查询额外插件库列表¶

1. 接口描述¶

接口请求路径：POST /prod-api/waf/wafv3/plugin/library/describePluginLibrary

describePluginLibrary 用于分页查询指定策略组（wafId）可用的额外插件（规则排除集、反机器人等）。批量启用/关闭见更新额外插件状态。

Token 获取方式见密钥鉴权。

2. 输入参数¶

以下请求参数列表仅列出了接口请求参数和部分公共参数，完整公共参数列表见公共请求参数。

参数名称	必选	类型	描述
pageNum	是	Integer	当前页数示例值：`1`
pageSize	是	Integer	每页显示条目个数示例值：`50`
wafId	是	Long	策略组 ID 示例值：`22`
searchHeader	否	Object	筛选条件；不筛选时可传 `{}`
searchHeader.recommendSite	否	String	推荐站点类型编码，支持以下值： `common`：通用 `portal_website`：门户/官网 `forum_community`：论坛/社区 `blog`：博客 `mall`：商城示例值：`common`
params	否	Object	扩展参数，一般传 `{}`

3. 示例¶

示例1 分页查询额外插件¶

输入示例¶

{
  "pageNum": 1,
  "pageSize": 50,
  "wafId": 22,
  "searchHeader": {},
  "params": {}
}

代码调用¶

请将 {登录域名}、token 替换为实际值。

JavaGo

import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.ContentType;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;

public class DescribePluginLibraryTest {

    public static void main(String[] args) throws Exception {
        String url = "https://{登录域名}/prod-api/waf/wafv3/plugin/library/describePluginLibrary";
        String token = "eyJhbGciOiJIUzUxMiJ9.xxxxxx";

        String requestBody = "{"
                + "\"pageNum\":1,"
                + "\"pageSize\":50,"
                + "\"wafId\":22,"
                + "\"searchHeader\":{},"
                + "\"params\":{}"
                + "}";

        try (CloseableHttpClient httpClient = HttpClients.createDefault()) {
            HttpPost httpPost = new HttpPost(url);
            httpPost.setHeader("Authorization", "Bearer " + token);
            httpPost.setEntity(new StringEntity(requestBody, ContentType.APPLICATION_JSON));

            try (CloseableHttpResponse response = httpClient.execute(httpPost)) {
                int statusCode = response.getStatusLine().getStatusCode();
                String body = EntityUtils.toString(response.getEntity(), "UTF-8");
                System.out.println("Status Code: " + statusCode);
                System.out.println("Body: " + body);
            }
        }
    }
}

package main

import (
    "bytes"
    "fmt"
    "io"
    "net/http"
)

func main() {
    url := "https://{登录域名}/prod-api/waf/wafv3/plugin/library/describePluginLibrary"
    token := "eyJhbGciOiJIUzUxMiJ9.xxxxxx"

    requestBody := []byte(`{
  "pageNum": 1,
  "pageSize": 50,
  "wafId": 22,
  "searchHeader": {},
  "params": {}
}`)

    req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(requestBody))
    if err != nil {
        panic(err)
    }
    req.Header.Set("Authorization", "Bearer "+token)
    req.Header.Set("Content-Type", "application/json")

    resp, err := http.DefaultClient.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    body, err := io.ReadAll(resp.Body)
    if err != nil {
        panic(err)
    }
    fmt.Println("Status Code:", resp.StatusCode)
    fmt.Println("Body:", string(body))
}

输出示例¶

{
  "total": 10,
  "rows": [
    {
      "status": "ON",
      "pluginCode": "fake-bot",
      "pluginName": "过滤伪造机器人",
      "pluginMessage": "旨在拦截伪造知名用户代理（User-Agent）进行HTTP请求的机器人和冒充者",
      "recommendSite": "common,portal_website,forum_community,blog,mall"
    },
    {
      "status": "OFF",
      "pluginCode": "wordpress-rule-exclusions",
      "pluginName": "WordPress 规则排除",
      "pluginMessage": "针对 WordPress CMS 的规则排除项，可与 OWASP CRS 协同运行",
      "recommendSite": "common,portal_website,forum_community,blog,mall"
    }
  ],
  "code": 200,
  "msg": "成功"
}

4. 输出参数¶

参数名称	类型	描述
code	Integer	状态码。示例值：`200`
msg	String	提示信息。示例值：`成功`
total	Integer	符合条件的总条数。示例值：`10`
rows	Array	额外插件列表
rows[].status	String	当前 `wafId` 下插件状态，支持以下值： `ON`：已启用 `OFF`：未启用示例值：`ON`
rows[].pluginCode	String	插件编码。示例值：`fake-bot`
rows[].pluginName	String	插件名称。示例值：`过滤伪造机器人`
rows[].pluginMessage	String	功能说明
rows[].recommendSite	String	推荐站点类型，多个用英文逗号分隔。示例值：`common,blog,mall`

5. 错误码¶

HTTP 状态码 / 业务提示	描述
200	成功
401	未鉴权或 Token 无效
403	无权限
查询失败，无效的wafId	`wafId` 不存在或不属于当前账号
wafId不能为空	未传 `wafId`