reputable 0.1.4 → 0.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c39e960378d885e97cac40ebc6147ea8f41bc9276a24e341011edd7590090b9
-  data.tar.gz: '09a3302c4e84261dd2b6941d87747297d37aa6458bc23fdd181d05fe715124be'
+  metadata.gz: 3c8047e39b4f09d6580aeba68d04e3231c2774b9f0eac1d7c70591b7e45e11df
+  data.tar.gz: 14aecba661b4bd57381f496274dfd0185cc7ef1e7332ab71d2ce56d623935cb8
 SHA512:
-  metadata.gz: aa66be8227fbe97f9b270ec901642c397f59ec9cd39e6a8dc16dcfe7ab8d09c3b7ce7984d3ddf66d00a74d319a3b05fa8167b8b1a45fca6c1da84a20917c80f3
-  data.tar.gz: 36166971d3eec60a629a03992968381d57f7b52b3cd43f8c9876ebbf99528e4ed4fe6370b1c41abdb904c7100d970b7e58d032228f4c7c22187c283466d1e0bf
+  metadata.gz: 34507a4124cca8739008ccf9bc1762226aeef05c994fb861be47bc08eb4e4b06dcad501082750cf56b6f9025b0e1d7596bc057da761bba23c94b583048096425
+  data.tar.gz: 67d7c49193f2c2492d49cc34a0e5051f45db49ed98f7d62a7623fc32cfc753f481da5c6ba9a9fba71f624d68cab535334d409b7c74532c102ffd4f29f338e2ba

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    reputable (0.1.3)
+    reputable (0.1.4)
       connection_pool (~> 2.2)
       redis (>= 4.0, < 6.0)
 

data/README.md

@@ -80,6 +80,9 @@ All configuration can be set via environment variables:
 # Required
 REPUTABLE_REDIS_URL=rediss://user:password@your-dragonfly.example.com:6379
 
+# Optional: Base URL for verification and API endpoints (domain only)
+REPUTABLE_BASE_URL=https://api.reputable.click
+
 # Optional: Disable entirely (useful for test environments)
 REPUTABLE_ENABLED=false
 
@@ -138,7 +141,7 @@ Reputable.configure do |config|
   # Verification Configuration
   # Supports comma-separated list in REPUTABLE_TRUSTED_KEYS or single key in REPUTABLE_TRUSTED_KEY
   config.trusted_keys = ENV['REPUTABLE_TRUSTED_KEYS']&.split(',') || ENV['REPUTABLE_TRUSTED_KEY']
-  config.verification_base_url = ENV['REPUTABLE_VERIFY_URL']     # Base URL of your Reputable API (e.g., https://dev-new-1.verify.reputable.click)
+  config.base_url = ENV['REPUTABLE_BASE_URL'] # Domain only
   
   # Error callback (optional)
   config.on_error = ->(error, context) {
@@ -378,13 +381,20 @@ if suspicious_activity_detected?
   redirect_url = Reputable.verification_url(
     return_url: request.original_url, # Where to send them back after verification
     failure_url: root_url,            # Optional: where to send if they fail/garbage token
-    session_id: session.id            # Optional: link specific session
+    session_id: session.id,           # Optional: link specific session
+    force_challenge: false            # Optional: if true, always show CAPTCHA (for testing)
   )
   
   redirect_to redirect_url
 end
 ```
 
+**Options:**
+- `return_url` (required): Where to redirect after successful verification
+- `failure_url` (optional): Where to redirect on failure (defaults to return_url)
+- `session_id` (optional): Bind verification to a specific session
+- `force_challenge` (optional): If `true`, always show CAPTCHA even for trusted users. Useful for testing the challenge flow.
+
 ### 2. Handling the Return Redirect
 
 When the user passes verification (or is determined to be already trusted/clean), they are immediately redirected back to your `return_url` with signed parameters.

data/lib/reputable/configuration.rb

@@ -14,7 +14,11 @@ module Reputable
                   :default_ttls, :pool_size, :pool_timeout,
                   :connect_timeout, :read_timeout, :write_timeout,
                   :ssl_params, :trusted_proxies, :ip_header_priority,
-                  :on_error, :trusted_keys, :verification_base_url
+                  :on_error, :trusted_keys, :base_url
+
+    # Alias for backward compatibility
+    alias_method :verification_base_url, :base_url
+    alias_method :verification_base_url=, :base_url=
 
     # Default TTLs in seconds (0 = forever)
     DEFAULT_TTLS = {
@@ -73,7 +77,7 @@ module Reputable
       elsif ENV["REPUTABLE_SECRET_KEY"]
         @trusted_keys = [ENV["REPUTABLE_SECRET_KEY"]]
       end
-      @verification_base_url = ENV.fetch("REPUTABLE_VERIFY_URL", "https://api.reputable.click")
+      @base_url = ENV.fetch("REPUTABLE_BASE_URL", "https://api.reputable.click")
     end
 
     # Alias for backward compatibility

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.4"
+  VERSION = "0.1.6"
 end

data/lib/reputable.rb

@@ -126,7 +126,12 @@ module Reputable
     end
 
     # Generate a signed verification URL
-    def verification_url(return_url:, failure_url: nil, session_id: nil)
+    # @param return_url [String] URL to redirect to after successful verification
+    # @param failure_url [String, nil] URL to redirect to on failure (optional)
+    # @param session_id [String, nil] Session ID to bind the verification to (optional)
+    # @param force_challenge [Boolean] If true, always show CAPTCHA even for trusted users (default: false)
+    # @return [String] The signed verification URL
+    def verification_url(return_url:, failure_url: nil, session_id: nil, force_challenge: false)
       keys = configuration.trusted_keys
       if keys.nil? || keys.empty?
         logger&.warn "Reputable: Missing trusted_keys, cannot generate verification URL"
@@ -136,7 +141,7 @@ module Reputable
       # Use the first key for signing new requests
       secret = keys.first
 
-      base_url = configuration.verification_base_url
+      base_url = configuration.base_url
       # Ensure base_url doesn't have a trailing slash, then append the verify path
       base_url = base_url.chomp("/")
       verify_url = "#{base_url}/_reputable/verify"
@@ -150,6 +155,7 @@ module Reputable
         returnUrl: return_url,
         failureUrl: failure_url,
         sessionId: session_id,
+        forceChallenge: force_challenge,
         iat: Time.now.to_i
       }
       encoded_payload = base64url_encode(JSON.generate(payload))

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.6
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-26 00:00:00.000000000 Z
+date: 2025-12-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis