auth-centric-firewall 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e287e19f12735e9c687cb6f79450e78abd78cc28e6b5c9c423444606a3b019fb
-  data.tar.gz: b3865f72602036e7f9e02280c6bcfb48e8df7f5fdcf1a37cd2dd1588b8599b88
+  metadata.gz: 6b0b8e31fe34345f545a3c4896d91eca03c805ace909dd71ba6286f15038770b
+  data.tar.gz: 20ca9c8cea11b5266bd62f8beecf732c2301cd7b0ea553e59c64f95b3876b9d1
 SHA512:
-  metadata.gz: e725fadcc1372ca2363bfc0f726b8e07a70999ba37574e53e7a674988e2a1977431454c8a8d2be31760ccf0795083aea066a1df6a7b3f587e18695ecb6c5b844
-  data.tar.gz: bd2fc5072fa375ac835f5bc3be163df97a41c1bdd21f01481e45e81e1167a5c800a98e4dfe114eca06081d5de0172eb6d502658f85bf481c4d11743806848d62
+  metadata.gz: 6d6767cccf9c465b35b2cdbbeb7fb98851eb02489f4ddb153a265f2af894d9cb2e20b5d5759149180744d603903b0f78c46d59bd4a400a87865a3d226d2202fb
+  data.tar.gz: a4bf16a35820835621ae8243c06cd467e4ac5cebfa64e3a7f3174712b952408b92d969b17b0b46edfddd67aa34b76689e8315e43db2715064be877bfe212316e

data/.rubocop.yml

@@ -14,6 +14,7 @@ Layout/IndentationConsistency:
 Naming/PredicateName:
   AllowedMethods:
     - has_access?
+    - is_ipv6?
   NamePrefix:
     - is_
     - has_

data/CHANGELOG.md

@@ -1,6 +1,13 @@
 ## [Released]
 
-## [0.1.1] - 2025-05-17
+## [0.2.0] - 2025-09-13
+
+- Update RBS
+- Refactor common codes
+- Retrieve Captcha
+- Verify Captcha code
+
+## [0.1.1, 0.1.2] - 2025-05-17
 
 - Try to find real I.P
 

data/lib/auth/centric/captcha/check_code.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Captcha
+      module CheckCode
+        def verify_code?(id:, code:)
+          return true unless enabled?
+
+          payload = {
+            security_captcha: {
+              ip: @ip_address,
+              code:,
+              session_id: @session_id
+            }
+          }
+
+          http = HTTP
+                   .timeout(timeout_seconds)
+                   .headers(apikey:)
+                   .post(check_code_path(id), json: payload)
+
+          case http.status
+            when 202
+              return true
+            when 404, 406
+              return false
+            else
+              raise Error, "#{http.status}: #{http.body}"
+          end
+        rescue HTTP::TimeoutError
+          false
+        end
+
+        def check_code_path(id)
+          [host, "api/v1/security_captchas/#{id}/check_code"].join('/')
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/captcha/retrieve.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Captcha
+      module Retrieve
+        def retrieve_captcha
+          return true unless enabled?
+
+          payload = {
+            security_captcha: {
+              ip: @ip_address,
+              session_id: @session_id
+            }
+          }
+
+          http = HTTP
+                   .timeout(timeout_seconds)
+                   .headers(apikey:)
+                   .post(find_or_create_path, json: payload)
+
+          case http.status
+            when 200..202
+              JSON.parse(http.body)['data']['attributes'].except('session_id', 'ip')
+            when 422
+              raise Error, http.body.to_s
+            else
+              raise Error, "#{http.status}: #{http.body}"
+          end
+        rescue HTTP::TimeoutError
+          true
+        end
+
+        def find_or_create_path
+          [host, 'api/v1/security_captchas'].join('/')
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/common/settings.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Common
+      module Settings
+        def host
+          @host ||= ENV['AUTH_CENTRIC_HOST'] || 'http://localhost:3003'
+        end
+
+        def apikey
+          @apikey ||= ENV['AUTH_CENTRIC_API_KEY'] || 'EsRx0-rLseNPjXuXj_FEa-xxzY0isi26'
+        end
+
+        def timeout_seconds
+          @timeout_seconds ||= (ENV['AUTH_CENTRIC_TIMEOUT_SECONDS'] || 3).to_i
+        end
+
+        def enabled?
+          @enabled ||= %w[true 1 yes on enabled].include?(ENV['AUTH_CENTRIC_ENABLED']&.downcase)
+        end
+
+        def ip(request)
+          @ip ||= InternetProtocol.new(request).ip
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/firewall/capture_request.rb

