@anonympins/fingerprint 0.3.6 → 0.3.7

package/src/php/RequestContext.php

@@ -1,91 +1,91 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint;
-
-/**
- * Représente le contexte d'une requête HTTP, fournissant un accès unifié
- * aux informations nécessaires pour l'analyse de l'empreinte.
- * Cette classe est conçue pour être créée à partir d'un objet de requête
- * standard (ex: PSR-7, Symfony, Laravel).
- */
-class RequestContext
-{
-    public string $clientIp;
-    public string $path;
-    /** @var array<string, string> */
-    public array $headers;
-    /** @var array<string, mixed> */
-    public array $query;
-    /** @var array<string, mixed>|object|null */
-    public $body;
-    /** @var array<string, string> */
-    public array $cookies;
-    public ?string $httpVersion;
-    public int $requestTimestamp;
-
-    /** @var ?array{type: string, name: string} */
-    public ?array $graphqlOperation = null;
-
-    /** @var ?array<string, mixed> */
-    public ?array $newCookieForResponse = null;
-
-    // Propriétés spécifiques qui peuvent être fournies par un proxy inverse
-    public ?string $ja3;
-    public ?string $ja4;
-    public ?string $ja4s;
-    public ?string $ja4h;
-    public ?string $http2Fingerprint;
-    public ?string $tcpFingerprint;
-
-    /**
-     * @param string $clientIp
-     * @param string $path
-     * @param array<string, string> $headers
-     * @param array<string, mixed> $query
-     * @param array<string, mixed>|object|null $body
-     * @param array<string, string> $cookies
-     * @param string|null $httpVersion
-     * @param int|null $requestTimestamp
-     */
-    public function __construct(
-        string $clientIp,
-        string $path,
-        array $headers,
-        array $query,
-        $body,
-        array $cookies,
-        ?string $httpVersion,
-        ?int $requestTimestamp = null
-    ) {
-        $this->clientIp = $clientIp;
-        $this->path = $path;
-        // Normaliser les en-têtes en minuscules pour un accès cohérent
-        $this->headers = array_change_key_case($headers, CASE_LOWER);
-        $this->query = $query;
-        $this->body = $body;
-        $this->cookies = $cookies;
-        $this->httpVersion = $httpVersion;
-        $this->requestTimestamp = $requestTimestamp ?? (int)(microtime(true) * 1000);
-
-        // Extraire les empreintes TLS/HTTP2/TCP si elles sont fournies par les en-têtes
-        $this->ja3 = $this->headers['x-ja3-hash'] ?? null;
-        $this->ja4 = $this->headers['x-ja4-hash'] ?? null;
-        $this->ja4s = $this->headers['x-ja4s-hash'] ?? null;
-        $this->ja4h = $this->headers['x-ja4h-hash'] ?? null;
-        $this->http2Fingerprint = $this->headers['x-http2-fingerprint'] ?? null;
-        $this->tcpFingerprint = $this->headers['x-tcp-fingerprint'] ?? null;
-    }
-    /**
-     * Récupère la valeur d'un en-tête HTTP de manière insensible à la casse.
-     *
-     * @param string $name Le nom de l'en-tête.
-     * @return string|null La valeur de l'en-tête ou null si non trouvé.
-     */
-
-    public function getHeader(string $name): ?string
-    {
-        return $this->headers[strtolower($name)] ?? null;
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint;
+
+/**
+ * Représente le contexte d'une requête HTTP, fournissant un accès unifié
+ * aux informations nécessaires pour l'analyse de l'empreinte.
+ * Cette classe est conçue pour être créée à partir d'un objet de requête
+ * standard (ex: PSR-7, Symfony, Laravel).
+ */
+class RequestContext
+{
+    public string $clientIp;
+    public string $path;
+    /** @var array<string, string> */
+    public array $headers;
+    /** @var array<string, mixed> */
+    public array $query;
+    /** @var array<string, mixed>|object|null */
+    public $body;
+    /** @var array<string, string> */
+    public array $cookies;
+    public ?string $httpVersion;
+    public int $requestTimestamp;
+
+    /** @var ?array{type: string, name: string} */
+    public ?array $graphqlOperation = null;
+
+    /** @var ?array<string, mixed> */
+    public ?array $newCookieForResponse = null;
+
+    // Propriétés spécifiques qui peuvent être fournies par un proxy inverse
+    public ?string $ja3;
+    public ?string $ja4;
+    public ?string $ja4s;
+    public ?string $ja4h;
+    public ?string $http2Fingerprint;
+    public ?string $tcpFingerprint;
+
+    /**
+     * @param string $clientIp
+     * @param string $path
+     * @param array<string, string> $headers
+     * @param array<string, mixed> $query
+     * @param array<string, mixed>|object|null $body
+     * @param array<string, string> $cookies
+     * @param string|null $httpVersion
+     * @param int|null $requestTimestamp
+     */
+    public function __construct(
+        string $clientIp,
+        string $path,
+        array $headers,
+        array $query,
+        $body,
+        array $cookies,
+        ?string $httpVersion,
+        ?int $requestTimestamp = null
+    ) {
+        $this->clientIp = $clientIp;
+        $this->path = $path;
+        // Normaliser les en-têtes en minuscules pour un accès cohérent
+        $this->headers = array_change_key_case($headers, CASE_LOWER);
+        $this->query = $query;
+        $this->body = $body;
+        $this->cookies = $cookies;
+        $this->httpVersion = $httpVersion;
+        $this->requestTimestamp = $requestTimestamp ?? (int)(microtime(true) * 1000);
+
+        // Extraire les empreintes TLS/HTTP2/TCP si elles sont fournies par les en-têtes
+        $this->ja3 = $this->headers['x-ja3-hash'] ?? null;
+        $this->ja4 = $this->headers['x-ja4-hash'] ?? null;
+        $this->ja4s = $this->headers['x-ja4s-hash'] ?? null;
+        $this->ja4h = $this->headers['x-ja4h-hash'] ?? null;
+        $this->http2Fingerprint = $this->headers['x-http2-fingerprint'] ?? null;
+        $this->tcpFingerprint = $this->headers['x-tcp-fingerprint'] ?? null;
+    }
+    /**
+     * Récupère la valeur d'un en-tête HTTP de manière insensible à la casse.
+     *
+     * @param string $name Le nom de l'en-tête.
+     * @return string|null La valeur de l'en-tête ou null si non trouvé.
+     */
+
+    public function getHeader(string $name): ?string
+    {
+        return $this->headers[strtolower($name)] ?? null;
+    }
 }

