reputable 0.1.18 → 0.1.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 40be87edb5494144f499f263572e00d98331cd07913239fca32b5ce71450df26
-  data.tar.gz: 63cfe644b94396a6d72b05a75a45076e8bc41196f6c4970307992e6260d6f86f
+  metadata.gz: ffc332f72eed47a768d73dae0cac8a2efbbf73de0b41115fcf064ac046cfcc93
+  data.tar.gz: 42abaea0b5b896a54611ebc43946751fc2a303c62f94d4d199345afe846d88a1
 SHA512:
-  metadata.gz: ed8aee9a76c98611718621fde0c1dada4aff7449092c9fc6cd1990d545b91ee1641c169d841eea12b2b0eeb56edc399e2f8db612041565a2d90dbf76bad34d92
-  data.tar.gz: 5b2eeb4fb8ddbf12beeb989b0a33aa5f42352c6a131ca1211ad5475b19978ba8244dbf52504555256aa0d79eb58935ab23be05cd503405d11d35b835bca506c0
+  metadata.gz: f2fd4c2f08d86b89a19d0676d372f4b63f71ad70fe6c426c313e25cf48786544c6ca58ae729981ed4525d9dd8881c757b8c07810ea7984e405c133e82608ed23
+  data.tar.gz: 8e16c4839f384c4dbd4709996efab5e542a8f792522e283b2f3fcdb2db1eab2f13e149556f2f369ef23dc73d2cef7da83515fb95e69eca8a8e86de041afc4544

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    reputable (0.1.18)
+    reputable (0.1.19)
       connection_pool (~> 2.2)
       redis (>= 4.0, < 6.0)
 

data/README.md

@@ -305,44 +305,6 @@ Notes:
 - Use `blocked_page_path` only for local blocked pages (or to build a custom `failure_url`).
 - Override `challenge_redirect_status` (default `302`) or `verification_force_challenge` if needed.
 
-### ASN Fallback
-
-When an IP has no reputation, the middleware can fall back to checking ASN reputation. This is useful for blocking/challenging entire ASNs (e.g., datacenter ASNs known for abuse).
-
-**Enable via environment variable:**
-```bash
-REPUTABLE_ASN_FALLBACK=true
-REPUTABLE_ASN_HEADER=HTTP_X_ASN  # Optional, defaults to HTTP_X_ASN
-```
-
-**Enable via configuration:**
-```ruby
-Reputable.configure do |config|
-  config.asn_fallback = true
-  config.asn_header = "HTTP_X_ASN"  # Or HTTP_CF_ASN for Cloudflare, etc.
-end
-```
-
-**Enable via middleware option:**
-```ruby
-config.middleware.use Reputable::Middleware,
-  reputation_gate: true,
-  asn_fallback: true
-```
-
-**How it works:**
-1. Middleware looks up IP reputation first
-2. If IP has no reputation and ASN fallback is enabled, it extracts ASN from the configured header
-3. If ASN has a reputation (blocked, challenged), that decision is applied
-4. The `env['reputable.reputation_source']` is set to `'asn'` when using ASN-based decision
-
-**Providing ASN from your app:**
-If your app has its own GeoIP lookup, set the ASN directly:
-```ruby
-# In a before_action or middleware
-request.env['reputable.asn'] = lookup_asn_for_ip(request.remote_ip)
-```
-
 ### Server/JS Request Reconciliation
 
 When using both server-side tracking (Rack middleware) and client-side JavaScript tracking, requests can be double-counted. The reconciliation system prevents this by correlating requests using a unique `request_id`.

data/lib/reputable/configuration.rb

@@ -15,8 +15,7 @@ module Reputable
                   :connect_timeout, :read_timeout, :write_timeout,
                   :ssl_params, :trusted_proxies, :ip_header_priority,
                   :on_error, :trusted_keys, :base_url,
-                  :site_name, :support_email, :support_url,
-                  :asn_fallback, :asn_header
+                  :site_name, :support_email, :support_url
 
     # Alias for backward compatibility
     alias_method :verification_base_url, :base_url
@@ -83,10 +82,6 @@ module Reputable
       @site_name = ENV["REPUTABLE_SITE_NAME"]
       @support_email = ENV["REPUTABLE_SUPPORT_EMAIL"]
       @support_url = ENV["REPUTABLE_SUPPORT_URL"]
-      
-      # ASN fallback: when IP has no reputation, check ASN reputation
-      @asn_fallback = env_truthy?("REPUTABLE_ASN_FALLBACK")
-      @asn_header = ENV.fetch("REPUTABLE_ASN_HEADER", "HTTP_X_ASN")
     end
 
     # Alias for backward compatibility
@@ -163,20 +158,5 @@ module Reputable
     rescue IPAddr::InvalidAddressError
       false
     end
-
-    # Check if ASN fallback is enabled
-    def asn_fallback?
-      @asn_fallback
-    end
-
-    private
-
-    # Helper to check if an environment variable is truthy
-    def env_truthy?(name)
-      value = ENV[name]
-      return false if value.nil?
-      
-      %w[1 true yes on enabled].include?(value.to_s.downcase)
-    end
   end
 end

data/lib/reputable/middleware.rb

@@ -60,7 +60,6 @@ module Reputable
       @blocked_page_options = options.fetch(:blocked_page, {})
       @blocked_page_path = options[:blocked_page_path]
       @ignore_xhr = options.fetch(:ignore_xhr, false)
-      @asn_fallback = options.key?(:asn_fallback) ? options[:asn_fallback] : nil
     end
 
     def call(env)
@@ -319,17 +318,6 @@ module Reputable
       ip = extract_ip(env)
       env["reputable.ip"] = ip
       status = Reputable::Reputation.lookup_ip(ip)
-      
-      # Fallback to ASN reputation if IP has no status and ASN fallback is enabled
-      if status.nil? && asn_fallback_enabled?
-        asn = extract_asn(env)
-        if asn
-          env["reputable.asn"] = asn
-          status = Reputable::Reputation.lookup_asn(asn)
-          env["reputable.reputation_source"] = "asn" if status
-        end
-      end
-      
       env["reputable.reputation_status"] = status
       env["reputable.ignore_analytics"] = status.to_s.start_with?("untrusted")
       status
@@ -339,28 +327,6 @@ module Reputable
       nil
     end
 
-    def asn_fallback_enabled?
-      # Middleware option takes precedence, then config
-      return @asn_fallback unless @asn_fallback.nil?
-      
-      Reputable.configuration.asn_fallback?
-    end
-
-    def extract_asn(env)
-      # First check if app explicitly set it
-      return env["reputable.asn"] if env["reputable.asn"]
-      
-      # Then check the configured header
-      header = Reputable.configuration.asn_header
-      value = env[header]
-      return nil if value.nil? || value.empty?
-      
-      # Normalize: strip "AS" prefix if present
-      value.to_s.strip.sub(/^AS/i, "")
-    rescue StandardError
-      nil
-    end
-
     def blocked_page_options
       config = Reputable.configuration
       defaults = {

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.18"
+  VERSION = "0.1.19"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.18
+  version: 0.1.19
 platform: ruby
 authors:
 - Reputable