@prosopo/better-auth-procaptcha-plugin 0.0.0-stage → 0.1.0

package/dist/esm/index.js

@@ -0,0 +1,75 @@
+import "./_virtual/_rolldown/runtime.js";
+import { DEFAULT_ENDPOINTS, PROCAPTCHA_ERROR_CODES, PROCAPTCHA_HEADER, PROCAPTCHA_SITEVERIFY_URL } from "./constants.js";
+import { createPathMatcher, normalizeAuthPath } from "./path.js";
+import { verifyProcaptchaToken } from "./siteverify.js";
+import { getIP } from "better-auth/api";
+//#region src/index.ts
+var errorResponse = (code, status) => ({ response: Response.json({
+	code,
+	message: PROCAPTCHA_ERROR_CODES[code].message
+}, { status }) });
+var resolveClientIP = (request, options) => getIP(request, {
+	...options,
+	advanced: {
+		...options.advanced,
+		ipAddress: {
+			...options.advanced?.ipAddress,
+			ipv6Subnet: 128
+		}
+	}
+}) ?? void 0;
+var readEmailDomain = async (request) => {
+	if (!request.headers.get("content-type")?.includes("application/json")) return;
+	try {
+		const body = await request.clone().json();
+		if (typeof body !== "object" || body === null || !("email" in body)) return;
+		const { email } = body;
+		if (typeof email !== "string") return;
+		const domain = email.slice(email.lastIndexOf("@") + 1).trim();
+		return email.includes("@") && domain ? domain.toLowerCase() : void 0;
+	} catch {
+		return;
+	}
+};
+var procaptcha = (options) => {
+	const isProtected = createPathMatcher(options.endpoints?.length ? options.endpoints : DEFAULT_ENDPOINTS);
+	const headerName = options.headerName ?? "x-captcha-response";
+	return {
+		id: "procaptcha",
+		$ERROR_CODES: PROCAPTCHA_ERROR_CODES,
+		onRequest: async (request, ctx) => {
+			const path = normalizeAuthPath(new URL(request.url).pathname, ctx.options.basePath ?? "/api/auth");
+			if (!isProtected(path)) return;
+			if (!options.secretKey) {
+				ctx.logger.error("Procaptcha: secretKey is not configured");
+				return errorResponse("PROCAPTCHA_UNKNOWN_ERROR", 500);
+			}
+			const token = request.headers.get(headerName);
+			if (!token) return errorResponse("PROCAPTCHA_MISSING_RESPONSE", 400);
+			const ip = options.sendIP === false ? void 0 : resolveClientIP(request, ctx.options);
+			const email = options.sendEmailDomain ? await readEmailDomain(request) : void 0;
+			const result = await verifyProcaptchaToken({
+				secretKey: options.secretKey,
+				token,
+				...ip ? { ip } : {},
+				...email ? { email } : {},
+				siteVerifyURL: options.siteVerifyURL ?? "https://api.prosopo.io/siteverify",
+				timeoutMs: options.timeoutMs ?? 1e4,
+				...options.fetch ? { fetch: options.fetch } : {}
+			});
+			if (result.outcome === "error") {
+				ctx.logger.error("Procaptcha siteverify failed", {
+					status: result.status,
+					key: result.key,
+					message: result.message
+				});
+				return result.transient ? errorResponse("PROCAPTCHA_SERVICE_UNAVAILABLE", 503) : errorResponse("PROCAPTCHA_UNKNOWN_ERROR", 500);
+			}
+			if (result.outcome === "rejected") return errorResponse("PROCAPTCHA_VERIFICATION_FAILED", 403);
+			if (options.maxScore !== void 0 && result.score !== void 0 && result.score > options.maxScore) return errorResponse("PROCAPTCHA_VERIFICATION_FAILED", 403);
+		},
+		options
+	};
+};
+//#endregion
+export { DEFAULT_ENDPOINTS, PROCAPTCHA_ERROR_CODES, PROCAPTCHA_HEADER, PROCAPTCHA_SITEVERIFY_URL, procaptcha, verifyProcaptchaToken };

package/dist/esm/path.js

@@ -0,0 +1,40 @@
+//#region src/path.ts
+var normalizeAuthPath = (pathname, basePath) => {
+	const collapsed = `/${basePath && pathname.startsWith(basePath) ? pathname.slice(basePath.length) : pathname}`.replace(/\/{2,}/g, "/");
+	return collapsed.length > 1 ? collapsed.replace(/\/$/, "") : collapsed;
+};
+var matchesSegment = (pattern, segment) => {
+	const parts = pattern.split("*");
+	if (parts.length === 1) return pattern === segment;
+	const first = parts[0] ?? "";
+	const last = parts[parts.length - 1] ?? "";
+	if (segment.length < first.length + last.length || !segment.startsWith(first) || !segment.endsWith(last)) return false;
+	let cursor = first.length;
+	const end = segment.length - last.length;
+	for (const part of parts.slice(1, -1)) {
+		const found = segment.indexOf(part, cursor);
+		if (found === -1 || found + part.length > end) return false;
+		cursor = found + part.length;
+	}
+	return true;
+};
+var matchesSegments = (patterns, segments) => {
+	const [pattern, ...restPatterns] = patterns;
+	if (pattern === void 0) return segments.length === 0;
+	if (pattern === "**") {
+		for (let skip = 0; skip <= segments.length; skip++) if (matchesSegments(restPatterns, segments.slice(skip))) return true;
+		return false;
+	}
+	const [segment, ...restSegments] = segments;
+	return segment !== void 0 && matchesSegment(pattern, segment) && matchesSegments(restPatterns, restSegments);
+};
+var createPathMatcher = (endpoints) => {
+	const matchers = endpoints.map((endpoint) => {
+		if (!endpoint.includes("*")) return (path) => path === endpoint;
+		const patterns = endpoint.split("/");
+		return (path) => matchesSegments(patterns, path.split("/"));
+	});
+	return (path) => matchers.some((matches) => matches(path));
+};
+//#endregion
+export { createPathMatcher, normalizeAuthPath };

