyA1G3rfailXoItqeCqLHZv33Juxds57nEI,694
-howler_sentinel_plugin-0.1.0.dev11.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
-howler_sentinel_plugin-0.1.0.dev11.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
-howler_sentinel_plugin-0.1.0.dev11.dist-info/RECORD,,
+sentinel/routes/ingest.py,sha256=P6jgTJmuCLrF3_mrZwzm7Fn2k4TNJCmYOte3hIKT0js,1069
+howler_sentinel_plugin-0.1.0.dev14.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
+howler_sentinel_plugin-0.1.0.dev14.dist-info/METADATA,sha256=ACM6cCUGCWsH-5E9QvamOgNk5rkGLzscIWT_4Er80Tw,694
+howler_sentinel_plugin-0.1.0.dev14.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
+howler_sentinel_plugin-0.1.0.dev14.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
+howler_sentinel_plugin-0.1.0.dev14.dist-info/RECORD,,

sentinel/routes/ingest.py

@@ -1,5 +1,8 @@
+import os
+import re
+
 from flask import request
-from howler.api import make_subapi_blueprint, ok
+from howler.api import make_subapi_blueprint, ok, unauthorized
 from howler.common.logging import get_logger
 from howler.common.swagger import generate_swagger_docs
 
@@ -9,6 +12,8 @@ sentinel_api._doc = "Interact with spellbook"
 
 logger = get_logger(__file__)
 
+SECRET = os.environ["SENTINEL_LINK_KEY"]
+
 
 @generate_swagger_docs()
 @sentinel_api.route("/ingest", methods=["POST"])
@@ -23,6 +28,12 @@ def ingest_alert(**kwargs):
 
     Result Example:
     """
+    if apikey := request.headers.get("Authorization", "Basic ", type=str).split(" ")[1]:
+        logger.info("Recieved authorization header with value %s", re.sub(r"^(.{3}).+(.{3})$", r"\1...\2", apikey))
+
+        if apikey != SECRET:
+            return unauthorized(err="API Key does not match expected value.")
+
     sentinel_alert = request.json
 
     logger.info("Sentinel Alert:\n%s", sentinel_alert)