package/src/php/Store/MongoDbStore.php

@@ -0,0 +1,105 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Store;
+
+/**
+ * Adaptateur de stockage MongoDB pour le moteur Fingerprint.
+ * Utilise la bibliothèque officielle mongodb/mongodb.
+ */
+class MongoDbStore implements IStore
+{
+    /**
+     * @var \MongoDB\Collection
+     */
+    private $collection;
+
+    /**
+     * @param \MongoDB\Collection $collection Collection dédiée au stockage des empreintes
+     */
+    public function __construct($collection)
+    {
+        $this->collection = $collection;
+    }
+
+    public function get(string $key)
+    {
+        $doc = $this->collection->findOne(['_id' => $key]);
+        if (!$doc) {
+            return null;
+        }
+
+        // Vérification d'expiration active pour bypasser le délai de 60s du démon de MongoDB
+        if (isset($doc['expiresAt'])) {
+            $expiresAt = $doc['expiresAt'];
+            if ($expiresAt instanceof \MongoDB\BSON\UTCDateTime) {
+                $expiresAtMs = $expiresAt->toDateTime()->getTimestamp() * 1000;
+                $nowMs = (int)(microtime(true) * 1000);
+                if ($expiresAtMs < $nowMs) {
+                    $this->delete($key);
+                    return null;
+                }
+            }
+        }
+
+        return isset($doc['value']) ? json_decode($doc['value'], true) : null;
+    }
+
+    public function set(string $key, $value, ?int $ttl = null): void
+    {
+        $doc = [
+            '_id' => $key,
+            'value' => json_encode($value),
+        ];
+
+        if ($ttl !== null && $ttl > 0) {
+            $doc['expiresAt'] = new \MongoDB\BSON\UTCDateTime((time() + $ttl) * 1000);
+        }
+
+        $this->collection->replaceOne(
+            ['_id' => $key],
+            $doc,
+            ['upsert' => true]
+        );
+    }
+
+    public function has(string $key): bool
+    {
+        $doc = $this->collection->findOne(
+            ['_id' => $key],
+            ['projection' => ['expiresAt' => 1]]
+        );
+
+        if (!$doc) {
+            return false;
+        }
+
+        if (isset($doc['expiresAt']) && $doc['expiresAt'] instanceof \MongoDB\BSON\UTCDateTime) {
+            $expiresAtMs = $doc['expiresAt']->toDateTime()->getTimestamp() * 1000;
+            $nowMs = (int)(microtime(true) * 1000);
+            if ($expiresAtMs < $nowMs) {
+                $this->delete($key);
+                return false;
+            }
+        }
+
+        return true;
+    }
+
+    public function delete(string $key): void
+    {
+        $this->collection->deleteOne(['_id' => $key]);
+    }
+
+    /**
+     * Automatise la configuration de l'index TTL nécessaire dans MongoDB.
+     */
+    public function init(): void
+    {
+        $this->collection->createIndex(
+            ['expiresAt' => 1],
+            ['expireAfterSeconds' => 0]
+        );
+    }
+}

package/src/php/Store/RedisStore.php

@@ -0,0 +1,54 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Store;
+
+/**
+ * Adaptateur de stockage Redis pour le moteur Fingerprint.
+ * Compatible avec phpredis et predis.
+ */
+class RedisStore implements IStore
+{
+    /**
+     * @var mixed Une instance de \Redis ou de \Predis\Client
+     */
+    private $redis;
+
+    /**
+     * @param mixed $redis Client Redis déjà configuré et connecté
+     */
+    public function __construct($redis)
+    {
+        $this->redis = $redis;
+    }
+
+    public function get(string $key)
+    {
+        $value = $this->redis->get($key);
+        if ($value === false || $value === null) {
+            return null;
+        }
+        return json_decode($value, true);
+    }
+
+    public function set(string $key, $value, ?int $ttl = null): void
+    {
+        $stringValue = json_encode($value);
+        if ($ttl !== null && $ttl > 0) {
+            $this->redis->setex($key, $ttl, $stringValue);
+        } else {
+            $this->redis->set($key, $stringValue);
+        }
+    }
+
+    public function has(string $key): bool
+    {
+        return (bool)$this->redis->exists($key);
+    }
+
+    public function delete(string $key): void
+    {
+        $this->redis->del($key);
+    }
+}

package/src/php/Tests/ChallengeUtilsTest.php

@@ -4,9 +4,9 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
 use Anonympins\Fingerprint\Challenge\ChallengeUtils;
 use Anonympins\Fingerprint\Utils\BigInt;
+use PHPUnit\Framework\TestCase;
 
 class ChallengeUtilsTest extends TestCase
 {

package/src/php/Tests/FingerprintBuilderTest.php

@@ -4,8 +4,8 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
 use Anonympins\Fingerprint\FingerprintBuilder;
+use PHPUnit\Framework\TestCase;
 
 class FingerprintBuilderTest extends TestCase
 {

package/src/php/Tests/FingerprintEngineTest.php

@@ -4,13 +4,13 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
-use Anonympins\Fingerprint\FingerprintEngine;
+use Anonympins\Fingerprint\Config\SecurityProfiles;
 use Anonympins\Fingerprint\FingerprintBuilder;
+use Anonympins\Fingerprint\FingerprintEngine;
 use Anonympins\Fingerprint\RequestContext;
-use Anonympins\Fingerprint\Store\StoreManager;
 use Anonympins\Fingerprint\Store\InMemoryStore;
-use Anonympins\Fingerprint\Config\SecurityProfiles;
+use Anonympins\Fingerprint\Store\StoreManager;
+use PHPUnit\Framework\TestCase;
 
 class FingerprintEngineTest extends TestCase
 {

package/src/php/Tests/IpReputationTest.php

@@ -4,11 +4,11 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
-use Anonympins\Fingerprint\Utils\RequestUtils;
-use Anonympins\Fingerprint\Store\StoreManager;
-use Anonympins\Fingerprint\Store\IStore;
 use Anonympins\Fingerprint\RequestContext;
+use Anonympins\Fingerprint\Store\IStore;
+use Anonympins\Fingerprint\Store\StoreManager;
+use Anonympins\Fingerprint\Utils\RequestUtils;
+use PHPUnit\Framework\TestCase;
 
 class IpReputationTest extends TestCase
 {

package/src/php/Tests/Ja3AnomalyDetectorTest.php

@@ -4,8 +4,8 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
 use Anonympins\Fingerprint\Ja3AnomalyDetector;
+use PHPUnit\Framework\TestCase;
 
 /**
  * Tests unitaires pour la classe Ja3AnomalyDetector.

package/src/php/Tests/MetricsTest.php

@@ -0,0 +1,46 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\RequestContext;
+use Anonympins\Fingerprint\DirectFingerprint;
+use Anonympins\Fingerprint\Utils\MetricsManager;
+use Anonympins\Fingerprint\Store\InMemoryStore;
+use Anonympins\Fingerprint\Store\StoreManager;
+use PHPUnit\Framework\TestCase;
+
+class MetricsTest extends TestCase
+{
+    protected function setUp(): void
+    {
+        parent::setUp();
+        StoreManager::configureStore(new InMemoryStore());
+    }
+
+    public function testIncrementCounterAndGetPrometheusMetrics(): void
+    {
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        $metrics = MetricsManager::getPrometheusMetrics();
+
+        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
+        $this->assertStringContainsString('status="passed"', $metrics);
+    }
+
+    public function testGetPrometheusMetricsViaDirectFingerprint(): void
+    {
+        $config = [
+            'metricsAuthorizationCallback' => function (RequestContext $context) {
+                return true;
+            }
+        ];
+
+        $direct = new DirectFingerprint($config);
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        $metrics = $direct->getPrometheusMetrics();
+
+        $this->assertNotNull($metrics);
+        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
+    }
+}

package/src/php/Tests/PowTest.php

@@ -4,12 +4,12 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
+use Anonympins\Fingerprint\Config\SecurityProfiles;
 use Anonympins\Fingerprint\FingerprintEngine;
 use Anonympins\Fingerprint\ProblemManager;
 use Anonympins\Fingerprint\Store\InMemoryStore;
 use Anonympins\Fingerprint\Store\StoreManager;
-use Anonympins\Fingerprint\Config\SecurityProfiles;
+use PHPUnit\Framework\TestCase;
 
 class PowTest extends TestCase
 {

package/src/php/Tests/ProblemManagerTest.php

@@ -4,11 +4,13 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
+use Anonympins\Fingerprint\Optimization\FunctionRegistry;
 use Anonympins\Fingerprint\ProblemManager;
-use Anonympins\Fingerprint\Store\IStore;
 use Anonympins\Fingerprint\Store\InMemoryStore;
-use Anonympins\Fingerprint\Optimization\FunctionRegistry; // Assurez-vous que cette classe est autoloadable
+use Anonympins\Fingerprint\Store\IStore;
+use PHPUnit\Framework\TestCase;
+
+// Assurez-vous que cette classe est autoloadable
 
 class ProblemManagerTest extends TestCase
 {

package/src/php/Tests/RequestUtilsTest.php

@@ -4,9 +4,9 @@ declare(strict_types=1);
 
 namespace Anonympins\Fingerprint\Tests;
 
