reputable 0.1.5 → 0.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d8e38d02c6ad20f915ff71f489780dea010d1304132ba5f1946082e023ff797
-  data.tar.gz: 712a5a0eeadd88a5127a0d9086c57d4566c6074440e93724deaf28186cf0c55d
+  metadata.gz: 3c8047e39b4f09d6580aeba68d04e3231c2774b9f0eac1d7c70591b7e45e11df
+  data.tar.gz: 14aecba661b4bd57381f496274dfd0185cc7ef1e7332ab71d2ce56d623935cb8
 SHA512:
-  metadata.gz: bbffa423a948e82c995e5cce48f93356cb0f44519106872e588637a11678b980a26a6290d59289851130ddba212897172b5aaa343ae6b73ebd7d39e15d8a53ce
-  data.tar.gz: c18bec4b986c8a83cba202130ee3dcfcc2f999256c36622020768112285309bf1aca4744518ed0edeed5423b4dc538edf86f5c4f2a4dd97112cde6602a09cc8c
+  metadata.gz: 34507a4124cca8739008ccf9bc1762226aeef05c994fb861be47bc08eb4e4b06dcad501082750cf56b6f9025b0e1d7596bc057da761bba23c94b583048096425
+  data.tar.gz: 67d7c49193f2c2492d49cc34a0e5051f45db49ed98f7d62a7623fc32cfc753f481da5c6ba9a9fba71f624d68cab535334d409b7c74532c102ffd4f29f338e2ba

data/README.md

@@ -381,13 +381,20 @@ if suspicious_activity_detected?
   redirect_url = Reputable.verification_url(
     return_url: request.original_url, # Where to send them back after verification
     failure_url: root_url,            # Optional: where to send if they fail/garbage token
-    session_id: session.id            # Optional: link specific session
+    session_id: session.id,           # Optional: link specific session
+    force_challenge: false            # Optional: if true, always show CAPTCHA (for testing)
   )
   
   redirect_to redirect_url
 end
 ```
 
+**Options:**
+- `return_url` (required): Where to redirect after successful verification
+- `failure_url` (optional): Where to redirect on failure (defaults to return_url)
+- `session_id` (optional): Bind verification to a specific session
+- `force_challenge` (optional): If `true`, always show CAPTCHA even for trusted users. Useful for testing the challenge flow.
+
 ### 2. Handling the Return Redirect
 
 When the user passes verification (or is determined to be already trusted/clean), they are immediately redirected back to your `return_url` with signed parameters.

data/lib/reputable/configuration.rb

@@ -77,7 +77,7 @@ module Reputable
       elsif ENV["REPUTABLE_SECRET_KEY"]
         @trusted_keys = [ENV["REPUTABLE_SECRET_KEY"]]
       end
-      @base_url = ENV["REPUTABLE_BASE_URL"]
+      @base_url = ENV.fetch("REPUTABLE_BASE_URL", "https://api.reputable.click")
     end
 
     # Alias for backward compatibility

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.5"
+  VERSION = "0.1.6"
 end

data/lib/reputable.rb

@@ -126,7 +126,12 @@ module Reputable
     end
 
     # Generate a signed verification URL
-    def verification_url(return_url:, failure_url: nil, session_id: nil)
+    # @param return_url [String] URL to redirect to after successful verification
+    # @param failure_url [String, nil] URL to redirect to on failure (optional)
+    # @param session_id [String, nil] Session ID to bind the verification to (optional)
+    # @param force_challenge [Boolean] If true, always show CAPTCHA even for trusted users (default: false)
+    # @return [String] The signed verification URL
+    def verification_url(return_url:, failure_url: nil, session_id: nil, force_challenge: false)
       keys = configuration.trusted_keys
       if keys.nil? || keys.empty?
         logger&.warn "Reputable: Missing trusted_keys, cannot generate verification URL"
@@ -150,6 +155,7 @@ module Reputable
         returnUrl: return_url,
         failureUrl: failure_url,
         sessionId: session_id,
+        forceChallenge: force_challenge,
         iat: Time.now.to_i
       }
       encoded_payload = base64url_encode(JSON.generate(payload))

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.6
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-26 00:00:00.000000000 Z
+date: 2025-12-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis