@anonympins/fingerprint 0.6.3 โ†’ 0.6.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/CHANGELOG.md +11 -0
  2. package/package.json +1 -1
  3. package/src/js/fingerprint.client.obfuscated.js +1 -1
  4. package/src/js/fingerprint.js +6944 -6802
  5. package/src/js/library.js +113 -43
  6. package/src/js/mongodb-store.js +13 -0
  7. package/src/js/redis-store.js +13 -0
  8. package/src/js/sql-store.js +80 -77
  9. package/src/js/tests/fingerprint.engine.test.js +2 -3
  10. package/src/js/tests/fingerprint.test.js +2 -2
  11. package/src/php/Challenge/ChallengeUtils.php +2 -2
  12. package/src/php/Config/SecurityProfiles.php +5 -0
  13. package/src/php/FingerprintEngine.php +100 -23
  14. package/src/php/Optimization/OptimizationOperators.php +39 -15
  15. package/src/php/RequestContext.php +4 -0
  16. package/src/php/Store/IStore.php +6 -0
  17. package/src/php/Store/MongoDbStore.php +12 -0
  18. package/src/php/Store/RedisStore.php +12 -0
  19. package/src/php/Tests/FingerprintEngineTest.php +46 -0
  20. package/src/php/Tests/IpReputationTest.php +1 -0
  21. package/src/php/Utils/RequestUtils.php +42 -9
package/CHANGELOG.md CHANGED
@@ -1,3 +1,14 @@
1
+ ## Version 0.6.4
2
+
3
+ - ๐Ÿ”‘ **IP and TLS Session Binding in CPU Challenge**: Reinforced CPU challenge security by cryptographically binding the client's IP and `tlsSessionId` to the challenge's binary block (`baseBlock`). This effectively prevents replay attacks and the sharing of calculation solutions between distinct sessions or IP addresses.
4
+ - ๐Ÿ›ก๏ธ **Intelligent Filtering and Whitelist Inspection**:
5
+ - **Certain Attack Detection**: Added a mechanism that automatically bypasses the whitelist if an "authorized" client triggers a honeypot or presents obvious bot signatures (`_hasCertainAttack`).
6
+ - **Inspection Thresholds (`filterWhitelist`)**: Ability to inspect and challenge whitelist requests if their suspicion score exceeds a configurable limit (numeric or strict).
7
+ - **Updated Security Profiles**: Default integration of the `filterWhitelist` parameter across all predefined profiles (`balanced` at 85.0, `api` at 75.0, `blog` at 90.0, and `strict` and `ecommerce` set to `true` [strict]).
8
+ - ๐Ÿงฌ **Auto-Tuner Extensions & Log Compression**: Improved the auto-tuning engine to better handle recent log patterns, adaptively optimize configurations, and smooth out transitions with better inertia management.
9
+ - โšก **Automatic uPoW Updates**: The Auto-Tuner now autonomously updates useful Proof-of-Work (uPoW) task configurations using optimized Pareto fronts.
10
+ - ๐Ÿงน **Store Reset on Startup**: Introduced the `reset` configuration option to cleanly empty the active persistence store during the initial instantiation of the fingerprinting engine.
11
+
1
12
  ## Version 0.6.3
2
13
 
3
14
  - ๐Ÿ›ก๏ธ **Subnet & Botnet Scoring Upgrades**: Refined the IP Subnet reputation score to use an advanced, continuous analog calculation while handling potential `NaN` boundary edge cases. Enhanced the `botnetClusterScore` algorithm to improve grouping and detection precision of clustered threats.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@anonympins/fingerprint",
3
- "version": "0.6.3",
3
+ "version": "0.6.4",
4
4
  "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
5
5
  "main": "index.js",
6
6
  "type": "module",