Class OwaspScanEndpoints
- Namespace
- Kuestenlogik.Bowire.Security.Scanner
- Assembly
- Kuestenlogik.Bowire.Security.Scanner.dll
Workbench-side surface for the OWASP API Top 10 suite — auto-discovered by
Core at MapBowire() time via IBowireEndpointContribution.
Lets the Security rail render the ten entries and run the suite against a
target without shelling out to bowire scan.
public sealed class OwaspScanEndpoints : IBowireEndpointContribution
- Inheritance
-
OwaspScanEndpoints
- Implements
- Inherited Members
Remarks
GET {base}/api/security/owasp-catalog— the ten entries as static metadata (id / title / reference), so the rail can list them even before a scan.POST {base}/api/security/owasp-scan— runs the built-in passive checks + the dedicated per-entry probes against a target and returns the per-entry roll-up (status + findings).
Constructors
OwaspScanEndpoints()
public OwaspScanEndpoints()
Methods
MapEndpoints(IEndpointRouteBuilder, string)
Map this contribution's endpoints. Called once per host startup
from BowireApiEndpoints.MapBowire.
public void MapEndpoints(IEndpointRouteBuilder endpoints, string basePath)
Parameters
endpointsIEndpointRouteBuilderThe auth-gated IEndpointRouteBuilder group every workbench feature endpoint lives under.
basePathstringThe URL fragment every route is anchored under (e.g.
/bowirefor embedded hosts, empty for the standalone CLI).