reputable 0.1.15 → 0.1.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46a14f8686b7e3ad1aa8a8c2e22f5c14f13a3d6667ad9bb4ca1e088024989f7d
-  data.tar.gz: 6b6e95c46a329214b02279c23d02b55067f8a86f74cc6f17159b35dd43d08ef6
+  metadata.gz: d33fb1c68fdaca4082540ed61021d61ec5d687779c6c290635327dfe58a83ec7
+  data.tar.gz: 8a217cc36dcc8eef21623025b2dca9b0ccd697b1a312fd46bcfa814c7958e189
 SHA512:
-  metadata.gz: 542429b9c9716d69889873b9212b4500669a074c24595f8f933f64568161ca6a562de7b6aa307ede64252b35599d5e768279abee078724d358ab2a2bc14f6f90
-  data.tar.gz: e3978a1b8e21332bd1a7e1ef26a719398c478762f74a5959bdc8c85c720de7fe97a03b4c525df7c892273329f8c1d02c1fe38163fcdee21d92479dfc81b735a2
+  metadata.gz: d9470847736221d9aa4b0c0012487f18b32ed15bba2f22d5e85bbcd3f376263aa66899b8e14eda2058b0aa0e52e1c659845a516dee09709f379d9ef660cd2ed4
+  data.tar.gz: 879cc235f75b50f054db621572dbd2dfb58020102bc784d14fed109b921bfa82a4f91f0fe4fff7c7c3f2811ff0f292d5638ab2864323bcf93ddbcd18ecf18a3c

data/README.md

@@ -301,6 +301,33 @@ Notes:
 - Use `blocked_page_path` only for local blocked pages (or to build a custom `failure_url`).
 - Override `challenge_redirect_status` (default `302`) or `verification_force_challenge` if needed.
 
+### Server/JS Request Reconciliation
+
+When using both server-side tracking (Rack middleware) and client-side JavaScript tracking, requests can be double-counted. The reconciliation system prevents this by correlating requests using a unique `request_id`.
+
+**Automatic Request ID**: The middleware automatically generates a UUID for each request and stores it in `env['reputable.request_id']`. This ID is included when pushing to the Redis buffer.
+
+**Exposing to JavaScript**: To enable reconciliation, expose the request_id in your views:
+
+```erb
+<%# In your layout (app/views/layouts/application.html.erb) %>
+<meta name="reputable-request-id" content="<%= request.env['reputable.request_id'] %>">
+
+<%# Or via JavaScript variable %>
+<script>
+  window.reputableConfig = {
+    requestId: '<%= request.env['reputable.request_id'] %>'
+  };
+</script>
+```
+
+The JavaScript snippet will automatically read the request_id from:
+1. `data-reputable-request-id` attribute on the script tag
+2. `window.reputableConfig.requestId`
+3. `<meta name="reputable-request-id">` tag
+
+**Bot Detection Signal**: If the middleware tracks a request but JavaScript never fires (after a 10-second grace period), the request is flagged with `risk:no_js`. This is a strong bot signal—bots and crawlers typically don't render JavaScript.
+
 ### Default Skipped Paths
 
 The middleware automatically skips:

data/lib/reputable/middleware.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative "blocked_page"
+require "securerandom"
 
 module Reputable
   # Rack middleware for automatic request tracking
@@ -61,6 +62,10 @@ module Reputable
     end
 
     def call(env)
+      # Generate a unique request ID for reconciliation with JS tracking
+      # This ID is exposed to views so it can be included in the JS snippet
+      env['reputable.request_id'] = SecureRandom.uuid
+
       # Check for verification return parameters and verify signature if present
       handle_verification_return(env)
 
@@ -390,7 +395,8 @@ module Reputable
         method: request.request_method,
         user_agent: env["HTTP_USER_AGENT"],
         referer: env["HTTP_REFERER"],
-        tags: build_tags(env)
+        tags: build_tags(env),
+        request_id: env["reputable.request_id"]
       }.compact
     rescue StandardError => e
       Reputable.logger&.debug("Reputable build_params: #{e.class} - #{e.message}")

data/lib/reputable/tracker.rb

@@ -24,6 +24,7 @@ module Reputable
       # @option options [String] :country Country code (ISO 3166-1 alpha-2)
       # @option options [Array<String>] :tags Custom classification tags
       # @option options [Hash] :metadata Additional metadata
+      # @option options [String] :request_id Unique request ID for reconciliation with JS tracking
       # @return [Boolean] true if successfully pushed to buffer, false otherwise
       #
       # @example Basic usage
@@ -32,7 +33,7 @@ module Reputable
       #     path: "/products/123"
       #   )
       #
-      # @example Full usage
+      # @example Full usage with request_id for JS reconciliation
       #   Reputable::Tracker.track_request(
       #     ip: request.ip,
       #     path: request.path,
@@ -40,6 +41,7 @@ module Reputable
       #     method: request.request_method,
       #     user_agent: request.user_agent,
       #     referer: request.referer,
+      #     request_id: env['reputable.request_id'],
       #     tags: ["view:page:product", "trust:channel:organic"]
       #   )
       def track_request(ip:, path:, **options)
@@ -80,7 +82,8 @@ module Reputable
           referer: options[:referer],
           country: options[:country],
           tags: options[:tags] || [],
-          metadata: options[:metadata]
+          metadata: options[:metadata],
+          request_id: options[:request_id]
         }.compact
       end
 

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.15"
+  VERSION = "0.1.16"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.15
+  version: 0.1.16
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-01-28 00:00:00.000000000 Z
+date: 2026-01-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis