how to implement it in python?

https://gist.github.com/senaps/df18fe3cade2dd5557b1e990da29768c

this is how im trying to implement the appsensor in a python application! anybody able to help me?

i want to send a ACE3 detect into the server, i have the ui, but it doesn’t get the logs.

[jtmelton]

Very good - responses is working! So, events and attacks are about the same level of effort - if you get attacks working, then events will work and vice versa. For events, I think the POSTed json body should look something like this:

{"user":{"username":"bob"},"detectionPoint":{"category":"Access Control","label":"ACE3","responses":[]},"timestamp":"2018-02-18T18:54:58.506Z","detectionSystem" {"detectionSystemId":"localhostme", "ipAddress":"10.20.30.40"}}

The content type is going to be JSON. If you want a lot of detail, you can see the following link: http://appsensor.org/docs/v2.3.0/api/ui/index.html#!/RestRequestHandler/resource_RestRequestHandler_addEvent_POST . It should give you details of the post for events, and the post for attacks can be seen on the same page. Hope this helps.

[jtmelton]

@senaps Thanks for reaching out. Can you post the actual http request/response/error you’re seeing? Usually the issue is that people are not adding the header, but it looks like you’ve got that setup properly. I usually recommend people try to access /api/v1.0/responses as that just takes a get request (https://github.com/jtmelton/appsensor/blob/master/execution-modes/appsensor-ws-rest-server/src/main/java/org/owasp/appsensor/handler/RestRequestHandler.java). It does require a param, so ?earliest=SomeRFC3339Timestamp should be added (see http://henry.precheur.org/projects/rfc3339). Hope this helps.