{"id":13620897,"url":"https://github.com/casbin/caswaf","last_synced_at":"2026-01-29T10:08:29.583Z","repository":{"id":52745520,"uuid":"91144427","full_name":"casbin/caswaf","owner":"casbin","description":"HTTP \u0026 OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo: https://door.caswaf.com","archived":false,"fork":false,"pushed_at":"2025-09-12T12:15:03.000Z","size":984,"stargazers_count":334,"open_issues_count":2,"forks_count":29,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-09-16T12:49:51.147Z","etag":null,"topics":["firewall","gateway","http","modsecurity","modsecurity-core-rule-set","oauth","proxy","waf","web-application-firewall"],"latest_commit_sha":null,"homepage":"https://caswaf.org","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/casbin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"casbin"}},"created_at":"2017-05-13T02:42:27.000Z","updated_at":"2025-09-12T12:12:30.000Z","dependencies_parsed_at":"2024-02-19T15:12:31.646Z","dependency_job_id":"81cda959-8a10-4d54-81c7-6206d3c60759","html_url":"https://github.com/casbin/caswaf","commit_stats":{"total_commits":222,"total_committers":14,"mean_commits":"15.857142857142858","dds":"0.24774774774774777","last_synced_commit":"8b6f4f779a971b13b3f2b22ccff9ef162e8aea45"},"previous_names":[],"tags_count":51,"template":false,"template_full_name":null,"purl":"pkg:github/casbin/caswaf","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/casbin%2Fcaswaf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/casbin%2Fcaswaf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/casbin%2Fcaswaf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/casbin%2Fcaswaf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/casbin","download_url":"https://codeload.github.com/casbin/caswaf/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/casbin%2Fcaswaf/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279000826,"owners_count":26082950,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["firewall","gateway","http","modsecurity","modsecurity-core-rule-set","oauth","proxy","waf","web-application-firewall"],"created_at":"2024-08-01T21:01:00.462Z","updated_at":"2026-01-29T10:08:29.575Z","avatar_url":"https://github.com/casbin.png","language":"Go","readme":"\u003ch1 align=\"center\" style=\"border-bottom: none;\"\u003e📦⚡️ CasWAF\u003c/h1\u003e\n\u003ch3 align=\"center\"\u003eAn open-source Web Application Firewall (WAF) software developed by Go and React.\u003c/h3\u003e\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"#badge\"\u003e\n    \u003cimg alt=\"semantic-release\" src=\"https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://hub.docker.com/r/casbin/caswaf\"\u003e\n    \u003cimg alt=\"docker pull casbin/caswaf\" src=\"https://img.shields.io/docker/pulls/casbin/caswaf.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/casbin/caswaf/releases/latest\"\u003e\n    \u003cimg alt=\"GitHub Release\" src=\"https://img.shields.io/github/v/release/casbin/caswaf.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://hub.docker.com/r/casbin/caswaf\"\u003e\n    \u003cimg alt=\"Docker Image Version (latest semver)\" src=\"https://img.shields.io/badge/Docker%20Hub-latest-brightgreen\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://goreportcard.com/report/github.com/casbin/caswaf\"\u003e\n    \u003cimg alt=\"Go Report Card\" src=\"https://goreportcard.com/badge/github.com/casbin/caswaf?style=flat-square\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/casbin/caswaf/blob/master/LICENSE\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/license/casbin/caswaf?style=flat-square\" alt=\"license\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/casbin/caswaf/issues\"\u003e\n    \u003cimg alt=\"GitHub issues\" src=\"https://img.shields.io/github/issues/casbin/caswaf?style=flat-square\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"#\"\u003e\n    \u003cimg alt=\"GitHub stars\" src=\"https://img.shields.io/github/stars/casbin/caswaf?style=flat-square\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/casbin/caswaf/network\"\u003e\n    \u003cimg alt=\"GitHub forks\" src=\"https://img.shields.io/github/forks/casbin/caswaf?style=flat-square\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n## Online demo\n\n- Read-only site: https://door.caswaf.com (any modification operation will fail)\n- Writable site: https://demo.caswaf.com (original data will be restored for every 5 minutes)\n\n## Documentation\n\nhttps://caswaf.org\n\n## Architecture\n\nCasWAF contains 2 parts:\n\n| Name     | Description                    | Language               | Source code                                      |\n|----------|--------------------------------|------------------------|--------------------------------------------------|\n| Frontend | Web frontend UI for CasWAF     | Javascript + React     | https://github.com/casbin/caswaf/tree/master/web |\n| Backend  | RESTful API backend for CAsWAF | Golang + Beego + MySQL | https://github.com/casbin/caswaf                 |\n\n## Installation\n\nCasWAF uses Casdoor to manage members. So you need to create an organization and an application for CasWAF in a Casdoor instance.\n\n### Deployment Options\n\n- **[Kubernetes Deployment](k8s/README.md)**: Deploy CasWAF on Kubernetes with complete manifests and guide\n- **Docker Compose**: Use the provided `docker-compose.yml` for quick local setup\n- **Manual Installation**: Build and run from source\n\n### Necessary configuration\n\n#### Get the code\n\n```shell\ngo get github.com/casdoor/casdoor\ngo get github.com/casbin/caswaf\n```\n\nor\n\n```shell\ngit clone https://github.com/casdoor/casdoor\ngit clone https://github.com/casbin/caswaf\n```\n\n#### Setup database\n\nCasWAF will store its users, nodes and topics information in a MySQL database named: `caswaf`, will create it if not existed. The DB connection string can be specified at: https://github.com/casbin/caswaf/blob/master/conf/app.conf\n\n```ini\ndataSourceName = root:123@tcp(localhost:3306)/\n```\n\nCasWAF uses XORM to connect to DB, so all DBs supported by XORM can also be used.\n\n#### Configure Casdoor\n\nAfter creating an organization and an application for CasWAF in a Casdoor, you need to update `clientID`, `clientSecret`, `casdoorOrganization` and `casdoorApplication` in app.conf.\n\n#### Run CasWAF\n\n- Configure and run CasWAF by yourself. If you want to learn more about caswaf.\n- Open browser: http://localhost:16001/\n\n### Optional configuration\n\n#### Setup your WAF to enable some third-party login platform\n\nCasWAF uses Casdoor to manage members. If you want to log in with oauth, you should see [casdoor oauth configuration](https://casdoor.org/docs/provider/oauth/overview).\n\n#### OSS, Mail, and SMS services\n\nCasWAF uses Casdoor to upload files to cloud storage, send Emails and send SMSs. See Casdoor for more details.\n\n## Contribute\n\nFor CasWAF, if you have any questions, you can open Issues, or you can also directly start Pull Requests(but we recommend opening issues first to communicate with the community).\n\n## License\n\n[Apache-2.0](https://github.com/caswaf/caswaf/blob/master/LICENSE)\n","funding_links":["https://github.com/sponsors/casbin"],"categories":["Go","\u003ca name=\"Go\"\u003e\u003c/a\u003eGo"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcasbin%2Fcaswaf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcasbin%2Fcaswaf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcasbin%2Fcaswaf/lists"}