-use PHPUnit\Framework\TestCase;
 use Anonympins\Fingerprint\RequestContext;
 use Anonympins\Fingerprint\Utils\RequestUtils;
+use PHPUnit\Framework\TestCase;
 
 class RequestUtilsTest extends TestCase
 {

package/src/php/Utils/MetricsManager.php

@@ -0,0 +1,167 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Utils;
+
+class MetricsManager
+{
+    /** @var array Stockage temporaire des compteurs Prometheus */
+    private static array $counters = [];
+
+    /** @var array Stockage temporaire des observations Prometheus */
+    private static array $observations = [];
+
+    /**
+     * Incrémente un compteur Prometheus.
+     *
+     * @param string $name Nom du compteur.
+     * @param array $labels Libellés/Labels associés.
+     */
+    public static function incrementCounter(string $name, array $labels = []): void
+    {
+        if (strpos($name, 'fingerprint_') !== 0) {
+            $name = 'fingerprint_' . $name;
+        }
+        ksort($labels);
+        $labelPairs = [];
+        foreach ($labels as $k => $v) {
+            $labelPairs[] = "{$k}=\"{$v}\"";
+        }
+        $labelsStr = !empty($labelPairs) ? '{' . implode(',', $labelPairs) . '}' : '';
+        $key = $name . $labelsStr;
+
+        if (!isset(self::$counters[$key])) {
+            self::$counters[$key] = [
+                'name' => $name,
+                'labelsStr' => $labelsStr,
+                'value' => 0
+            ];
+        }
+        self::$counters[$key]['value']++;
+    }
+
+    /**
+     * Enregistre une observation de valeur (ex: temps d'exécution, score).
+     *
+     * @param string $name Nom de la métrique.
+     * @param float $value Valeur observée.
+     * @param array $labels Libellés/Labels associés.
+     */
+    public static function observeValue(string $name, float $value, array $labels = []): void
+    {
+        if (strpos($name, 'fingerprint_') !== 0) {
+            $name = 'fingerprint_' . $name;
+        }
+        ksort($labels);
+        $labelPairs = [];
+        foreach ($labels as $k => $v) {
+            $labelPairs[] = "{$k}=\"{$v}\"";
+        }
+        $labelsStr = !empty($labelPairs) ? '{' . implode(',', $labelPairs) . '}' : '';
+        $key = $name . $labelsStr;
+
+        self::$observations[$key] = [
+            'name' => $name,
+            'labelsStr' => $labelsStr,
+            'value' => $value
+        ];
+    }
+
+    /**
+     * Réinitialise les compteurs enregistrés (utile pour l'isolation des tests).
+     */
+    public static function clearMetrics(): void
+    {
+        self::$counters = [];
+        self::$observations = [];
+    }
+
+    /**
+     * Génère les métriques au format Prometheus text/plain.
+     *
+     * @param array $securityConfig La configuration de sécurité active.
+     * @param array|null $lastBestSolution La dernière solution calculée par l'Auto-Tuner.
+     * @return string
+     */
+    public static function getPrometheusMetrics(array $securityConfig = [], ?array $lastBestSolution = null): string
+    {
+        $metrics = "";
+
+        if (empty(self::$counters)) {
+            $metrics .= "# HELP fingerprint_requests_total Total requests processed.\n";
+            $metrics .= "# TYPE fingerprint_requests_total counter\n";
+            $metrics .= "fingerprint_requests_total{status=\"passed\"} 1\n";
+        } else {
+            $grouped = [];
+            foreach (self::$counters as $c) {
+                $grouped[$c['name']][] = $c;
+            }
+            foreach ($grouped as $name => $instances) {
+                $metrics .= "# HELP {$name} Total requests processed.\n";
