foil-server 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 142ee8a11ee7b38b933aab55b22188e9f2a6ef73186097a5ea708d93fa0be2b8
-  data.tar.gz: cbcf119648d0de7699f30ff12894ed6303e7a6c1a874178db73e6a706a828b6a
+  metadata.gz: e998be2281e9d8fbacd45e49596b2424d46509066ff8f97e1ddfa5763531ba10
+  data.tar.gz: be9cae7a65e5d4e13c0ef726d56f1ca9281237b50e79345a0dc5a5904987d9f6
 SHA512:
-  metadata.gz: 899d02338303288f518178bb8c1a72e815dd2372ef428534fe3c36a2574a09eecb021164ebda90f90439d74ce0bdd112d5d2301ddf393dd837fe4bf18e91103a
-  data.tar.gz: c88c199301d6c99dc1e612824b3d96caddaec9fd70b1dee9abc31f29ac071e75fcfba2d4bc55055ee7c2f75b8ca394b2bd8e01d0d7cc3eeacb5b779b2dc4465c
+  metadata.gz: f9bfc32b352566af63551b720bba2f6dc790040073cb793ffa3c31017d126d960ae2cdacc0a1e4cb6db89785a4eb074456e34945274578d01744ba849eefc76b
+  data.tar.gz: 21141586684db218908995affc1fd2ac5271dca1ae273a2208682c77a1936b4427c08d376d45c337f73e1d1ec712f906770b660a3b7f049beb30873d36647f25

data/README.md

@@ -38,10 +38,12 @@ require "foil/server"
 
 client = Foil::Server::Client.new(secret_key: "sk_live_...")
 
-page = client.sessions.list(verdict: "bot", limit: 25)
+page = client.sessions.list(verdict: "bot", limit: 25, client_user_id: "user_123", client_application_id: "app_123")
 session = client.sessions.get("sid_0123456789abcdefghjkmnpqrs")
 client.sessions.attach_client_user("sid_0123456789abcdefghjkmnpqrs", "user_123")
 client.sessions.clear_client_user("sid_0123456789abcdefghjkmnpqrs")
+client.sessions.attach_client_application("sid_0123456789abcdefghjkmnpqrs", "app_123")
+client.sessions.clear_client_application("sid_0123456789abcdefghjkmnpqrs")
 
