antispam 0.3.2 → 0.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 68d9b3db6150451ef0d20a384670ae229cfd9b05cf9200d8cb3dff467a4002db
-  data.tar.gz: d0e2f8d0b327bda6f2705d9feb27394db86aeb3b44a6994d8b299d9732e066f3
+  metadata.gz: bdbea61620fe47180c54c8c12a52980516c45d6ba5a964af6ca10d8e55cafb9a
+  data.tar.gz: ab054479f0ff3b244d7bc4a339f464b733267978d4752a80206d47057048770c
 SHA512:
-  metadata.gz: 2ce9deb1855e258cb0bb280f02a53c76dc15a5734fd824480da99f178cf8dcb551f59b607d3312ac214a2f6e9bcebdf9767a952aed505837b88b37cc2a39864d
-  data.tar.gz: 104da28427117f76eb9328c183594d8f9c8d5ab615df7da91879cb0dc8e5cf2017b068df7b90f6c5bdb6c0eee26d3cff219db859aa43af1535360961bfe932c0
+  metadata.gz: 070de4332d9749600d1d0cbe1f8b4ac4e3cd8865fc07e9ed6bd0dd1e2c821b62b1034bbd5d6611c8416c65e7a3531d95037cd81072971eaf8bb31abdb92d09d0
+  data.tar.gz: 73c95962012c1f57d919992975bb1d55243fde066d2a9e416dc3ec60995bf593d2ad7bebad8998a776f8a3360a2ab054121f20ed6f38919dcb6ac512779c26f4

data/app/models/antispam/signup.rb

@@ -1,13 +1,47 @@
+require 'net/http'
 module Antispam
   class Signup < ApplicationRecord
-    def self.analyze(user_id:, ip:)
+    def self.analyze(user_id:, ip: nil, request: nil)
+      record(user_id: user_id, ip: ip || request&.remote_ip).safe?
+    end
+    # Like analyze, but also asks Defendium whether the form's _defendium token passed.
+    # Returns a hash; :safe is true only if our score is safe and Defendium says "pass".
+    def self.check_spam(user_id:, request:)
+      signup = record(user_id: user_id, ip: request.remote_ip)
+      human_check = verify_human(request)
+      {
+        safe: signup.safe? && human_check == "pass",
+        signup_safe: signup.safe?,
+        spamscore: signup.spamscore,
+        human_check: human_check,
+        country_code: signup.country_code,
+        number_from_this_ip: signup.number_from_this_ip
+      }
+    end
+    def self.record(user_id:, ip:)
       ip_integer = IPAddr.new(ip).to_i rescue 0
       signup = Signup.where(user_id: user_id).first_or_initialize
       signup.ip = ip
       signup.country_code = Iplocator.get_country(ip_integer)
       signup.number_from_this_ip = Signup.where(ip: ip).count
       signup.save
-      signup.safe?
+      signup
+    end
+    # Returns "pass", "uncompleted", "spam", or "unknown" if Defendium couldn't be reached.
+    def self.verify_human(request)
+      token = request.params[:_defendium]
+      return "uncompleted" if token.blank?
+      uri = URI("https://defendium.com/human/verify")
+      body = { token: token.to_s, host: request.host, ip: request.remote_ip, user_agent: request.user_agent.to_s, required: true, secret_key: defendium_api_key }
+      response = Net::HTTP.post(uri, body.to_json, "Content-Type" => "application/json")
+      return "unknown" unless response.is_a?(Net::HTTPSuccess)
+      JSON.parse(response.body)["result"].to_s.presence || "unknown"
+    rescue StandardError
+      "unknown"
+    end
+    # Optional; set in credentials (defendium: api_key:) or ENV["DEFENDIUM_API_KEY"].
+    def self.defendium_api_key
+      Rails.application.credentials.dig(:defendium, :api_key) || ENV["DEFENDIUM_API_KEY"]
     end
     def spamscore
       spamscore = 50 # Start at a neutral score
@@ -15,13 +49,13 @@ module Antispam
       spamscore += 10 if self.number_from_this_ip > 5
       spamscore += 10 if self.number_from_this_ip > 10
       spamscore += 10 if Iplocator.countries_suspected_of_spam.include?(self.country_code)
-      spamscore -= 10 if self.number_from_this_ip < 2
+      spamscore -= 5 if self.number_from_this_ip < 2
       spamscore -= 10 if Iplocator.trusted_countries.include?(self.country_code)
       spamscore = [[spamscore, 0].max, 100].min # Clamp to a value between 0 and 100
       spamscore
     end
     def safe?
-      self.spamscore <= 50
+      self.spamscore < 40
     end
   end
 end

