@anonympins/fingerprint 0.5.5 → 0.6.1

package/src/php/Utils/RequestUtils.php

@@ -827,6 +827,25 @@ class RequestUtils
             $deviceData['ips'][] = $clientIp;
         }
 
+        // Pruning par fenêtre glissante temporelle
+        if (!isset($deviceData['ipTimes'])) {
+            $deviceData['ipTimes'] = [];
+        }
+        $deviceData['ipTimes'][$clientIp] = $now;
+
+        $slidingWindow = 2 * 3600 * 1000; // 2 heures
+        $cutOff = $now - $slidingWindow;
+        foreach ($deviceData['ipTimes'] as $ip => $lastSeen) {
+            if ($lastSeen < $cutOff) {
+                $ipKey = array_search($ip, $deviceData['ips'], true);
+                if ($ipKey !== false) {
+                    unset($deviceData['ips'][$ipKey]);
+                }
+                unset($deviceData['ipTimes'][$ip]);
+            }
+        }
+        $deviceData['ips'] = array_values($deviceData['ips']);
+
         // Score d'historique basé sur le nombre d'IPs utilisées (rotation de proxy)
         $maxIpsPerDevice = 15;
         $freeIpChanges = 3;
@@ -1006,7 +1025,13 @@ class RequestUtils
 
     public static function getThreatIntelScore(RequestContext $context, array $threatIntelConfig): array
     {
-        return ['threatIntelScore' => 0.0];
+        $zkpY = $context->zkpY;
+        if (empty($zkpY)) {
+            return ['threatIntelScore' => 0.0];
+        }
+        $store = StoreManager::getStore();
+        $isBanned = $store->has("banned-zkp-y:{$zkpY}");
+        return ['threatIntelScore' => $isBanned ? 100.0 : 0.0];
     }
 
     /**