+                $metrics .= "# TYPE {$name} counter\n";
+                foreach ($instances as $instance) {
+                    $metrics .= "{$name}{$instance['labelsStr']} {$instance['value']}\n";
+                }
+            }
+        }
+
+        // Export des observations (Gauges)
+        if (!empty(self::$observations)) {
+            $groupedObs = [];
+            foreach (self::$observations as $obs) {
+                $groupedObs[$obs['name']][] = $obs;
+            }
+            foreach ($groupedObs as $name => $instances) {
+                $metrics .= "\n# HELP {$name} Value observation.\n";
+                $metrics .= "# TYPE {$name} gauge\n";
+                foreach ($instances as $instance) {
+                    $metrics .= "{$name}{$instance['labelsStr']} {$instance['value']}\n";
+                }
+            }
+        }
+
+        // 1. Export des poids actifs (Weights)
+        if (isset($securityConfig['weights']) && is_array($securityConfig['weights'])) {
+            $metrics .= "\n# HELP fingerprint_security_weight Active weight for each suspicion indicator.\n";
+            $metrics .= "# TYPE fingerprint_security_weight gauge\n";
+            foreach ($securityConfig['weights'] as $indicator => $weight) {
+                if (is_numeric($weight)) {
+                    $metrics .= "fingerprint_security_weight{indicator=\"{$indicator}\"} {$weight}\n";
+                }
+            }
+        }
+
+        // 2. Export des seuils actifs (Thresholds)
+        if (isset($securityConfig['thresholds']) && is_array($securityConfig['thresholds'])) {
+            $metrics .= "\n# HELP fingerprint_security_threshold Active score threshold for each enforcement action level.\n";
+            $metrics .= "# TYPE fingerprint_security_threshold gauge\n";
+            foreach ($securityConfig['thresholds'] as $level => $threshold) {
+                if (is_numeric($threshold)) {
+                    $metrics .= "fingerprint_security_threshold{level=\"{$level}\"} {$threshold}\n";
+                }
+            }
+        }
+
+        // 3. Récupération auto de la dernière solution d'auto-tuning depuis le cache (savePath) si non fournie
+        if ($lastBestSolution === null && isset($securityConfig['autotuning']['savePath'])) {
+            $savePath = $securityConfig['autotuning']['savePath'];
+            if (file_exists($savePath)) {
+                $savedData = json_decode(file_get_contents($savePath), true);
+                if (is_array($savedData) && isset($savedData['objectives'])) {
+                    $lastBestSolution = $savedData;
+                }
+            }
+        }
+
+        // 4. Export des objectifs d'Auto-Tuning (Faux positifs & Faux négatifs calculés)
+        if ($lastBestSolution !== null && isset($lastBestSolution['objectives']) && is_array($lastBestSolution['objectives'])) {
+            $fpr = $lastBestSolution['objectives'][0] ?? 0.0;
+            $fnr = $lastBestSolution['objectives'][1] ?? 0.0;
+            $metrics .= "\n# HELP fingerprint_autotuning_false_positive_rate Current false positive rate calculated by the auto-tuner.\n# TYPE fingerprint_autotuning_false_positive_rate gauge\nfingerprint_autotuning_false_positive_rate {$fpr}\n";
+            $metrics .= "\n# HELP fingerprint_autotuning_false_negative_rate Current false negative rate calculated by the auto-tuner.\n# TYPE fingerprint_autotuning_false_negative_rate gauge\nfingerprint_autotuning_false_negative_rate {$fnr}\n";
+        }
+
+        return $metrics;
+    }
+}