data/app/views/antispam/signups/index.html.erb

@@ -12,6 +12,7 @@
       <th>Created At</th>
       <th>Updated At</th>
       <th>Safe?</th>
+      <th>Spamscore</th>
     </tr>
   </thead>
 
@@ -22,9 +23,10 @@
         <td><%= signup.ip %></td>
         <td><%= signup.country_code %></td>
         <td><%= signup.number_from_this_ip %></td>
-        <td><%= signup.created_at %></td>
-        <td><%= signup.updated_at %></td>
+        <td><%= signup.created_at.strftime("%Y-%m-%d %I:%M %p") %></td>
+        <td><%= signup.updated_at.strftime("%Y-%m-%d %I:%M %p") %></td>
         <td><%= signup.safe? %></td>
+        <td><%= signup.spamscore %></td>
       </tr>
     <% end %>
   </tbody>

data/lib/antispam/spamcheckers/defendium.rb

@@ -2,11 +2,12 @@
 module Antispam
   module Spamcheckers
     class Defendium
-      # Returns a boolean, 1 for spam, 0 for not spam.
+      # Returns 1 for spam, 0 for not spam.
       def self.check(content, key, verbose)
         # nethttp2.rb
         require 'uri'
         require 'net/http'
+        require 'json'
 
         uri = URI('https://api.defendium.com/check')
         params = { secret_key: key, content: content }
@@ -14,7 +15,7 @@ module Antispam
 
         res = Net::HTTP.get_response(uri)
         if res.is_a?(Net::HTTPSuccess)
-          result = res.body.to_json
+          result = JSON.parse(res.body)
           if result["warnings"]
             Rails.logger.info result["warnings"]
           end
@@ -27,4 +28,4 @@ module Antispam
       end
     end
   end
-end
+end

data/lib/antispam/version.rb

@@ -1,3 +1,3 @@
-module Antispam
-  VERSION = '0.3.2'
-end
+module Antispam
+  VERSION = '0.3.5'
+end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: antispam
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.3.5
 platform: ruby
 authors:
 - Ryan Kopf
 bindir: bin
 cert_chain: []
-date: 2025-02-23 00:00:00.000000000 Z
+date: 2026-10-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -65,14 +65,13 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: "Antispam helps prevent spam in your Rails applications by checking against
-  DNS blacklists \nand spam-prevention databases.<br>\n<br>\nKey features:\n- IP-based
-  spam detection using Project Honey Pot to block known spammers automatically.\n-
-  Content-based spam detection using Defendium's machine learning API (free for up
-  to \n  1,000 checks per day).\n- Blacklist lookups are cached for 24 hours to minimize
-  performance impact.\n\nThe gem integrates seamlessly with Rails, allowing you to
-  block spam at the request level \nand redirect flagged users to a captcha page.\n\nSee
-  the README for more details.\n"
+description: 'Antispam helps prevent spam in your Rails applications by checking against
+  DNS blacklists and spam-prevention databases. It has two core features: (1) IP-based
+  spam detection using Project Honey Pot to block known spammers automatically, and
+  (2) content-based spam detection using Defendium’s machine learning API, which is
+  free for up to 1,000 checks per day. Blacklist lookups are cached for 24 hours to
+  minimize performance impact. The gem integrates seamlessly with Rails, allowing
+  you to block spam at the request level and redirect flagged users to a captcha page.'
 email:
 - antispam@ryankopf.com
 executables: []