WithErrorCallback function is not able to access the original request

[tobiaschielens]

We want to create an overview of blocked requests. The database for this overview is located on another server. We want to log headers and data to that second server.

With the WithErrorCallback(handleErrorCallback) we can get the reason why the request was blocked but we would also like to be able to forward more details to our second server.

How would we be able to achieve this?

[jcchavezs]

WithErrorCallback can now also access the context.Context of the request. You can propagate details there. See

coraza/internal/corazarules/rule_match.go

Lines 152 to 179 in 681787e

	// Context returns the context associated with the transaction
	// This is useful for logging purposes where you want to add
	// additional information to the log.
	// The context can be easily retrieved in the logger using
	// an ancillary interface:
	// ```
	//
	// type Contexter interface {
	// Context() context.Context
	// }
	//
	// ```
	// and then using it like this:
	//
	// ```
	//
	// func errorLogCb(mr types.MatchedRule) {
	// ctx := context.Background()
	// if ctxer, ok := mr.(Contexter); ok {
	// ctx = ctxer.Context()
	// }
	// logger.Context(ctx).Error().Msg("...")
	// }
	//
	// ```
	func (mr *MatchedRule) Context() context.Context {
	return mr.Context_
	}

[tobiaschielens]

We also want to access the headers and body of the original request. The context only gives us the matched rule as well.

[jcchavezs]

Since we inherit the context from the request you can write a middleware to put the request into the context in a custom middleware before the coraza middleware. We had a few attempts to allow hooks that could achieve similar stuff

• feat(experimental): adds transaction started and transaction closed hooks to the middleware. #987
• feat(middleware): v4 experimental middleware #986

However we did not proceed because we did not have serious request. One step towards that would be that you build that custom middleware and proof the value of such feature.