Documentation Index

GraphQL Support

Our GraphQL support provides the following features to enhance detection for customers who use GraphQL:

• Sensitive GraphQL operations

Updated on: 29 May 2023

---

Basic Configuration

Application ID / AppId and HUMAN Token / Auth Token can be found in the Portal, under Applications section. Cookie Encryption Key can be found in the portal, under Policies section.

Updated on: 11 May 2023

---

Customized Subroutines

To complete the configuration of additional features, it is required to modify customized subroutines available in the px_custom.vcl file with instructions.

Updated on: 11 May 2023

---

Additional Activity Handler

The Additional Activity Handler is a callback function that processes activities before forwarding to the next pipeline step.

Updated on: 11 May 2023

---

Advanced Blocking Response

Provides a JSON object for rendering custom Captcha challenges for specific cases, such as XHR post requests.

Updated on: 11 May 2023

---

Creating and Configuring the Edge-Dictionary

Configuration required to support Code Defender CSP Capability in Fastly Enforcer.

Updated on: 11 May 2023

---

Custom CSS

Allows setting a custom CSS file for the block page.

Updated on: 11 May 2023

---

Custom First Party Sensor Endpoint

Defines the default first-party endpoint to retrieve the HUMAN sensor.

Updated on: 11 May 2023

---

Custom Logo

Adds a custom logo to the block page, with specific size and format requirements.

Updated on: 11 May 2023

---

Custom JS Script

Allows adding a custom JS script to the block page.

Updated on: 11 May 2023

---

Custom Parameters

Enriches activities with additional data like user ID or session ID.

Updated on: 11 May 2023

---

Filter Requests

Features to filter out specific requests from Enforcer verification flow.

Updated on: 11 May 2023

---

Data Enrichment

Provides a hook function to process data enrichment payloads.

Updated on: 11 May 2023

---

First Party

Prevents suspicious behavior by using first-party resources.

Updated on: 26 May 2023

---

First Party Snippet

Instructions to deploy the HUMAN First-Party JS Snippet.

Updated on: 11 May 2023

---

Enforced Routes

Defines routes that are fully enforced even in Monitor mode.

Updated on: 16 May 2023

---

Login Credentials Extraction

Extracts and sends hashed credentials to HUMAN for additional risk analysis.

Updated on: 11 May 2023

---

Modify First Party Response

Allows editing response headers for first-party requests.

Updated on: 11 Jul 2023

---

Module Context Object

Explains the module context object, including headers for enrichment and identifiers.

Updated on: 11 May 2023

---

Module Enabled

Enables or disables the Enforcer module based on configuration.

Updated on: 11 May 2023

---

Module Mode

Sets the working mode of the Enforcer (Monitor or Active Blocking).

Updated on: 22 Aug 2023

---

Monitored Routes

Specifies routes to monitor while in Active Blocking mode.

Updated on: 26 May 2023

---

Returning A Custom Block Page

Customizes the block page returned by Fastly Enforcer.

Updated on: 11 May 2023

---

Sensitive Routes

Identifies routes requiring stricter protection against bot attacks.

Updated on: 13 Nov 2023

---

Test Block Flow on Monitoring Mode - Bypass Monitor Header

Tests the Enforcer’s blocking flow while in Monitor Mode using a bypass header.

Updated on: 11 May 2023