@@ -7,11 +7,12 @@ module Auth
       class CaptureRequest
         def initialize(request)
           @request = request
+          nil
         end
 
         def as_json
           {
-            ip:,
+            ip: ip(@request),
             domain:,
             url:,
             query_string:,
@@ -24,10 +25,6 @@ module Auth
           }
         end
 
-        def ip
-          @request.env['HTTP_X_REAL_IP'] || @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
-        end
-
         def domain
           @request.domain || @request.headers.env['HTTP_HOST']
         end

data/lib/auth/centric/firewall/internet_protocol.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Firewall
+      # Try to find the IPv4
+      class InternetProtocol
+        require 'ipaddr'
+
+        def initialize(request)
+          @request = request
+        end
+
+        def ip
+          return @ip unless @ip.blank?
+
+          @ip = @request.env['HTTP_X_REAL_IP'] || @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
+          return @ip unless @ip.include?(',')
+
+          @ip.split(',').each do |ip|
+            next if is_ipv6?(ip.strip)
+
+            @ip = ip.strip
+            break
+          end
+
+          @ip
+        end
+
+        def is_ipv6?(ip_string)
+          IPAddr.new(ip_string).ipv6?
+        rescue IPAddr::AddressFamilyError, IPAddr::InvalidAddressError
+          false
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/firewall/version.rb

@@ -3,7 +3,7 @@
 module Auth
   module Centric
     module Firewall
-      VERSION = '0.1.1'
+      VERSION = '0.2.0'
     end
   end
 end

data/lib/auth/centric/firewall.rb

@@ -5,12 +5,16 @@ require 'http'
 
 require_relative 'firewall/version'
 require_relative 'firewall/constants'
+require_relative 'common/settings'
 require_relative 'firewall/capture_request'
+require_relative 'firewall/internet_protocol'
 
 module Auth
   module Centric
     # Client firewall module
     module Firewall
+      include Auth::Centric::Common::Settings
+
       class Error < StandardError; end
 
       def log_firewall(request, forced: false, exception: nil)
@@ -37,7 +41,7 @@ module Auth
       def valid_ip?(request, forced: false)
         return true unless enabled?
 
-        ip_address = request.env['HTTP_X_FORWARDED_FOR'] || request.remote_ip
+        ip_address = InternetProtocol.new(request).ip
         return true if !forced && IGNORE_IP.include?(ip_address)
 
         http = HTTP
@@ -59,14 +63,6 @@ module Auth
 
       private
 
-        def host
-          @host ||= ENV['AUTH_CENTRIC_HOST'] || 'http://localhost:3003'
-        end
-
-        def apikey
-          @apikey ||= ENV['AUTH_CENTRIC_API_KEY'] || 'EsRx0-rLseNPjXuXj_FEa-xxzY0isi26'
-        end
-
         def ip_status_path(ip_address)
           [host, "api/v1/internet_protocols/status?ip=#{ip_address}"].join('/')
         end
@@ -74,14 +70,20 @@ module Auth
         def capture_path
           @capture_path ||= [host, 'api/v1/incoming_requests/capture'].join('/')
         end
+    end
 
-        def timeout_seconds
-          @timeout_seconds ||= (ENV['AUTH_CENTRIC_TIMEOUT_SECONDS'] || 3).to_i
-        end
+    class SecurityCaptcha
+      require_relative 'captcha/retrieve'
+      require_relative 'captcha/check_code'
 
-        def enabled?
-          @enabled ||= %w[true 1 yes on enabled].include?(ENV['AUTH_CENTRIC_ENABLED']&.downcase)
-        end
+      include Auth::Centric::Common::Settings
+      include Auth::Centric::Captcha::Retrieve
+      include Auth::Centric::Captcha::CheckCode
+
+      def initialize(ip_address:, session_id:)
+        @ip_address = ip_address
+        @session_id = session_id
+      end
     end
   end
 end

data/sig/auth/centric/captcha/check_code.rbs

@@ -0,0 +1,10 @@
+module Auth
+  module Centric
+    module Captcha
+      module CheckCode
+        def verify_code?: -> bool
+        def check_code_path: -> string
+      end
+    end
+  end
+end

data/sig/auth/centric/captcha/retrieve.rbs

@@ -0,0 +1,15 @@
+module Auth
+  module Centric
+    module Captcha
+      module Retrieve
+        def find_or_create_path: -> tring
+        def retrieve_captcha: -> {
+            "id" => "uuid7",
+            "failed_count" => int,
+            "image" => { "url" => string },
+            "fail_limit" => int
+          }
+      end
+    end
+  end
+end

data/sig/auth/centric/common/settings.rbs

@@ -0,0 +1,19 @@
+module Auth
+  module Centric
+    module Common
+      module Settings
+        @apikey: string
+        @enabled: bool
+        @host: string
+        @ip: string
+        @timeout_seconds: int
+
+        def apikey: -> string
+        def enabled?: -> bool
+        def host: -> string
+        def ip: -> string
+        def timeout_seconds: -> int
+      end
+    end
+  end
+end

data/sig/auth/centric/firewall/capture_request.rbs

@@ -2,23 +2,29 @@ module Auth
   module Centric
     module Firewall
       class CaptureRequest
-        @request: Net::HTTPRequest
-
-        def as_json: -> { }
+        def as_json: ->
+          {
+            ip: string,
+            domain: string,
+            url: string,
+            query_string: string,
+            request_method: string,
+            request_post_body: string,
+            user_agent: string,
+            language: string,
+            request_formats: string,
+            headers: {}
+          }
 
         def domain: -> string
 
-        def headers: -> { }
-
-        def ip: -> string
+        def headers: -> string
 
         def language: -> string
 
         def query_string: -> string
 
-        def remote_ip: -> string
-
-        def request_formats: -> [ ]
+        def request_formats: -> string
 
         def request_method: -> string
 

data/sig/auth/centric/firewall/{check_ip.rbs → internet_protocol.rbs}

@@ -1,10 +1,11 @@
 module Auth
   module Centric
     module Firewall
-      class CheckIp
+      class InternetProtocol
         @ip: string
 
-        def is_valid?: -> bool
+        def ip: -> string
+        def is_ipv6?: -> bool
       end
     end
   end

data/sig/auth/centric/firewall.rbs

@@ -1,26 +1,21 @@
 module Auth
   module Centric
     module Firewall
+      IGNORE_HEADER_KEYS: []
+      IGNORE_REQUEST: []
+      IGNORE_IP: []
+
       VERSION: string
 
-      @host: string
-      @apikey: string
-      @enabled: bool
       @capture_path: string
-      @timeout_seconds: int
 
       def log_firewall: -> bool
       def valid_ip?: -> bool
 
       private
 
-
-      def host: -> string
-      def apikey: -> string
-      def enabled?: -> bool
       def capture_path: -> string
       def ip_status_path: -> string
-      def timeout_seconds: -> int
     end
   end
 end

data/sig/auth/centric/security_captcha.rbs

@@ -0,0 +1,8 @@
+module Auth
+  module Centric
+    class SecurityCaptcha
+      @ip_address: string
+      @session_id: string
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-centric-firewall
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Saimon Lovell
@@ -23,6 +23,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5'
+- !ruby/object:Gem::Dependency
+  name: ipaddr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
 description: Uses A.I to analyze connections to find hackers.
 email:
 - staysynchronize@gmail.com
@@ -37,18 +51,22 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- lib/auth/centric/captcha/check_code.rb
+- lib/auth/centric/captcha/retrieve.rb
+- lib/auth/centric/common/settings.rb
 - lib/auth/centric/firewall.rb
 - lib/auth/centric/firewall/capture_request.rb
 - lib/auth/centric/firewall/constants.rb
+- lib/auth/centric/firewall/internet_protocol.rb
 - lib/auth/centric/firewall/version.rb
 - public/403.html
+- sig/auth/centric/captcha/check_code.rbs
+- sig/auth/centric/captcha/retrieve.rbs
+- sig/auth/centric/common/settings.rbs
 - sig/auth/centric/firewall.rbs
 - sig/auth/centric/firewall/capture_request.rbs
-- sig/auth/centric/firewall/check_ip.rbs
-- sig/auth/centric/firewall/constants.rbs
-- sig/ignore_header_keys.rbs
-- sig/ignore_ip.rbs
-- sig/ignore_request.rbs
+- sig/auth/centric/firewall/internet_protocol.rbs
+- sig/auth/centric/security_captcha.rbs
 homepage: https://gitlab.com/authcentric/auth-centric-firewall
 licenses:
 - MIT
@@ -72,7 +90,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.7.2
 specification_version: 4
 summary: Use artificial intelligence to find hackers.
 test_files: []

data/sig/auth/centric/firewall/constants.rbs

@@ -1,9 +0,0 @@
-module Auth
-  module Centric
-    module Firewall
-      IGNORE_HEADER_KEYS: []
-      IGNORE_REQUEST: []
-      IGNORE_IP: []
-    end
-  end
-end

data/sig/ignore_header_keys.rbs

@@ -1 +0,0 @@
-IGNORE_HEADER_KEYS: []

data/sig/ignore_ip.rbs

@@ -1 +0,0 @@
-IGNORE_IP: []

data/sig/ignore_request.rbs

@@ -1 +0,0 @@
-IGNORE_REQUEST: []