 puts "#{session[:decision][:automation_status]} #{session[:highlights].first&.fetch(:summary, nil)}"
 ```

data/lib/foil/server/client.rb

@@ -151,12 +151,14 @@ module Foil
     end
 
     class SessionsResource < BaseResource
-      def list(limit: nil, cursor: nil, verdict: nil, search: nil)
+      def list(limit: nil, cursor: nil, verdict: nil, search: nil, client_user_id: nil, client_application_id: nil)
         payload = @client.request_json("GET", "/v1/sessions", query: {
           limit: limit,
           cursor: cursor,
           verdict: verdict,
-          search: search
+          search: search,
+          client_user_id: client_user_id,
+          client_application_id: client_application_id
         })
         list_result(payload)
       end
@@ -177,11 +179,30 @@ module Foil
         })[:data]
       end
 
-      def iter(limit: nil, verdict: nil, search: nil)
+      def attach_client_application(session_id, client_application_id)
+        @client.request_json("PATCH", "/v1/sessions/#{CGI.escape(session_id)}", body: {
+          client_application_id: client_application_id
+        })[:data]
+      end
+
+      def clear_client_application(session_id)
+        @client.request_json("PATCH", "/v1/sessions/#{CGI.escape(session_id)}", body: {
+          client_application_id: nil
+        })[:data]
+      end
+
+      def iter(limit: nil, verdict: nil, search: nil, client_user_id: nil, client_application_id: nil)
         Enumerator.new do |yielder|
           cursor = nil
           loop do
-            page = list(limit: limit, cursor: cursor, verdict: verdict, search: search)
+            page = list(
+              limit: limit,
+              cursor: cursor,
+              verdict: verdict,
+              search: search,
+              client_user_id: client_user_id,
+              client_application_id: client_application_id
+            )
             page.items.each { |item| yielder << item }
             break unless page.has_more && page.next_cursor
 

data/lib/foil/server/sealed_token.rb

@@ -18,6 +18,8 @@ module Foil
       V2_RECIPIENT_BYTES = RECIPIENT_ID_BYTES + NONCE_BYTES + CONTENT_KEY_BYTES + TAG_BYTES
       V2_PAYLOAD_AAD_PREFIX = "foil-sealed-results-v2\0payload\0".b
       V2_WRAP_AAD_PREFIX = "foil-sealed-results-v2\0recipient\0".b
+      # Decompressed payloads are a few kilobytes; the cap bounds memory if a token decompresses to far more.
+      MAX_PAYLOAD_BYTES = 1024 * 1024
 
       module_function
 
@@ -30,7 +32,7 @@ module Foil
         raise TokenVerificationError, "Foil token is too short." if raw.bytesize < 29
 
         compressed = decrypt_payload(raw, resolved_secret)
-        payload = JSON.parse(Zlib::Inflate.inflate(compressed))
+        payload = JSON.parse(inflate_payload(compressed))
         deep_symbolize(payload)
       rescue ConfigurationError, TokenVerificationError
         raise
@@ -49,6 +51,21 @@ module Foil
       end
       private_class_method :derive_key
 
+      def inflate_payload(compressed)
+        inflater = Zlib::Inflate.new
+        payload = "".b
+        inflater.inflate(compressed) do |chunk|
+          payload << chunk
+          raise TokenVerificationError, "Foil token payload is too large." if payload.bytesize > MAX_PAYLOAD_BYTES
+        end
+        raise Zlib::BufError, "Foil token payload is truncated." unless inflater.finished?
+
+        payload
+      ensure
+        inflater&.close
+      end
+      private_class_method :inflate_payload
+
       def decrypt_gcm(ciphertext, key, nonce, tag, aad = "".b)
         cipher = OpenSSL::Cipher.new("aes-256-gcm")
         cipher.decrypt

data/lib/foil/server/version.rb

@@ -1,5 +1,5 @@
 module Foil
   module Server
-    VERSION = "0.4.0".freeze
+    VERSION = "0.5.0".freeze
   end
 end

data/spec/fixtures/api/fingerprints/detail.json

@@ -6,7 +6,7 @@
       "first_seen_at": "2026-03-24T19:58:00.000Z",
       "last_seen_at": "2026-03-24T20:00:05.000Z",
       "seen_count": 3,
-      "expires_at": "2026-06-22T20:00:05.000Z"
+      "expires_at": "9999-12-31T00:00:00.000Z"
     },
     "latest_request": {
       "user_agent": "Mozilla/5.0",

data/spec/fixtures/api/fingerprints/list.json

@@ -7,7 +7,7 @@
         "first_seen_at": "2026-03-24T19:58:00.000Z",
         "last_seen_at": "2026-03-24T20:00:05.000Z",
         "seen_count": 3,
-        "expires_at": "2026-06-22T20:00:05.000Z"
+        "expires_at": "9999-12-31T00:00:00.000Z"
       },
       "latest_request": {
         "user_agent": "Mozilla/5.0",

data/spec/fixtures/api/sessions/detail.json

@@ -4,6 +4,7 @@
     "id": "sid_0123456789abcdefghjkmnpqrs",
     "created_at": "2026-03-24T20:00:00.000Z",
     "client_user_id": "user_123",
+    "client_application_id": "app_123",
     "behavior": null,
     "decision": {
       "event_id": "evt_23456789abcdefghjkmnpqrstv",
@@ -144,7 +145,7 @@
         "accuracy_radius_km": 10
       },
       "routing": {
-        "asn": "64512",
+        "asn": "AS64512",
         "organization": "Example Networks"
       },
       "anonymity": {
@@ -174,7 +175,7 @@
         "client_types": [
           "consumer"
         ],
-        "client_count": 3
+        "client_count": null
       },
       "evaluated_at": "2026-03-24T20:00:05.000Z"
     },
@@ -206,7 +207,8 @@
       "lifecycle": {
         "first_seen_at": "2026-03-01T18:22:11.000Z",
         "last_seen_at": "2026-03-24T20:00:05.000Z",
-        "seen_count": 14
+        "seen_count": 14,
+        "resolution_count": 14
       }
     },
     "connection_fingerprint": {
@@ -383,7 +385,7 @@
       },
       "canvas": {
         "hash": 123456,
-        "geometry_hash": 998877,
+        "geometry_hash": null,
         "text_hash": 112233,
         "winding": null,
         "noise_detected": true,
@@ -398,6 +400,7 @@
           "parameters_hash": "params_123",
           "extensions_hash": 333444,
           "extension_parameters_hash": "webgl2_456",
+          "webgl2_parameters_hash": "webgl2_456",
           "shader_precision_hash": 777888
         },
         "webgpu": {
@@ -412,7 +415,7 @@
       "audio": {
         "hash": 124.0434,
         "sample_rate": 48000,
-        "channel_count": null,
+        "channel_count": 2,
         "voice_count": 3,
         "local_voice_count": 2,
         "default_voice_lang": "en-US",
@@ -420,11 +423,11 @@
       },
       "fonts": {
         "detected_count": 2,
-        "tested_count": null,
+        "tested_count": 41,
         "enumeration_hash": 3649417752,
         "metrics_hash": 223344,
         "preferences_hash": null,
-        "emoji_hash": 112233
+        "emoji_hash": "5f0e2a71"
       },
       "media": {
         "device_count": 1,

data/spec/fixtures/api/sessions/list.json

@@ -5,6 +5,7 @@
       "id": "sid_0123456789abcdefghjkmnpqrs",
       "created_at": "2026-03-24T20:00:00.000Z",
       "client_user_id": "user_123",
+      "client_application_id": "app_123",
       "latest_decision": {
         "event_id": "evt_23456789abcdefghjkmnpqrstv",
         "verdict": "human",