v2026.5.9

.flocks/flockshub/plugins/tools/api/sangfor_af_v8_0_48/_provider.yaml

@@ -0,0 +1,55 @@
+name: sangfor_af
+service_id: sangfor_af
+version: "8.0.48"
+description: >
+  Sangfor AF (Application Firewall) v8.0.48 REST API service.
+  Uses session-based cookie authentication: call login to obtain
+  a token, then supply it via Cookie header in subsequent requests.
+description_cn: >
+  深信服 AF 下一代防火墙 v8.0.48 REST API 服务。
+  使用基于 Session 的 Cookie 认证：首先调用 login 获取 token，
+  后续请求在 Cookie 中携带 token。基础 URL 为设备管理地址（如 https://192.168.1.1）。
+auth:
+  type: custom
+  secret: sangfor_af_v8_0_48_username
+  secret_secret: sangfor_af_v8_0_48_password
+credential_fields:
+  - key: username
+    label: 管理员用户名
+    storage: secret
+    config_key: username
+    secret_id: sangfor_af_v8_0_48_username
+    input_type: text
+    required: true
+  - key: password
+    label: 管理员密码
+    storage: secret
+    config_key: password
+    secret_id: sangfor_af_v8_0_48_password
+    input_type: password
+    required: true
+  - key: base_url
+    label: 设备地址 (Base URL)
+    storage: config
+    config_key: base_url
+    input_type: url
+    default: "https://192.168.1.1"
+defaults:
+  base_url: "https://192.168.1.1"
+  timeout: 60
+  category: custom
+  product_version: "8.0.48"
+notes: |
+  深信服 AF v8.0.48 API 认证流程：
+  1. 在 AF WebUI「系统 → 管理员账号」勾选 WEBAPI 权限。
+  2. Handler 自动调用 POST /api/v1/namespaces/public/login，
+     用配置的用户名/密码换取 token 并缓存（带 keepalive 自动续期）。
+  3. 后续所有请求由 Handler 自动注入 Cookie: token=<token>。
+  4. token 默认 10 分钟无操作后失效，缓存命中失败时会自动重新登录。
+
+  `verify_ssl` 由表单底部「SSL 验证」开关控制，下列字段都会被
+  识别为 SSL 验证开关，按以下优先级取值：
+    1. `verify_ssl`                  （主键）
+    2. `ssl_verify`                  （兼容别名）
+    3. `custom_settings.verify_ssl`  （WebUI 表单写入位置）
+    4. 兜底默认值 `False`（**默认关闭证书验证**，AF 设备通常使用自签名证书）

.flocks/flockshub/plugins/tools/api/sangfor_af_v8_0_48/_test.yaml

@@ -0,0 +1,103 @@
+schema_version: 1
+provider: sangfor_af
+
+# Service-level connectivity probe.
+# get_system_version is a lightweight read-only GET that verifies
+# authentication and basic reachability.
+connectivity:
+  tool: sangfor_af_v48_status
+  params:
+    action: get_system_version
+
+# Tool-level test samples shown in the WebUI ToolDetailDrawer drop-down.
+fixtures:
+  sangfor_af_v48_auth:
+    - label: "Session keepalive"
+      label_cn: "刷新 Session 保活"
+      tags: [smoke]
+      params:
+        action: keepalive
+      assert:
+        success: true
+
+  sangfor_af_v48_status:
+    - label: "Get system version"
+      label_cn: "获取系统版本信息"
+      tags: [smoke]
+      params:
+        action: get_system_version
+      assert:
+        success: true
+
+    - label: "Get CPU usage"
+      label_cn: "获取 CPU 使用率"
+      tags: [smoke]
+      params:
+        action: get_cpu_usage
+
+    - label: "Get memory usage"
+      label_cn: "获取内存使用率"
+      tags: [smoke]
+      params:
+        action: get_memory_usage
+
+  sangfor_af_v48_ops:
+    - label: "List blacklist entries"
+      label_cn: "查询黑名单列表"
+      tags: [smoke, blacklist]
+      params:
+        action: get_blackwhitelist
+        type: BLACK
+      assert:
+        success: true
+
+    - label: "List whitelist entries"
+      label_cn: "查询白名单列表"
+      tags: [smoke, whitelist]
+      params:
+        action: get_blackwhitelist
+        type: WHITE
+
+    - label: "List blocked attacker IPs"
+      label_cn: "查询封锁攻击者 IP 列表"
+      tags: [smoke, blockip]
+      params:
+        action: get_blockip_list
+      assert:
+        success: true
+
+  sangfor_af_v48_objects:
+    - label: "List IP groups"
+      label_cn: "查询 IP 地址组列表"
+      tags: [smoke]
+      params:
+        action: get_ipgroups
+      assert:
+        success: true
+
+    - label: "List services"
+      label_cn: "查询服务对象列表"
+      tags: [smoke]
+      params:
+        action: get_services
+      assert:
+        success: true
+
+  sangfor_af_v48_network:
+    - label: "List routing table (all routes)"
+      label_cn: "查询完整路由表"
+      tags: [smoke]
+      params:
+        action: get_routes
+        routeType: ALL_ROUTE
+      assert:
+        success: true
+
+  sangfor_af_v48_system:
+    - label: "List admin accounts"
+      label_cn: "查询管理员账户列表"
+      tags: [smoke]
+      params:
+        action: get_accounts
+      assert:
+        success: true