reputable 0.1.10 → 0.1.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 10ace4d8c54f4fe4bcf4a1a2bbba66015dbff719b353ee9331e9f3ad56400c69
-  data.tar.gz: d3044684df204b097e1a739f29425947306ed9c5533d4a20c66b1064dafc8892
+  metadata.gz: '09fa87a88ec9b2c8b0cf010e6291c7386f32ed2ceaf55b80c34cd831a75b07f4'
+  data.tar.gz: ab4eb854a090b4c971722932fffe097ae1f52a8feaf1525b8bf2ed6fc9462411
 SHA512:
-  metadata.gz: d3e578a48821efe6610ee60d0560c366fa2136e4fcbc93274822abda5cfb776e0aa924fe7877ff3c2164b177328fe630734fbf5d972103d741d5fc5f8db3f65b
-  data.tar.gz: 077b28a5af24557650e4e82759f63656532da2586f200b68a1dee2ebb6315c238efa44bf8dbb5a58634eb3cecb1819649772abeb65f78efcd064339453d842e3
+  metadata.gz: 45143f6b28ebc3e70810a0a58830b6136c1575a6c4888ad5a680dfc1d3cf09ec9e619ef104873883ecc083324cd083dbe769648494701eedc3f488c5215eb7e6
+  data.tar.gz: b1c8722bc5e7c4c9cc4080fb922a0a245c0a42996e5ab4abd6e984e33943f50da0d7d8f55873096630bafd93ec53bc7a703049ab36fc63c8fd68af9cf8f23f43

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    reputable (0.1.10)
+    reputable (0.1.12)
       connection_pool (~> 2.2)
       redis (>= 4.0, < 6.0)
 

data/README.md

@@ -269,7 +269,15 @@ config.middleware.use Reputable::Middleware,
   },
   
   # Async mode (default: true) - tracking runs in background thread
-  async: true
+  async: true,
+
+  # Request tracking (default: false) - push request context to Redis
+  # Falls back to ENV REPUTABLE_TRACK_REQUEST if not set
+  track_request: true,
+
+  # Expose reputation flags in request env for views/controllers (default: true)
+  # Sets request.env['reputable.ignore_analytics'] when status is untrusted_ignore
+  expose_reputation: true
 ```
 
 ### Optional Reputation Gate
@@ -328,6 +336,11 @@ if current_ip_trusted?
   # Skip CAPTCHA, higher rate limits
 end
 
+# View/helper flag for untrusted_ignore
+if reputable_ignore_analytics?
+  # Skip analytics / tracking in views
+end
+
 if current_ip_blocked?
   render status: 403
   return
@@ -556,6 +569,11 @@ The gem is designed with resilience as the top priority:
 REPUTABLE_ENABLED=false
 ```
 
+```bash
+# Enable request tracking (push request context to Redis)
+REPUTABLE_TRACK_REQUEST=true
+```
+
 ```ruby
 # Check in code
 if Reputable.enabled?
@@ -644,7 +662,7 @@ expect(Reputable.lookup_ip('1.2.3.4')).to be_nil
 
 ## How It Works
 
-1. **Request Tracking**: Your Rails app pushes request data to Redis buffers
+1. **Request Tracking**: Your Rails app pushes request data to Redis buffers (enable with `track_request: true` or `REPUTABLE_TRACK_REQUEST=true`)
 2. **Async Processing**: Reputable API processes buffers asynchronously  
 3. **Behavioral Analysis**: Requests go through classification and pattern analysis
 4. **Reputation Storage**: Scores stored in Redis for O(1) lookups

data/lib/reputable/middleware.rb

@@ -44,7 +44,9 @@ module Reputable
       @skip_if = options[:skip_if]
       @tag_builder = options[:tag_builder]
       @async = options.fetch(:async, true)
+      @track_request = options.key?(:track_request) ? options[:track_request] : nil
       @reputation_gate = options.fetch(:reputation_gate, false)
+      @expose_reputation = options.fetch(:expose_reputation, true)
       @challenge_action = options.fetch(:challenge_action, :verify)
       @block_action = options.fetch(:block_action, :blocked_page_remote)
       @challenge_redirect_status = options.fetch(:challenge_redirect_status, 302)
@@ -72,6 +74,9 @@ module Reputable
         return gate_response
       end
 
+      # Optional: expose reputation context for views/controllers
+      safe_apply_reputation_context(env) if @expose_reputation
+
       # ALWAYS process the request first - tracking must never block
       status, headers, response = @app.call(env)
 
@@ -96,9 +101,9 @@ module Reputable
     end
 
     def enforce_reputation_gate(env)
-      ip = extract_ip(env)
-      status = Reputable::Reputation.lookup_ip(ip)
+      status = reputation_status(env)
       return nil if status.nil?
+      ip = env["reputable.ip"] || extract_ip(env)
 
       case status
       when "untrusted_block"
@@ -114,6 +119,9 @@ module Reputable
     def safe_track_request(env)
       # Skip if disabled globally
       return unless Reputable.enabled?
+
+      # Skip unless explicitly enabled
+      return unless track_request_enabled?
       
       # Skip if this request should be skipped
       return if skip_request?(env)
@@ -124,6 +132,17 @@ module Reputable
       Reputable.logger&.debug("Reputable middleware: #{e.class} - #{e.message}")
     end
 
+    def track_request_enabled?
+      return @track_request unless @track_request.nil?
+
+      env_value = ENV["REPUTABLE_TRACK_REQUEST"]
+      return false if env_value.nil?
+
+      !%w[0 false no off disabled].include?(env_value.to_s.downcase)
+    rescue StandardError
+      false
+    end
+
     def handle_verification_return(env)
       request = Rack::Request.new(env)
       # Quick check to avoid overhead
@@ -133,6 +152,10 @@ module Reputable
 
       if Reputable.verify_redirect_return(request.params)
         env["reputable.verified"] = true
+        ignore_analytics = request.params["reputable_ignore_analytics"]
+        unless ignore_analytics.nil?
+          env["reputable.ignore_analytics"] = ignore_analytics.to_s == "true"
+        end
         
         # Store in session if available
         if env["rack.session"]
@@ -255,6 +278,30 @@ module Reputable
       Reputable::BlockedPage.response(**options)
     end
 
+    def safe_apply_reputation_context(env)
+      return unless Reputable.enabled?
+      return if skip_request?(env)
+
+      reputation_status(env)
+    rescue StandardError => e
+      Reputable.logger&.debug("Reputable reputation context: #{e.class} - #{e.message}")
+    end
+
+    def reputation_status(env)
+      return env["reputable.reputation_status"] if env.key?("reputable.reputation_status")
+
+      ip = extract_ip(env)
+      env["reputable.ip"] = ip
+      status = Reputable::Reputation.lookup_ip(ip)
+      env["reputable.reputation_status"] = status
+      env["reputable.ignore_analytics"] = (status == "untrusted_ignore")
+      status
+    rescue StandardError
+      env["reputable.reputation_status"] = nil
+      env["reputable.ignore_analytics"] = false
+      nil
+    end
+
     def blocked_page_options
       config = Reputable.configuration
       defaults = {

data/lib/reputable/rails.rb

@@ -8,7 +8,7 @@ module Reputable
       extend ActiveSupport::Concern
 
       included do
-        helper_method :reputable_verified? if respond_to?(:helper_method)
+        helper_method :reputable_verified?, :reputable_ignore_analytics? if respond_to?(:helper_method)
       end
 
       # Track the current request with optional extra tags
@@ -88,6 +88,17 @@ module Reputable
         Reputable::Reputation.lookup_ip(request.remote_ip)
       end
 
+      # Check if analytics should be ignored for this request
+      # Uses middleware-populated flag when available, falls back to lookup.
+      def reputable_ignore_analytics?
+        value = request.env["reputable.ignore_analytics"]
+        return value unless value.nil?
+
+        current_ip_status == "untrusted_ignore"
+      rescue StandardError
+        false
+      end
+
       # ========================================
       # Verification redirect helpers
       # ========================================

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.10"
+  VERSION = "0.1.12"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.10
+  version: 0.1.12
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-30 00:00:00.000000000 Z
+date: 2025-12-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis