For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ChrisThuys's avatar
ChrisThuys
Icon for Altocumulus rankAltocumulus
Feb 13, 2023
Solved

AWAF Path Parameters with OPENAPI json file

Hi,  Iam securing a API with a JSON OPENAPI file  it mostly works fine however I have two positional parameters used in one url that seems to mask the following paths "/dqm/v1/projects/{customerId}/{...
advanced waf
asm
openapi
security
  • ChrisThuys's avatar
    ChrisThuys
    Feb 21, 2023

    The resolution to this issue is to use the WildCards Order TAB to set the order the URLS should be processed.

     

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Feb 14, 2023

Good question! Never needed to do positional parameters, so I am also wondering.

 

Have you tried making manual policy with positional parameters and then to export it in JSON to see how it looks and if you can then use this in the OPENAPI/SWAGGER file as to see if it is supported (as a note your file is YAML not Json but that is just the look)  https://support.f5.com/csp/article/K52644614

 

F5 XC/distributed cloud has SWAGGER/OPENAPI discovery but that can't be done with on-prem appliance đŸ˜¯

 

https://community.f5.com/t5/technical-articles/api-discovery-and-auto-generation-of-swagger-schema/ta-p/278614