auth-centric-firewall 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fa83cf63aef7579194a4afd61f67fa84b0297a4f41f31ad75ec62bb2ae83a958
-  data.tar.gz: 3178e1eb516b2f0bfc1c9cc4d9dd8b8b2137e445bdeeddd4d790b4928374d918
+  metadata.gz: 6b0b8e31fe34345f545a3c4896d91eca03c805ace909dd71ba6286f15038770b
+  data.tar.gz: 20ca9c8cea11b5266bd62f8beecf732c2301cd7b0ea553e59c64f95b3876b9d1
 SHA512:
-  metadata.gz: 13e77b2efc5455543311dd8f46cf83fe7301803c9e240ad66b9aa4024fc551c34efd160c85c9659aff990d4313a3de13e16f2493733c7266d04b49b3ebd6b846
-  data.tar.gz: 1b38cd09deaf5630699d7b84f83eb48dc68cad3f89d1ee6b6b32b0a0ee0d071dca85bcb6b47c55690c0420ee55f7cf547324703ab3eb6a08dc73667efdd428c0
+  metadata.gz: 6d6767cccf9c465b35b2cdbbeb7fb98851eb02489f4ddb153a265f2af894d9cb2e20b5d5759149180744d603903b0f78c46d59bd4a400a87865a3d226d2202fb
+  data.tar.gz: a4bf16a35820835621ae8243c06cd467e4ac5cebfa64e3a7f3174712b952408b92d969b17b0b46edfddd67aa34b76689e8315e43db2715064be877bfe212316e

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 ## [Released]
 
+## [0.2.0] - 2025-09-13
+
+- Update RBS
+- Refactor common codes
+- Retrieve Captcha
+- Verify Captcha code
+
 ## [0.1.1, 0.1.2] - 2025-05-17
 
 - Try to find real I.P

data/lib/auth/centric/captcha/check_code.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Captcha
+      module CheckCode
+        def verify_code?(id:, code:)
+          return true unless enabled?
+
+          payload = {
+            security_captcha: {
+              ip: @ip_address,
+              code:,
+              session_id: @session_id
+            }
+          }
+
+          http = HTTP
+                   .timeout(timeout_seconds)
+                   .headers(apikey:)
+                   .post(check_code_path(id), json: payload)
+
+          case http.status
+            when 202
+              return true
+            when 404, 406
+              return false
+            else
+              raise Error, "#{http.status}: #{http.body}"
+          end
+        rescue HTTP::TimeoutError
+          false
+        end
+
+        def check_code_path(id)
+          [host, "api/v1/security_captchas/#{id}/check_code"].join('/')
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/captcha/retrieve.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Captcha
+      module Retrieve
+        def retrieve_captcha
+          return true unless enabled?
+
+          payload = {
+            security_captcha: {
+              ip: @ip_address,
+              session_id: @session_id
+            }
+          }
+
+          http = HTTP
+                   .timeout(timeout_seconds)
+                   .headers(apikey:)
+                   .post(find_or_create_path, json: payload)
+
+          case http.status
+            when 200..202
+              JSON.parse(http.body)['data']['attributes'].except('session_id', 'ip')
+            when 422
+              raise Error, http.body.to_s
+            else
+              raise Error, "#{http.status}: #{http.body}"
+          end
+        rescue HTTP::TimeoutError
+          true
+        end
+
+        def find_or_create_path
+          [host, 'api/v1/security_captchas'].join('/')
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/common/settings.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Common
+      module Settings
+        def host
+          @host ||= ENV['AUTH_CENTRIC_HOST'] || 'http://localhost:3003'
+        end
+
+        def apikey
+          @apikey ||= ENV['AUTH_CENTRIC_API_KEY'] || 'EsRx0-rLseNPjXuXj_FEa-xxzY0isi26'
+        end
+
+        def timeout_seconds
+          @timeout_seconds ||= (ENV['AUTH_CENTRIC_TIMEOUT_SECONDS'] || 3).to_i
+        end
+
+        def enabled?
+          @enabled ||= %w[true 1 yes on enabled].include?(ENV['AUTH_CENTRIC_ENABLED']&.downcase)
+        end
+
+        def ip(request)
+          @ip ||= InternetProtocol.new(request).ip
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/firewall/capture_request.rb

@@ -7,11 +7,12 @@ module Auth
       class CaptureRequest
         def initialize(request)
           @request = request
+          nil
         end
 
         def as_json
           {
-            ip:,
+            ip: ip(@request),
             domain:,
             url:,
             query_string:,
@@ -24,10 +25,6 @@ module Auth
           }
         end
 
-        def ip
-          @ip ||= InternetProtocol.new(@request).ip
-        end
-
         def domain
           @request.domain || @request.headers.env['HTTP_HOST']
         end

data/lib/auth/centric/firewall/version.rb

@@ -3,7 +3,7 @@
 module Auth
   module Centric
     module Firewall
-      VERSION = '0.1.2'
+      VERSION = '0.2.0'
     end
   end
 end

data/lib/auth/centric/firewall.rb

@@ -5,6 +5,7 @@ require 'http'
 
 require_relative 'firewall/version'
 require_relative 'firewall/constants'
+require_relative 'common/settings'
 require_relative 'firewall/capture_request'
 require_relative 'firewall/internet_protocol'
 
@@ -12,6 +13,8 @@ module Auth
   module Centric
     # Client firewall module
     module Firewall
+      include Auth::Centric::Common::Settings
+
       class Error < StandardError; end
 
       def log_firewall(request, forced: false, exception: nil)
@@ -60,14 +63,6 @@ module Auth
 
       private
 
-        def host
-          @host ||= ENV['AUTH_CENTRIC_HOST'] || 'http://localhost:3003'
-        end
-
-        def apikey
-          @apikey ||= ENV['AUTH_CENTRIC_API_KEY'] || 'EsRx0-rLseNPjXuXj_FEa-xxzY0isi26'
-        end
-
         def ip_status_path(ip_address)
           [host, "api/v1/internet_protocols/status?ip=#{ip_address}"].join('/')
         end
@@ -75,14 +70,20 @@ module Auth
         def capture_path
           @capture_path ||= [host, 'api/v1/incoming_requests/capture'].join('/')
         end
+    end
 
-        def timeout_seconds
-          @timeout_seconds ||= (ENV['AUTH_CENTRIC_TIMEOUT_SECONDS'] || 3).to_i
-        end
+    class SecurityCaptcha
+      require_relative 'captcha/retrieve'
+      require_relative 'captcha/check_code'
 
-        def enabled?
-          @enabled ||= %w[true 1 yes on enabled].include?(ENV['AUTH_CENTRIC_ENABLED']&.downcase)
-        end
+      include Auth::Centric::Common::Settings
+      include Auth::Centric::Captcha::Retrieve
+      include Auth::Centric::Captcha::CheckCode
+
+      def initialize(ip_address:, session_id:)
+        @ip_address = ip_address
+        @session_id = session_id
+      end
     end
   end
 end

data/sig/auth/centric/captcha/check_code.rbs

@@ -0,0 +1,10 @@
+module Auth
+  module Centric
+    module Captcha
+      module CheckCode
+        def verify_code?: -> bool
+        def check_code_path: -> string
+      end
+    end
+  end
+end

data/sig/auth/centric/captcha/retrieve.rbs

@@ -0,0 +1,15 @@
+module Auth
+  module Centric
+    module Captcha
+      module Retrieve
+        def find_or_create_path: -> tring
+        def retrieve_captcha: -> {
+            "id" => "uuid7",
+            "failed_count" => int,
+            "image" => { "url" => string },
+            "fail_limit" => int
+          }
+      end
+    end
+  end
+end

data/sig/auth/centric/common/settings.rbs

@@ -0,0 +1,19 @@
+module Auth
+  module Centric
+    module Common
+      module Settings
+        @apikey: string
+        @enabled: bool
+        @host: string
+        @ip: string
+        @timeout_seconds: int
+
+        def apikey: -> string
+        def enabled?: -> bool
+        def host: -> string
+        def ip: -> string
+        def timeout_seconds: -> int
+      end
+    end
+  end
+end

data/sig/auth/centric/firewall/capture_request.rbs

@@ -2,24 +2,29 @@ module Auth
   module Centric
     module Firewall
       class CaptureRequest
-        @ip: string
-        @request: Net::HTTPRequest
-
-        def as_json: -> { }
+        def as_json: ->
+          {
+            ip: string,
+            domain: string,
+            url: string,
+            query_string: string,
+            request_method: string,
+            request_post_body: string,
+            user_agent: string,
+            language: string,
+            request_formats: string,
+            headers: {}
+          }
 
         def domain: -> string
 
-        def headers: -> { }
-
-        def ip: -> string
+        def headers: -> string
 
         def language: -> string
 
         def query_string: -> string
 
-        def remote_ip: -> string
-
-        def request_formats: -> [ ]
+        def request_formats: -> string
 
         def request_method: -> string
 

data/sig/auth/centric/firewall/internet_protocol.rbs

@@ -3,7 +3,6 @@ module Auth
     module Firewall
       class InternetProtocol
         @ip: string
-        @request: Net::HTTPRequest
 
         def ip: -> string
         def is_ipv6?: -> bool

data/sig/auth/centric/firewall.rbs

@@ -1,26 +1,21 @@
 module Auth
   module Centric
     module Firewall
+      IGNORE_HEADER_KEYS: []
+      IGNORE_REQUEST: []
+      IGNORE_IP: []
+
       VERSION: string
 
-      @host: string
-      @apikey: string
-      @enabled: bool
       @capture_path: string
-      @timeout_seconds: int
 
       def log_firewall: -> bool
       def valid_ip?: -> bool
 
       private
 
-
-      def host: -> string
-      def apikey: -> string
-      def enabled?: -> bool
       def capture_path: -> string
       def ip_status_path: -> string
-      def timeout_seconds: -> int
     end
   end
 end

data/sig/auth/centric/security_captcha.rbs

@@ -0,0 +1,8 @@
+module Auth
+  module Centric
+    class SecurityCaptcha
+      @ip_address: string
+      @session_id: string
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-centric-firewall
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Saimon Lovell
@@ -51,20 +51,22 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- lib/auth/centric/captcha/check_code.rb
+- lib/auth/centric/captcha/retrieve.rb
+- lib/auth/centric/common/settings.rb
 - lib/auth/centric/firewall.rb
 - lib/auth/centric/firewall/capture_request.rb
 - lib/auth/centric/firewall/constants.rb
 - lib/auth/centric/firewall/internet_protocol.rb
 - lib/auth/centric/firewall/version.rb
 - public/403.html
+- sig/auth/centric/captcha/check_code.rbs
+- sig/auth/centric/captcha/retrieve.rbs
+- sig/auth/centric/common/settings.rbs
 - sig/auth/centric/firewall.rbs
 - sig/auth/centric/firewall/capture_request.rbs
-- sig/auth/centric/firewall/check_ip.rbs
-- sig/auth/centric/firewall/constants.rbs
 - sig/auth/centric/firewall/internet_protocol.rbs
-- sig/ignore_header_keys.rbs
-- sig/ignore_ip.rbs
-- sig/ignore_request.rbs
+- sig/auth/centric/security_captcha.rbs
 homepage: https://gitlab.com/authcentric/auth-centric-firewall
 licenses:
 - MIT
@@ -88,7 +90,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.7.2
 specification_version: 4
 summary: Use artificial intelligence to find hackers.
 test_files: []

data/sig/auth/centric/firewall/check_ip.rbs

@@ -1,11 +0,0 @@
-module Auth
-  module Centric
-    module Firewall
-      class CheckIp
-        @ip: string
-
-        def is_valid?: -> bool
-      end
-    end
-  end
-end

data/sig/auth/centric/firewall/constants.rbs

@@ -1,9 +0,0 @@
-module Auth
-  module Centric
-    module Firewall
-      IGNORE_HEADER_KEYS: []
-      IGNORE_REQUEST: []
-      IGNORE_IP: []
-    end
-  end
-end

data/sig/ignore_header_keys.rbs

@@ -1 +0,0 @@
-IGNORE_HEADER_KEYS: []

data/sig/ignore_ip.rbs

@@ -1 +0,0 @@
-IGNORE_IP: []

data/sig/ignore_request.rbs

@@ -1 +0,0 @@
-IGNORE_REQUEST: []