sift 4.5.1 → 4.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0be867318fbb8cb5cb85b614e48de3748def9c8d9a6122c066c785d65c6b3b48
-  data.tar.gz: abf0fe3da0bbf939f29cdb1071e9acb7db62473bc9fdc37dcde52631db930abc
+  metadata.gz: '0316139e47e2c117655c7f8f75497c78e7f657552e816f2ec40f1e2c0a616d67'
+  data.tar.gz: 628cddc8debde4d8ad15bafb96a266a6cfbaaa2e1e78ee9202d9a4388a978fb9
 SHA512:
-  metadata.gz: cc2d9d80295f6f4605413d001bb29b4745e28ecc58e9595a526bd8a7d8529d2b63dc14fce063e1ee347bde3b9d9370ad160917a795e59377a54d5eeb50f876b7
-  data.tar.gz: f5f75423865db471ed649a4146a8e3e388203977ec6607c20966c9622f9b074f8e149574f9bbe28db22f44b21203e9ae082b52386bea6f8c2096afd869955a65
+  metadata.gz: c9e69e75d82c24f624ae4049e539cf127966de795196cff8a7025a861deb54a7f53a5e21ab90611d3c1de4c1cc5c300905a7bffd6afff3fe16f2942c1b494565
+  data.tar.gz: 9997e80b62404f3677b60bf43021b0c700cf26d60d6aff7fa8a447a3757338a2fd988bccb83aa87ddcfe44ea476c5c76e116a99e5de69c8b86bffbf796aff7d2

data/.github/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        ruby-version: ['2.4.2']
+        ruby-version: ['2.7', '3.1', '3.2', '3.3']
     steps:
       - uses: actions/checkout@v4
       - name: Set up Ruby
@@ -36,7 +36,7 @@ jobs:
     if: ${{ github.ref == 'refs/heads/master' }}
     strategy:
       matrix:
-        ruby-version: [ '2.4.2' ]
+        ruby-version: ['2.7', '3.1', '3.2', '3.3']
     steps:
       - uses: actions/checkout@v4
       - name: Set up Ruby

data/HISTORY

@@ -1,3 +1,14 @@
+=== 4.7.0 2026-08-27
+- Added support for $nationality, $year_of_birth fields on $create_account, $update_account events
+- Added support for $kyc field on $create_account, $update_account, $transaction, $create_order, $update_order, $verification events
+- Added support for $geo, $bot_identification fields on $create_account, $update_account, $login, $transaction, $create_order, $update_order events
+
+=== 4.6.0 2026-02-10
+- Bump the minimum version of httparty to 0.23.3 to ensure protection against CVE-2025-68696
+- Refactor Client to use dedicated internal HTTP clients for different API endpoints
+- Fix Verification API methods to use correct version parameter
+- Increase minimum required version for Ruby to 2.7.0
+
 === 4.5.1 2025-04-07
 - Fix Verification URLs
 

data/README.md

@@ -4,7 +4,7 @@ The official Ruby bindings for the latest version (v205) of the [Sift API](https
 
 ## Requirements
 
-  * Ruby 2.0.0 or above.
+  * Ruby 2.7.0 or above.
 
 
 ## Installation
@@ -87,6 +87,77 @@ response.api_error_message  # Error message associated with status Error Code
 response = client.score(user_id)
 ```
 
+### New KYC Signals, Geo & Bot Detection
+
+```ruby
+# $verification event with KYC outcome
+response = client.track("$verification", {
+  "$user_id"            => "23056",
+  "$verification_type"  => "$kyc",
+  "$status"             => "$success",
+  "$kyc" => {
+    "$names_match"           => true,
+    "$kyc_level"             => "$basic",
+    "$bin_nationality_match" => false,
+    "$provider"              => "lexisnexis"
+  }
+})
+
+# $create_account with account-level identity attributes
+response = client.track("$create_account", {
+  "$user_id"       => "23056",
+  "$nationality"   => "US",
+  "$year_of_birth" => 1985,
+  "$kyc" => {
+    "$names_match"       => true,
+    "$kyc_level"         => "$full",
+    "$provider"          => "prove"
+  },
+  "$geo" => {
+    "$uuid"     => "gc-abc-123",
+    "$provider" => "geocomply"
+  },
+  "$bot_identification" => {
+    "$result"   => "$human",
+    "$provider" => "datadome"
+  }
+})
+
+# $login event with geo and bot-detection signals
+response = client.track("$login", {
+  "$user_id"      => "23056",
+  "$login_status" => "$success",
+  "$geo" => {
+    "$uuid"     => "gc-abc-123",
+    "$provider" => "geocomply"
+  },
+  "$bot_identification" => {
+    "$result"   => "$human",
+    "$provider" => "datadome"
+  }
+})
+
+# $transaction event with KYC, geo, and bot-detection signals
+response = client.track("$transaction", {
+  "$user_id"        => "23056",
+  "$amount"         => 15230000,
+  "$currency_code"  => "USD",
+  "$kyc" => {
+    "$names_match"           => true,
+    "$bin_nationality_match" => true,
+    "$provider"              => "lexisnexis"
+  },
+  "$geo" => {
+    "$uuid"     => "gc-abc-123",
+    "$provider" => "geocomply"
+  },
+  "$bot_identification" => {
+    "$result"   => "$suspected",
+    "$provider" => "human_security"
+  }
+})
+```
+
 ## Decisions
 
 To learn more about the decisions endpoint visit our [developer docs](https://sift.com/developers/docs/ruby/decisions-api/get-decisions).

data/lib/sift/client/decision/apply_to.rb

@@ -21,7 +21,7 @@ module Sift
           time
         }
 
-        attr_reader :decision_id, :configs, :getter, :api_key
+        attr_reader :decision_id, :configs, :getter, :api_key, :client_class
 
         PROPERTIES.each do |attribute|
           class_eval %{
@@ -31,11 +31,12 @@ module Sift
           }
         end
 
-        def initialize(api_key, decision_id, configs)
+        def initialize(api_key, decision_id, configs, client_class = Sift::Client)
           @api_key = api_key
           @decision_id = decision_id
           @configs = configs
           @getter = Utils::HashGetter.new(configs)
+          @client_class = client_class
         end
 
         def run
@@ -58,7 +59,8 @@ module Sift
         def send_request
           Router.post(path, {
             body: request_body,
-            headers: headers
+            headers: headers,
+            client_class: client_class
           })
         end
 
@@ -79,6 +81,8 @@ module Sift
             validator.valid_order?
           elsif applying_to_session?
             validator.valid_session?
+          elsif applying_to_content?
+            validator.valid_content?
           else
             validator.valid_user?
           end

data/lib/sift/client/decision.rb

@@ -10,11 +10,12 @@ module Sift
     class Decision
       FILTER_PARAMS = %w{ limit entity_type abuse_types from }
 
-      attr_reader :account_id, :api_key
+      attr_reader :account_id, :api_key, :client_class
 
-      def initialize(api_key, account_id)
+      def initialize(api_key, account_id, client_class = Sift::Client)
         @account_id = account_id
         @api_key = api_key
+        @client_class = client_class
       end
 
       def list(options = {})
@@ -25,7 +26,8 @@ module Sift
         else
           Router.get(index_path, {
             query: build_query(getter),
-            headers: auth_header
+            headers: auth_header,
+            client_class: client_class
           })
         end
       end
@@ -44,7 +46,7 @@ module Sift
         getter = Utils::HashGetter.new(configs)
         configs[:account_id] = account_id
 
-        ApplyTo.new(api_key, getter.get(:decision_id), configs).run
+        ApplyTo.new(api_key, getter.get(:decision_id), configs, client_class).run
       end
 
       def index_path
@@ -54,7 +56,7 @@ module Sift
       private
 
       def request_next_page(path)
-        Router.get(path, headers: auth_header)
+        Router.get(path, headers: auth_header, client_class: client_class)
       end
 
       def auth_header
@@ -63,4 +65,3 @@ module Sift
     end
   end
 end
-

data/lib/sift/client.rb

@@ -2,9 +2,6 @@ require "httparty"
 require "multi_json"
 require "base64"
 
-require_relative "./client/decision"
-require_relative "./error"
-
 module Sift
 
   # Represents the payload returned from a call through the track API
@@ -94,17 +91,36 @@ module Sift
     API_ENDPOINT = ENV["SIFT_RUBY_API_URL"] || 'https://api.siftscience.com'
     API3_ENDPOINT = ENV["SIFT_RUBY_API3_URL"] || 'https://api3.siftscience.com'
 
+    # Maintain backward compatibility for users who may rely on HTTParty methods
     include HTTParty
     base_uri API_ENDPOINT
 
     attr_reader :api_key, :account_id
 
-    def self.build_auth_header(api_key)
-      { "Authorization" => "Basic #{Base64.encode64(api_key)}" }
-    end
+    class << self
+      def build_auth_header(api_key)
+        { "Authorization" => "Basic #{Base64.strict_encode64(api_key + ":")}" }
+      end
+
+      def user_agent
+        "sift-ruby/#{VERSION}"
+      end
+
+      # Factory methods for internal API executors that inherit from the current class context.
+      # This ensures that subclasses of Client propagate their HTTParty configuration
+      # to these internal clients.
 
-    def self.user_agent
-      "sift-ruby/#{VERSION}"
+      def api_client
+        @api_client ||= Class.new(self) do
+          base_uri API_ENDPOINT
+        end
+      end
+
+      def api3_client
+        @api3_client ||= Class.new(self) do
+          base_uri API3_ENDPOINT
+        end
+      end
     end
 
     # Constructor
@@ -256,7 +272,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.post(path, options)
+      response = self.class.api_client.post(path, options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -319,7 +335,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.get(Sift.score_api_path(user_id, version), options)
+      response = self.class.api_client.get(Sift.score_api_path(user_id, version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -364,6 +380,7 @@ module Sift
       abuse_types = opts[:abuse_types]
       api_key = opts[:api_key] || @api_key
       timeout = opts[:timeout] || @timeout
+      version = opts[:version] || @version
       include_score_percentiles = opts[:include_score_percentiles]
 
       raise("user_id must be a non-empty string") if (!user_id.is_a? String) || user_id.to_s.empty?
@@ -382,7 +399,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.get(Sift.user_score_api_path(user_id, @version), options)
+      response = self.class.api_client.get(Sift.user_score_api_path(user_id, version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -420,6 +437,7 @@ module Sift
       abuse_types = opts[:abuse_types]
       api_key = opts[:api_key] || @api_key
       timeout = opts[:timeout] || @timeout
+      version = opts[:version] || @version
 
       raise("user_id must be a non-empty string") if (!user_id.is_a? String) || user_id.to_s.empty?
       raise("Bad api_key parameter") if api_key.empty?
@@ -434,7 +452,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.post(Sift.user_score_api_path(user_id, @version), options)
+      response = self.class.api_client.post(Sift.user_score_api_path(user_id, version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -532,7 +550,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.delete(Sift.users_label_api_path(user_id, version), options)
+      response = self.class.api_client.delete(Sift.users_label_api_path(user_id, version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -569,8 +587,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      uri = API3_ENDPOINT + Sift.workflow_status_path(account_id, run_id)
-      response = self.class.get(uri, options)
+      response = self.class.api3_client.get(Sift.workflow_status_path(account_id, run_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -607,8 +624,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      uri = API3_ENDPOINT + Sift.user_decisions_api_path(account_id, user_id)
-      response = self.class.get(uri, options)
+      response = self.class.api3_client.get(Sift.user_decisions_api_path(account_id, user_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -645,8 +661,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      uri = API3_ENDPOINT + Sift.order_decisions_api_path(account_id, order_id)
-      response = self.class.get(uri, options)
+      response = self.class.api3_client.get(Sift.order_decisions_api_path(account_id, order_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -685,8 +700,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      uri = API3_ENDPOINT + Sift.session_decisions_api_path(account_id, user_id, session_id)
-      response = self.class.get(uri, options)
