@anonympins/fingerprint 0.7.5 → 0.8.1

package/src/php/Store/StoreManager.php

@@ -1,36 +1,49 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Store;
-
-/**
- * Manages the global store singleton instance.
- */
-class StoreManager
-{
-    private static ?IStore $store = null;
-
-    public static function getStore(): IStore
-    {
-        if (self::$store === null) {
-            self::$store = new InMemoryStore();
-        }
-        return self::$store;
-    }
-
-    public static function configureStore(IStore $externalStore): void
-    {
-        self::$store = $externalStore;
-    }
-
-    /**
-     * Sets the active store instance (useful for dependency injection and tests).
-     *
-     * @param mixed $store
-     */
-    public static function setStore($store): void
-    {
-        self::$store = $store;
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Store;
+
+/**
+ * Manages the global store singleton instance for the application.
+ */
+class StoreManager
+{
+    private static ?IStore $store = null;
+
+    /**
+     * Returns the current global store instance.
+     * Lazily instantiates an InMemoryStore if no store has been configured yet.
+     *
+     * @return IStore The active store instance.
+     */
+    public static function getStore(): IStore
+    {
+        if (self::$store === null) {
+            self::$store = new InMemoryStore();
+        }
+        return self::$store;
+    }
+
+    /**
+     * Replaces the active store with an externally provided IStore implementation.
+     * Typically used at bootstrap to plug in a persistent store (Redis, database, etc.).
+     *
+     * @param IStore $externalStore The external store implementation to use.
+     * @return void
+     */
+    public static function configureStore(IStore $externalStore): void
+    {
+        self::$store = $externalStore;
+    }
+
+    /**
+     * Sets the active store instance. Useful for dependency injection and testing.
+     *
+     * @param mixed $store
+     */
+    public static function setStore($store): void
+    {
+        self::$store = $store;
+    }
 }

package/src/php/Tests/AsnLookupTest.php

@@ -0,0 +1,61 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\AsnLookupEngine;
+use Anonympins\Fingerprint\NetworkProfile;
+use Anonympins\Fingerprint\Utils\RequestUtils;
+use PHPUnit\Framework\TestCase;
+
+class AsnLookupTest extends TestCase
+{
+    private AsnLookupEngine $engine;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->engine = AsnLookupEngine::getInstance();
+    }
+
+    public function testDatacenterResolutionAndPriorScore(): void
+    {
+        $hetzner = $this->engine->lookup('95.216.12.34');
+        $this->assertSame('HOSTING', $hetzner->getType());
+        $this->assertSame(55.0, $hetzner->getBaseScore());
+        $this->assertSame(0.85, $hetzner->getInflectionPoint());
+        $this->assertFalse($hetzner->isToleranceRotation());
+
+        $aws = $this->engine->lookup('54.210.1.20');
+        $this->assertSame('HOSTING', $aws->getType());
+        $this->assertSame(55.0, $aws->getBaseScore());
+    }
+
+    public function testMobileCgnatResolution(): void
+    {
+        $cgnat = $this->engine->lookup('100.70.1.25');
+        $this->assertSame('CELLULAR', $cgnat->getType());
+        $this->assertSame(10.0, $cgnat->getBaseScore());
+        $this->assertSame(0.60, $cgnat->getInflectionPoint());
+        $this->assertTrue($cgnat->isToleranceRotation());
+    }
+
+    public function testStarlinkSatelliteResolution(): void
+    {
+        $starlink = $this->engine->lookup('98.97.10.5');
+        $this->assertSame('SATELLITE', $starlink->getType());
+        $this->assertSame(15.0, $starlink->getBaseScore());
+        $this->assertSame(150.0, $starlink->getJitterTolerance());
+    }
+
+    public function testAnalogInconsistencyModulation(): void
+    {
+        $consistency = 0.80; // Incohérence légère de rendu
+        $scoreDatacenter = RequestUtils::calculateAnalogInconsistencyScore($consistency, NetworkProfile::hosting());
+        $scoreMobile = RequestUtils::calculateAnalogInconsistencyScore($consistency, NetworkProfile::cellular());
+
+        $this->assertGreaterThan(55.0, $scoreDatacenter, 'Sur Datacenter (0.80 < 0.85), la suspicion décolle au-dessus de 55.0');
+        $this->assertLessThan(10.0, $scoreMobile, 'Sur Mobile (0.80 > 0.60), la variation est entièrement absorbée (< 10.0)');
+    }
+}

package/src/php/Tests/ChallengeUtilsTest.php

@@ -263,6 +263,37 @@ class ChallengeUtilsTest extends TestCase
         Env::clear('ED25519_PUBLIC_KEY');
     }
 
+    public function testGenerateIssuerPemKeys(): void
+    {
+        if (!extension_loaded('openssl') || !defined('OPENSSL_KEYTYPE_ED25519')) {
+            $this->markTestSkipped('OpenSSL Ed25519 is not supported in this environment.');
+        }
+
+        $pkey = @openssl_pkey_new(["private_key_type" => constant('OPENSSL_KEYTYPE_ED25519')]);
+        if (!$pkey || !@openssl_pkey_export($pkey, $testPem)) {
+            $this->markTestSkipped('Ed25519 key generation or export is not supported in this PHP/OpenSSL environment.');
+        }
+
+        $tempDir = sys_get_temp_dir() . '/fp-issuer-keys-' . time();
+        try {
+            $result = ChallengeUtils::generateIssuerPemKeys($tempDir);
+            $this->assertFileExists($result['privateKeyPath']);
+            $this->assertFileExists($result['publicKeyPath']);
+            $this->assertStringContainsString('-----BEGIN PRIVATE KEY-----', $result['privateKey']);
+            $this->assertStringContainsString('-----BEGIN PUBLIC KEY-----', $result['publicKey']);
+        } finally {
+            if (file_exists($tempDir . '/issuer-private.pem')) {
+                unlink($tempDir . '/issuer-private.pem');
+            }
+            if (file_exists($tempDir . '/issuer-public.pem')) {
+                unlink($tempDir . '/issuer-public.pem');
+            }
+            if (is_dir($tempDir)) {
+                rmdir($tempDir);
+            }
+        }
+    }
+
     public function testCooperativePoSpaceWorkflow(): void
     {
         $clientIp = '127.0.0.1';

package/src/php/Tests/DnsCircuitBreakerTest.php

@@ -1,106 +1,106 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\FingerprintEngine;
-use PHPUnit\Framework\TestCase;
-use ReflectionClass;
-
-class DnsCircuitBreakerTest extends TestCase
-{
-    private ReflectionClass $reflection;
-
-    protected function setUp(): void
-    {
-        parent::setUp();
-        $this->reflection = new ReflectionClass(FingerprintEngine::class);
-
-        // Réinitialise l'état statique du disjoncteur avant chaque test
-        $this->setCircuitBreakerState([
-            'state' => 'CLOSED',
-            'failureCount' => 0,
-            'lastStateChange' => 0,
-            'threshold' => 5,
-            'cooldown' => 1, // 1 seconde de cooldown pour accélérer le test
-        ]);
-    }
-
-    private function getCircuitBreakerState(): array
-    {
-        $property = $this->reflection->getProperty('dnsCircuitBreaker');
-        if (PHP_VERSION_ID < 80100) {
-            $property->setAccessible(true);
-        }
-        return $property->getValue();
-    }
-
-    private function setCircuitBreakerState(array $state): void
-    {
-        $property = $this->reflection->getProperty('dnsCircuitBreaker');
-        if (PHP_VERSION_ID < 80100) {
-            $property->setAccessible(true);
-        }
-        $property->setValue(null, $state);
-    }
-
-    private function invokeMethod(string $methodName, array $args = [])
-    {
-        $method = $this->reflection->getMethod($methodName);
-        if (PHP_VERSION_ID < 80100) { // PHP 8.1.0
-            $method->setAccessible(true);
-        }
-        return $method->invokeArgs(null, $args);
-    }
-
-    public function testInitialStateIsClosed(): void
-    {
-        $this->assertTrue($this->invokeMethod('canAttemptDns'));
-        $state = $this->getCircuitBreakerState();
-        $this->assertSame('CLOSED', $state['state']);
-    }
-
-    public function testFailureThresholdTripsBreaker(): void
-    {
-        for ($i = 0; $i < 4; $i++) {
-            $this->invokeMethod('recordDnsFailure');
-            $this->assertTrue($this->invokeMethod('canAttemptDns'));
-            $state = $this->getCircuitBreakerState();
-            $this->assertSame('CLOSED', $state['state']);
-        }
-
-        $this->invokeMethod('recordDnsFailure');
-        $this->assertFalse($this->invokeMethod('canAttemptDns'));
-        $state = $this->getCircuitBreakerState();
-        $this->assertSame('OPEN', $state['state']);
-    }
-
-    public function testCooldownTransitionsToHalfOpen(): void
-    {
-        for ($i = 0; $i < 5; $i++) {
-            $this->invokeMethod('recordDnsFailure');
-        }
-        $this->assertFalse($this->invokeMethod('canAttemptDns'));
-
-        usleep(1100000); // 1.1s
-
-        $this->assertTrue($this->invokeMethod('canAttemptDns'));
-        $state = $this->getCircuitBreakerState();
-        $this->assertSame('HALF-OPEN', $state['state']);
-    }
-
-    public function testSuccessOnHalfOpenResetsBreaker(): void
-    {
-        for ($i = 0; $i < 5; $i++) {
-            $this->invokeMethod('recordDnsFailure');
-        }
-        usleep(1100000);
-        $this->assertTrue($this->invokeMethod('canAttemptDns'));
-
-        $this->invokeMethod('recordDnsSuccess');
-        $state = $this->getCircuitBreakerState();
-        $this->assertSame('CLOSED', $state['state']);
-        $this->assertSame(0, $state['failureCount']);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\FingerprintEngine;
+use PHPUnit\Framework\TestCase;
+use ReflectionClass;
+
+class DnsCircuitBreakerTest extends TestCase
+{
+    private ReflectionClass $reflection;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->reflection = new ReflectionClass(FingerprintEngine::class);
+
+        // Reset static circuit breaker state before each test
+        $this->setCircuitBreakerState([
+            'state' => 'CLOSED',
+            'failureCount' => 0,
+            'lastStateChange' => 0,
+            'threshold' => 5,
+            'cooldown' => 1, // 1 second cooldown for faster test execution
+        ]);
+    }
+
+    private function getCircuitBreakerState(): array
+    {
+        $property = $this->reflection->getProperty('dnsCircuitBreaker');
+        if (PHP_VERSION_ID < 80100) {
+            $property->setAccessible(true);
+        }
+        return $property->getValue();
+    }
+
+    private function setCircuitBreakerState(array $state): void
+    {
+        $property = $this->reflection->getProperty('dnsCircuitBreaker');
+        if (PHP_VERSION_ID < 80100) {
+            $property->setAccessible(true);
+        }
+        $property->setValue(null, $state);
+    }
+
+    private function invokeMethod(string $methodName, array $args = [])
+    {
+        $method = $this->reflection->getMethod($methodName);
+        if (PHP_VERSION_ID < 80100) { // PHP 8.1.0
+            $method->setAccessible(true);
+        }
+        return $method->invokeArgs(null, $args);
+    }
+
+    public function testInitialStateIsClosed(): void
+    {
+        $this->assertTrue($this->invokeMethod('canAttemptDns'));
+        $state = $this->getCircuitBreakerState();
+        $this->assertSame('CLOSED', $state['state']);
+    }
+
+    public function testFailureThresholdTripsBreaker(): void
+    {
+        for ($i = 0; $i < 4; $i++) {
+            $this->invokeMethod('recordDnsFailure');
+            $this->assertTrue($this->invokeMethod('canAttemptDns'));
+            $state = $this->getCircuitBreakerState();
+            $this->assertSame('CLOSED', $state['state']);
+        }
+
+        $this->invokeMethod('recordDnsFailure');
+        $this->assertFalse($this->invokeMethod('canAttemptDns'));
+        $state = $this->getCircuitBreakerState();
+        $this->assertSame('OPEN', $state['state']);
+    }
+
+    public function testCooldownTransitionsToHalfOpen(): void
+    {
+        for ($i = 0; $i < 5; $i++) {
+            $this->invokeMethod('recordDnsFailure');
+        }
+        $this->assertFalse($this->invokeMethod('canAttemptDns'));
+
+        usleep(1100000); // 1.1s
+
+        $this->assertTrue($this->invokeMethod('canAttemptDns'));
+        $state = $this->getCircuitBreakerState();
+        $this->assertSame('HALF-OPEN', $state['state']);
+    }
+
+    public function testSuccessOnHalfOpenResetsBreaker(): void
+    {
+        for ($i = 0; $i < 5; $i++) {
+            $this->invokeMethod('recordDnsFailure');
+        }
+        usleep(1100000);
+        $this->assertTrue($this->invokeMethod('canAttemptDns'));
+
+        $this->invokeMethod('recordDnsSuccess');
+        $state = $this->getCircuitBreakerState();
+        $this->assertSame('CLOSED', $state['state']);
+        $this->assertSame(0, $state['failureCount']);
+    }
 }

package/src/php/Tests/FingerprintClientTest.php

@@ -1,71 +1,71 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\FingerprintClient;
-use PHPUnit\Framework\TestCase;
-
-class FingerprintClientTest extends TestCase
-{
-    public function testDefaultConfigurationIncludesWasmAndDefaultPath(): void
-    {
-        $client = new FingerprintClient('/js/fingerprint.client.js');
-        $scriptTag = $client->getScriptTag();
-
-        // Vérifie que le script principal est présent
-        $this->assertStringContainsString('src="/js/fingerprint.client.js"', $scriptTag);
-
-        // Vérifie les configurations WASM par défaut dans l'objet sérialisé pour le JS
-        $this->assertStringContainsString('"wasm":true', $scriptTag);
-        $this->assertStringContainsString('"wasmPath":"\/fp.js"', $scriptTag);
-        $this->assertStringContainsString('wasmScript.src = config.wasmPath;', $scriptTag);
-    }
-
-    public function testWasmCanBeOverriddenOrDisabled(): void
-    {
-        $client = new FingerprintClient('/js/fingerprint.client.js', [
-            'wasm' => false,
-            'wasmPath' => '/custom/path/to/wasm.js'
-        ]);
-        $scriptTag = $client->getScriptTag();
-
-        // Vérifie que les surcharges sont correctement prises en compte
-        $this->assertStringContainsString('"wasm":false', $scriptTag);
-        $this->assertStringContainsString('"wasmPath":"\/custom\/path\/to\/wasm.js"', $scriptTag);
-    }
-
-    public function testGenerateHoneypotFieldAddsFieldToConfig(): void
-    {
-        $client = new FingerprintClient('/js/fingerprint.client.js');
-        
-        $honeypotFieldHtml = $client->generateHoneypotField('confirm_email_trap');
-        
-        // Vérifie le code HTML du champ Honeypot
-        $this->assertStringContainsString('name="confirm_email_trap"', $honeypotFieldHtml);
-        $this->assertStringContainsString('tabindex="-1"', $honeypotFieldHtml);
-        
-        // Vérifie que le champ s'enregistre dynamiquement dans la configuration JS finale
-        $scriptTag = $client->getScriptTag();
-        $this->assertStringContainsString('"honeypots":["confirm_email_trap"]', $scriptTag);
-    }
-
-    public function testNonceIsGeneratedAndAppliedToScripts(): void
-    {
-        $client = new FingerprintClient('/js/fingerprint.client.js');
-        $nonce = $client->getNonce();
-        
-        // Vérifie que le nonce est généré correctement (32 caractères hexa)
-        $this->assertNotNull($nonce);
-        $this->assertEquals(32, strlen($nonce));
-        
-        $scriptTag = $client->getScriptTag();
-        
-        // Le nonce doit être présent sur la balise script HTML
-        $this->assertStringContainsString('nonce="' . $nonce . '"', $scriptTag);
-        
-        // Et configuré dynamiquement lors de l'injection du script de chargement WASM
-        $this->assertStringContainsString('wasmScript.nonce = \'' . $nonce . '\'', $scriptTag);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\FingerprintClient;
+use PHPUnit\Framework\TestCase;
+
+class FingerprintClientTest extends TestCase
+{
+    public function testDefaultConfigurationIncludesWasmAndDefaultPath(): void
+    {
+        $client = new FingerprintClient('/js/fingerprint.client.js');
+        $scriptTag = $client->getScriptTag();
+
+        // Verify main script tag is present
+        $this->assertStringContainsString('src="/js/fingerprint.client.js"', $scriptTag);
+
+        // Verify default WASM configuration serialized for JS runtime
+        $this->assertStringContainsString('"wasm":true', $scriptTag);
+        $this->assertStringContainsString('"wasmPath":"\/fp.js"', $scriptTag);
+        $this->assertStringContainsString('wasmScript.src = config.wasmPath;', $scriptTag);
+    }
+
+    public function testWasmCanBeOverriddenOrDisabled(): void
+    {
+        $client = new FingerprintClient('/js/fingerprint.client.js', [
+            'wasm' => false,
+            'wasmPath' => '/custom/path/to/wasm.js'
+        ]);
+        $scriptTag = $client->getScriptTag();
+
+        // Verify configuration overrides are properly applied
+        $this->assertStringContainsString('"wasm":false', $scriptTag);
+        $this->assertStringContainsString('"wasmPath":"\/custom\/path\/to\/wasm.js"', $scriptTag);
+    }
+
+    public function testGenerateHoneypotFieldAddsFieldToConfig(): void
+    {
+        $client = new FingerprintClient('/js/fingerprint.client.js');
+        
+        $honeypotFieldHtml = $client->generateHoneypotField('confirm_email_trap');
+        
+        // Verify HTML markup of the honeypot field
+        $this->assertStringContainsString('name="confirm_email_trap"', $honeypotFieldHtml);
+        $this->assertStringContainsString('tabindex="-1"', $honeypotFieldHtml);
+        
+        // Verify field dynamically registers with client-side configuration
+        $scriptTag = $client->getScriptTag();
+        $this->assertStringContainsString('"honeypots":["confirm_email_trap"]', $scriptTag);
+    }
+
+    public function testNonceIsGeneratedAndAppliedToScripts(): void
+    {
+        $client = new FingerprintClient('/js/fingerprint.client.js');
+        $nonce = $client->getNonce();
+        
+        // Verify nonce generation format (32 hex characters)
+        $this->assertNotNull($nonce);
+        $this->assertEquals(32, strlen($nonce));
+        
+        $scriptTag = $client->getScriptTag();
+        
+        // Nonce must be attached to HTML script tag
+        $this->assertStringContainsString('nonce="' . $nonce . '"', $scriptTag);
+        
+        // And dynamically set during WASM loader script injection
+        $this->assertStringContainsString('wasmScript.nonce = \'' . $nonce . '\'', $scriptTag);
+    }
 }

package/src/php/Tests/FingerprintEngineTest.php

@@ -303,11 +303,12 @@ class FingerprintEngineTest extends TestCase
             $this->markTestSkipped('Ed25519 is not supported in this PHP/OpenSSL environment.');
         }
 
-        $configDir = dirname(__FILE__, 3) . '/config'; // Match engine's behavior
+        $configDir = sys_get_temp_dir() . '/anonympins-test-keys-' . time();
         if (!is_dir($configDir)) {
             mkdir($configDir, 0777, true);
         }
         $keyPath = $configDir . '/ed25519_key.json';
+        Env::set('FINGERPRINT_KEY_DIR', $configDir);
 
         Env::clear('ED25519_PRIVATE_KEY');
         Env::clear('ED25519_PUBLIC_KEY');
@@ -338,11 +339,12 @@ class FingerprintEngineTest extends TestCase
 
     public function testEd25519KeyLoadingFromDisk(): void
     {
-        $configDir = dirname(__FILE__, 3) . '/config'; // Match engine's behavior
+        $configDir = sys_get_temp_dir() . '/anonympins-test-keys-' . time();
         if (!is_dir($configDir)) {
             mkdir($configDir, 0777, true);
         }
         $keyPath = $configDir . '/ed25519_key.json';
+        Env::set('FINGERPRINT_KEY_DIR', $configDir);
 
         $dummyKeys = [
             'privateKey' => '-----BEGIN PRIVATE KEY-----\ndummy-php-private\n-----END PRIVATE KEY-----',

package/src/php/Tests/PowTest.php

@@ -1,40 +1,38 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\Config\SecurityProfiles;
-use Anonympins\Fingerprint\FingerprintEngine;
-use Anonympins\Fingerprint\ProblemManager;
-use Anonympins\Fingerprint\Store\InMemoryStore;
-use Anonympins\Fingerprint\Store\StoreManager;
-use PHPUnit\Framework\TestCase;
-
-class PowTest extends TestCase
-{
-    private FingerprintEngine $engine;
-
-    protected function setUp(): void
-    {
-        // 1. Configurer un store en mémoire pour l'isolation des tests.
-        $store = new InMemoryStore();
-        StoreManager::configureStore($store);
-
-        // 2. Initialiser le ProblemManager avec une configuration et un store valides.
-        // C'est l'étape cruciale qui manquait.
-        $configPath = dirname(__FILE__) . '/config/problems.config.json';
-        ProblemManager::getInstance($configPath, $store);
-
-        // 3. Créer l'instance du moteur.
-        $this->engine = new FingerprintEngine(SecurityProfiles::createSecurityProfile('balanced'));
-    }
-
-    public function testGetProblemsIsExposedForTesting(): void
-    {
-        // Cette méthode appelle ProblemManager::getInstance() en interne.
-        // Grâce au setUp(), l'instance est déjà initialisée et le test passe.
-        $problems = $this->engine->getProblems();
-        $this->assertIsArray($problems);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\Config\SecurityProfiles;
+use Anonympins\Fingerprint\FingerprintEngine;
+use Anonympins\Fingerprint\ProblemManager;
+use Anonympins\Fingerprint\Store\InMemoryStore;
+use Anonympins\Fingerprint\Store\StoreManager;
+use PHPUnit\Framework\TestCase;
+
+class PowTest extends TestCase
+{
+    private FingerprintEngine $engine;
+
+    protected function setUp(): void
+    {
+        // 1. Configure an in-memory store for test isolation.
+        $store = new InMemoryStore();
+        StoreManager::configureStore($store);
+
+        // 2. Initialize ProblemManager with a valid configuration and store.
+        $configPath = dirname(__FILE__) . '/config/problems.config.json';
+        ProblemManager::getInstance($configPath, $store);
+
+        // 3. Create engine instance.
+        $this->engine = new FingerprintEngine(SecurityProfiles::createSecurityProfile('balanced'));
+    }
+
+    public function testGetProblemsIsExposedForTesting(): void
+    {
+        // Calls ProblemManager::getInstance() internally; setUp() ensures valid initialization.
+        $problems = $this->engine->getProblems();
+        $this->assertIsArray($problems);
+    }
 }