+      response = self.class.api3_client.get(Sift.session_decisions_api_path(account_id, user_id, session_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -725,8 +739,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      uri = API3_ENDPOINT + Sift.content_decisions_api_path(account_id, user_id, content_id)
-      response = self.class.get(uri, options)
+      response = self.class.api3_client.get(Sift.content_decisions_api_path(account_id, user_id, content_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -748,7 +761,7 @@ module Sift
 
     def build_default_headers_post(api_key)
       {
-        "Authorization" => "Basic #{Base64.encode64(api_key+":")}",
+        "Authorization" => "Basic #{Base64.strict_encode64(api_key+":")}",
         "User-Agent" => "SiftScience/v#{@version} sift-ruby/#{VERSION}",
         "Content-Type" => "application/json"
       }
@@ -768,7 +781,7 @@ module Sift
         :headers => build_default_headers_post(api_key)
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
-      response = self.class.post(Sift.verification_api_send_path(@version), options)
+      response = self.class.api_client.post(Sift.verification_api_send_path(version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -787,7 +800,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.post(Sift.verification_api_resend_path(@version), options)
+      response = self.class.api_client.post(Sift.verification_api_resend_path(version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -806,7 +819,7 @@ module Sift
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
 
-      response = self.class.post(Sift.verification_api_check_path(@version), options)
+      response = self.class.api_client.post(Sift.verification_api_check_path(version), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -831,7 +844,7 @@ module Sift
         :basic_auth => { :username => api_key, :password => "" }
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
-      response = self.class.post(API_ENDPOINT + Sift.psp_merchant_api_path(account_id), options)
+      response = self.class.api_client.post(Sift.psp_merchant_api_path(account_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -858,7 +871,7 @@ module Sift
         :basic_auth => { :username => api_key, :password => "" }
       }
       options.merge!(:timeout => timeout) unless timeout.nil?
-      response = self.class.put(API_ENDPOINT + Sift.psp_merchant_id_api_path(account_id, merchant_id), options)
+      response = self.class.api_client.put(Sift.psp_merchant_id_api_path(account_id, merchant_id), options)
       Response.new(response.body, response.code, response.response)
     end
 
@@ -882,7 +895,7 @@ module Sift
       :basic_auth => { :username => api_key, :password => "" }
     }
     options.merge!(:timeout => timeout) unless timeout.nil?
-    response = self.class.get(API_ENDPOINT + Sift.psp_merchant_id_api_path(account_id, merchant_id), options)
+    response = self.class.api_client.get(Sift.psp_merchant_id_api_path(account_id, merchant_id), options)
     Response.new(response.body, response.code, response.response)
   end
 
@@ -911,7 +924,7 @@ module Sift
       :query => query
     }
     options.merge!(:timeout => timeout) unless timeout.nil?
-    response = self.class.get(API_ENDPOINT + Sift.psp_merchant_api_path(account_id), options)
+    response = self.class.api_client.get(Sift.psp_merchant_api_path(account_id), options)
     Response.new(response.body, response.code, response.response)
   end
 
@@ -926,7 +939,7 @@ module Sift
     end
 
     def decision_instance
-      @decision_instance ||= Decision.new(api_key, account_id)
+      @decision_instance ||= Decision.new(api_key, account_id, self.class)
     end
 
     def delete_nils(properties)
@@ -943,4 +956,8 @@ module Sift
       end
     end
   end
+
+  require_relative "./client/decision"
+  require_relative "./error"
+
 end

data/lib/sift/router.rb

@@ -2,20 +2,23 @@ require_relative "./version"
 require_relative "./client"
 
 module Sift
-  class Router
-    include HTTParty
+  class Router < Client
 
     class << self
       def get(path, options = {})
+        client_class = options.delete(:client_class) || Sift::Client
+        options[:base_uri] = nil
         serialize_body(options)
         add_default_headers(options)
-        wrap_response(super(path, options))
+        wrap_response(client_class.api3_client.get(path, options))
       end
 
       def post(path, options = {})
+        client_class = options.delete(:client_class) || Sift::Client
+        options[:base_uri] = nil
         serialize_body(options)
         add_default_headers(options)
-        wrap_response(super(path, options))
+        wrap_response(client_class.api3_client.post(path, options))
       end
 
       def serialize_body(options)

data/lib/sift/version.rb

@@ -1,5 +1,5 @@
 module Sift
-  VERSION = "4.5.1"
+  VERSION = "4.7.0"
   API_VERSION = "205"
   VERIFICATION_API_VERSION = "1.1"
 end

data/sift.gemspec

@@ -7,10 +7,10 @@ Gem::Specification.new do |s|
   s.version     = Sift::VERSION
   s.platform    = Gem::Platform::RUBY
   s.authors     = ["Fred Sadaghiani", "Yoav Schatzberg", "Jacob Burnim"]
-  s.email       = ["support@siftscience.com"]
-  s.homepage    = "http://siftscience.com"
-  s.summary     = %q{Sift Science Ruby API Gem}
-  s.description = %q{Sift Science Ruby API. Please see http://siftscience.com for more details.}
+  s.email       = ["support@sift.com"]
+  s.homepage    = "http://sift.com"
+  s.summary     = %q{Sift Ruby API Gem}
+  s.description = %q{Sift Ruby API. Please see http://sift.com for more details.}
 
   s.rubyforge_project = "sift"
 
@@ -19,6 +19,8 @@ Gem::Specification.new do |s|
   s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
   s.require_paths = ["lib"]
 
+  s.required_ruby_version     = '>= 2.7.0'
+
   # Gems that must be intalled for sift to compile and build
   s.add_development_dependency "rspec", "~> 3.5"
   s.add_development_dependency "rspec_junit_formatter"
@@ -26,7 +28,7 @@ Gem::Specification.new do |s|
   s.add_development_dependency "webmock", ">= 1.16.0", "< 2"
 
   # Gems that must be intalled for sift to work
-  s.add_dependency "httparty", ">= 0.11.0"
+  s.add_dependency "httparty", ">= 0.23.3"
   s.add_dependency "multi_json", ">= 1.0"
 
   s.add_development_dependency("rake")

data/spec/unit/client/decision/apply_to_spec.rb

@@ -254,7 +254,7 @@ module Sift
         def put_auth_in_url(api_key, url)
           protocal, uri = url.split(/(?<=https\:\/\/)/)
 
-          protocal + api_key + "@" + uri
+          protocal + api_key + ":@" + uri
         end
       end
     end

data/spec/unit/client/decision_spec.rb

@@ -20,7 +20,7 @@ module Sift
         #
         protocal, uri = decision.index_path.split(/(?<=https\:\/\/)/)
 
-        protocal + api_key + "@" + uri
+        protocal + api_key + ":@" + uri
       }
 
       describe "#list" do

data/spec/unit/client_structured_fields_spec.rb

@@ -0,0 +1,60 @@
+require_relative '../spec_helper'
+require 'sift'
+
+describe Sift::Client do
+
+  before :each do
+    Sift.api_key = nil
+  end
+
+  it "Successfully submits a $create_account event with KYC, geo, and bot-detection structured fields" do
+    response_json = { :status => 0, :error_message => "OK" }
+    stub_request(:post, "https://api.siftscience.com/v205/events").
+      with { |request|
+        parsed_body = JSON.parse(request.body)
+        expect(parsed_body["$nationality"]).to eq("US")
+        expect(parsed_body["$year_of_birth"]).to eq(1985)
+        expect(parsed_body["$kyc"]).to eq({
+          "$names_match" => true,
+          "$kyc_level" => "$basic",
+          "$bin_nationality_match" => true,
+          "$provider" => "lexisnexis"
+        })
+        expect(parsed_body["$geo"]).to eq({
+          "$uuid" => "gc-abc-123",
+          "$provider" => "geocomply"
+        })
+        expect(parsed_body["$bot_identification"]).to eq({
+          "$result" => "$human",
+          "$provider" => "datadome"
+        })
+      }.to_return(:status => 200, :body => MultiJson.dump(response_json), :headers => {})
+
+    api_key = "foobar"
+    properties = {
+      :$type => "$create_account",
+      :$user_id => "23056",
+      :$nationality => "US",
+      :$year_of_birth => 1985,
+      :$kyc => {
+        :$names_match => true,
+        :$kyc_level => "$basic",
+        :$bin_nationality_match => true,
+        :$provider => "lexisnexis"
+      },
+      :$geo => {
+        :$uuid => "gc-abc-123",
+        :$provider => "geocomply"
+      },
+      :$bot_identification => {
+        :$result => "$human",
+        :$provider => "datadome"
+      }
+    }
+
+    response = Sift::Client.new(:api_key => api_key, :version => "205")
+              .track("$create_account", properties)
+    expect(response.ok?).to eq(true)
+    expect(response.api_status).to eq(0)
+  end
+end

data/spec/unit/client_validationapi_spec.rb

@@ -88,4 +88,50 @@ describe Sift::Client do
 
   end
 
+  # Regression tests for verification API version bug fix
+  # These tests ensure verification methods use verification_version (1.1)
+  # instead of the events API version (205)
+
+  it "Uses verification API version (1.1) not events API version (205) for verification_send" do
+    api_key = "test_key"
+    response_json = { :status => 0, :error_message => "OK"}
+
+    # Should call v1.1, NOT v205
+    stub_request(:post, "https://test_key:@api.siftscience.com/v1.1/verification/send")
+      .to_return(:status => 200, :body => MultiJson.dump(response_json))
+
+    # Client defaults: version=205 (events), verification_version=1.1
+    response = Sift::Client.new(:api_key => api_key).verification_send(valid_send_properties)
+
+    expect(response.ok?).to eq(true)
+  end
+
+  it "Uses verification API version (1.1) not events API version (205) for verification_resend" do
+    api_key = "test_key"
+    response_json = { :status => 0, :error_message => "OK"}
+
+    # Should call v1.1, NOT v205
+    stub_request(:post, "https://test_key:@api.siftscience.com/v1.1/verification/resend")
+      .to_return(:status => 200, :body => MultiJson.dump(response_json))
+
+    # Client defaults: version=205 (events), verification_version=1.1
+    response = Sift::Client.new(:api_key => api_key).verification_resend(valid_resend_properties)
+
+    expect(response.ok?).to eq(true)
+  end
+
+  it "Uses verification API version (1.1) not events API version (205) for verification_check" do
+    api_key = "test_key"
+    response_json = { :status => 0, :error_message => "OK"}
+
+    # Should call v1.1, NOT v205
+    stub_request(:post, "https://test_key:@api.siftscience.com/v1.1/verification/check")
+      .to_return(:status => 200, :body => MultiJson.dump(response_json))
+
+    # Client defaults: version=205 (events), verification_version=1.1
+    response = Sift::Client.new(:api_key => api_key).verification_check(valid_check_properties)
+
+    expect(response.ok?).to eq(true)
+  end
+
 end

data/spec/unit/configuration_spec.rb

@@ -0,0 +1,67 @@
+require_relative "../spec_helper"
+require "sift"
+require "logger"
+
+describe "Sift::Client Configuration Patterns" do
+  let(:api_key) { "test_api_key" }
+
+  it "propagates global Sift::Client configuration to internal clients" do
+    Sift::Client.default_timeout 5
+    
+    # Internal executors should inherit this
+    expect(Sift::Client.api_client.default_options[:timeout]).to eq(5)
+    expect(Sift::Client.api3_client.default_options[:timeout]).to eq(5)
+    
+    # Reset
+    Sift::Client.default_timeout 2
+  end
+
+  it "allows independent subclass configurations" do
+    class SubclassA < Sift::Client; end
+    class SubclassB < Sift::Client; end
+
+    SubclassA.default_timeout 10
+    SubclassB.default_timeout 20
+
+    expect(SubclassA.api_client.default_options[:timeout]).to eq(10)
+    expect(SubclassB.api_client.default_options[:timeout]).to eq(20)
+    
+    # Ensure they didn't leak to parent
+    expect(Sift::Client.api_client.default_options[:timeout]).to be <= 5
+  end
+
+  it "propagates complex settings like loggers to subclasses" do
+    class LoggingClient < Sift::Client; end
+    
+    logger = Logger.new(nil)
+    LoggingClient.logger logger, :debug, :curl
+
+    expect(LoggingClient.api_client.default_options[:logger]).to eq(logger)
+    expect(LoggingClient.api_client.default_options[:log_level]).to eq(:debug)
+    expect(LoggingClient.api_client.default_options[:log_format]).to eq(:curl)
+    
+    # Ensure Sift::Client remains untouched
+    expect(Sift::Client.api_client.default_options[:logger]).to be_nil
+  end
+
+  it "respects inheritance chain for Decisions and Router" do
+    class DecisionClient < Sift::Client; end
+    DecisionClient.default_timeout 15
+
+    client = DecisionClient.new(api_key: api_key, account_id: "acc")
+    
+    # Verify the executor used by the Router is the one from DecisionClient
+    expect(DecisionClient.api3_client.default_options[:timeout]).to eq(15)
+
+    # We want to ensure that when Router.get is called, it uses DecisionClient.api3_client
+    # In lib/sift/router.rb, we have:
+    # wrap_response(client_class.api3_client.get(path, options))
+    
+    expect(DecisionClient.api3_client).to receive(:get).and_call_original
+
+    # Mock the request to avoid network calls
+    stub_request(:get, /api3.siftscience.com/)
+    
+    client.get_user_decisions("user_1")
+  end
+end

data/test_integration_app/events_api/test_events_api.rb

@@ -24,7 +24,16 @@ class EventsAPI
             "$brand_name"   => "sift",
             "$site_domain"  => "sift.com",
             "$site_country" => "US",
-        
+
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "datadome"
+            },
+
             # Send this information with a login from a BROWSER client.
             "$browser"    => {
                 "$user_agent"       => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36",
@@ -107,13 +116,27 @@ class EventsAPI
         
             # For marketplaces, use $seller_user_id to identify the seller
             "$seller_user_id"     => "slinkys_emporium",
-        
+
+            "$kyc" => {
+                "$names_match"           => true,
+                "$bin_nationality_match" => false,
+                "$provider"              => "prove"
+            },
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "human_security"
+            },
+
             # Sample Custom Fields
             "digital_wallet"      => "apple_pay", # "google_wallet", etc.
             "coupon_code"         => "dollarMadness",
             "shipping_choice"     => "FedEx Ground Courier",
             "is_first_time_buyer" => false,
-        
+
             # Send this information from a BROWSER client.
             "$browser"    => {
                 "$user_agent"       => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36",
@@ -121,7 +144,7 @@ class EventsAPI
                 "$content_language" => "en-GB"
             }
         }
-        
+
         return @@client.track("$transaction", properties, :warnings => 'true')
     end
     
@@ -233,7 +256,21 @@ class EventsAPI
             "coupon_code"         => "dollarMadness",
             "shipping_choice"     => "FedEx Ground Courier",
             "is_first_time_buyer" => false,
-        
+
+            "$kyc" => {
+                "$names_match"       => true,
+                "$kyc_level"         => "$basic",
+                "$provider"          => "lexisnexis"
+            },
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "datadome"
+            },
+
             # Send this information from a BROWSER client.
             "$browser"    => {
                 "$user_agent"       => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36",
@@ -241,7 +278,7 @@ class EventsAPI
                 "$content_language" => "en-GB"
             }
         }
-        
+
         return @@client.track("$create_order", properties)
     end
     
@@ -457,7 +494,23 @@ class EventsAPI
         
             "$social_sign_on_type"  => "$twitter",
             "$account_types"        => ["merchant", "premium"],
-        
+
+            "$nationality"   => "US",
+            "$year_of_birth" => 1985,
+            "$kyc" => {
+                "$names_match" => true,
+                "$kyc_level"   => "$full",
+                "$provider"    => "prove"
+            },
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "datadome"
+            },
+
             # Send this information from a BROWSER client.
             "$browser"    => {
                 "$user_agent"       => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36",
@@ -465,7 +518,7 @@ class EventsAPI
                 "$content_language" => "en-GB"
             }
         }
-        
+
         return @@client.track("$update_account", properties)
     end
     
@@ -585,7 +638,23 @@ class EventsAPI
         
             "$social_sign_on_type"   => "$twitter",
             "$account_types"         => ["merchant", "premium"],
-        
+
+            "$nationality"   => "US",
+            "$year_of_birth" => 1985,
+            "$kyc" => {
+                "$names_match" => true,
+                "$kyc_level"   => "$basic",
+                "$provider"    => "lexisnexis"
+            },
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "datadome"
+            },
+
             # Suggested Custom Fields
             "twitter_handle"          => "billyjones",
             "work_phone"              => "1-347-555-5921",
@@ -618,7 +687,14 @@ class EventsAPI
             "$verified_event"     => "$login",
             "$reason"             => "$automated_rule", # Verification was triggered based on risk score
             "$verification_type"  => "$sms",
-            "$verified_value"     => "14155551212"
+            "$verified_value"     => "14155551212",
+
+            "$kyc" => {
+                "$names_match"           => true,
+                "$kyc_level"             => "$basic",
+                "$bin_nationality_match" => false,
+                "$provider"              => "lexisnexis"
+            }
         }
         
         return @@client.track("$verification", properties)
@@ -828,7 +904,21 @@ class EventsAPI
             "coupon_code"         => "dollarMadness",
             "shipping_choice"     => "FedEx Ground Courier",
             "is_first_time_buyer" => false,
-        
+
+            "$kyc" => {
+                "$names_match" => true,
+                "$kyc_level"   => "$basic",
+                "$provider"    => "lexisnexis"
+            },
+            "$geo" => {
+                "$uuid"     => "gc-abc-123",
+                "$provider" => "geocomply"
+            },
+            "$bot_identification" => {
+                "$result"   => "$human",
+                "$provider" => "datadome"
+            },
+
             # Send this information from a BROWSER client.
             "$browser"    => {
                 "$user_agent"       => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36",
@@ -836,7 +926,7 @@ class EventsAPI
                 "$content_language" => "en-GB"
             }
         }
-        
+
         return @@client.track("$update_order", properties)
     end
     

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sift
 version: !ruby/object:Gem::Version
-  version: 4.5.1
+  version: 4.7.0
 platform: ruby
 authors:
 - Fred Sadaghiani
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-04-07 00:00:00.000000000 Z
+date: 2026-09-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -80,14 +80,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.11.0
+        version: 0.23.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.11.0
+        version: 0.23.3
 - !ruby/object:Gem::Dependency
   name: multi_json
   requirement: !ruby/object:Gem::Requirement
@@ -116,9 +116,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: Sift Science Ruby API. Please see http://siftscience.com for more details.
+description: Sift Ruby API. Please see http://sift.com for more details.
 email:
-- support@siftscience.com
+- support@sift.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -156,7 +156,9 @@ files:
 - spec/unit/client_label_spec.rb
 - spec/unit/client_psp_merchant_spec.rb
 - spec/unit/client_spec.rb
+- spec/unit/client_structured_fields_spec.rb
 - spec/unit/client_validationapi_spec.rb
+- spec/unit/configuration_spec.rb
 - spec/unit/router_spec.rb
 - spec/unit/validate/decision_spec.rb
 - spec/unit/validate/primitive_spec.rb
@@ -167,7 +169,7 @@ files:
 - test_integration_app/psp_merchants_api/test_psp_merchant_api.rb
 - test_integration_app/score_api/test_score_api.rb
 - test_integration_app/verification_api/test_verification_api.rb
-homepage: http://siftscience.com
+homepage: http://sift.com
 licenses: []
 metadata: {}
 post_install_message:
@@ -178,7 +180,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -188,5 +190,5 @@ requirements: []
 rubygems_version: 3.1.6
 signing_key:
 specification_version: 4
-summary: Sift Science Ruby API Gem
+summary: Sift Ruby API Gem
 test_files: []