package/dist/esm/siteverify.js

@@ -0,0 +1,68 @@
+import { DEFAULT_TIMEOUT_MS, PROCAPTCHA_SITEVERIFY_URL } from "./constants.js";
+//#region src/siteverify.ts
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isSiteVerifyResponse = (value) => isRecord(value) && typeof value.status === "string" && typeof value.verified === "boolean" && (value.score === void 0 || typeof value.score === "number") && (value.reason === void 0 || typeof value.reason === "string");
+var isSiteVerifyErrorResponse = (value) => isRecord(value) && isRecord(value.error) && typeof value.error.key === "string";
+var readJson = async (response) => {
+	try {
+		return await response.json();
+	} catch {
+		return;
+	}
+};
+var isTransientStatus = (status) => status === 429 || status >= 500;
+var verifyProcaptchaToken = async ({ secretKey, token, ip, email, siteVerifyURL = PROCAPTCHA_SITEVERIFY_URL, timeoutMs = DEFAULT_TIMEOUT_MS, fetch: fetchImpl = fetch }) => {
+	const body = {
+		secret: secretKey,
+		token,
+		...ip ? { ip } : {},
+		...email ? { email } : {}
+	};
+	let response;
+	try {
+		response = await fetchImpl(siteVerifyURL, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				Accept: "application/json"
+			},
+			body: JSON.stringify(body),
+			signal: AbortSignal.timeout(timeoutMs)
+		});
+	} catch (error) {
+		return {
+			outcome: "error",
+			transient: true,
+			message: error instanceof Error ? error.message : String(error)
+		};
+	}
+	const payload = await readJson(response);
+	if (!response.ok) {
+		const errorBody = isSiteVerifyErrorResponse(payload) ? payload.error : void 0;
+		return {
+			outcome: "error",
+			transient: isTransientStatus(response.status),
+			status: response.status,
+			...errorBody ? { key: errorBody.key } : {},
+			message: typeof errorBody?.message === "string" ? errorBody.message : `siteverify responded with HTTP ${response.status}`
+		};
+	}
+	if (!isSiteVerifyResponse(payload)) return {
+		outcome: "error",
+		transient: true,
+		status: response.status,
+		message: "siteverify returned an unexpected response body"
+	};
+	const score = payload.score === void 0 ? {} : { score: payload.score };
+	if (!payload.verified) return {
+		outcome: "rejected",
+		...payload.reason ? { reason: payload.reason } : {},
+		...score
+	};
+	return {
+		outcome: "verified",
+		...score
+	};
+};
+//#endregion
+export { verifyProcaptchaToken };

package/dist/tsc/client.d.ts

@@ -0,0 +1,19 @@
+import type { procaptcha } from "./index.js";
+export interface ProcaptchaClientOptions {
+    getToken?: () => string | undefined | Promise<string | undefined>;
+    endpoints?: readonly string[];
+    headerName?: string;
+}
+export declare const procaptchaHeaders: (token: string, headerName?: string) => Record<string, string>;
+export declare const procaptchaClient: (options?: ProcaptchaClientOptions) => {
+    id: "procaptcha";
+    $InferServerPlugin: ReturnType<typeof procaptcha>;
+    fetchPlugins: {
+        id: string;
+        name: string;
+        hooks: {
+            onRequest: <T extends Record<string, any>>(context: import("better-auth/client").RequestContext<T>) => Promise<import("better-auth/client").RequestContext<T>>;
+        };
+    }[];
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/tsc/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,WAAW,uBAAuB;IAMvC,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAElE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,iBAAiB,UACtB,MAAM,eACD,MAAM,KAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAA8B,CAAC;AAQvD,eAAO,MAAM,gBAAgB,aAAa,uBAAuB;;wBASrC,UAAU,CAAC,OAAO,UAAU,CAAC;;;;;;;;CAyBxD,CAAC"}

package/dist/tsc/client.js

@@ -0,0 +1,39 @@
+import { DEFAULT_ENDPOINTS, PROCAPTCHA_HEADER } from "./constants.js";
+import { createPathMatcher, normalizeAuthPath } from "./path.js";
+export const procaptchaHeaders = (token, headerName = PROCAPTCHA_HEADER) => ({ [headerName]: token });
+const authPathOf = (url, baseURL) => {
+    const requestURL = new URL(url, "http://localhost");
+    const basePath = baseURL ? new URL(baseURL, requestURL).pathname : "";
+    return normalizeAuthPath(requestURL.pathname, basePath);
+};
+export const procaptchaClient = (options = {}) => {
+    const { getToken } = options;
+    const headerName = options.headerName ?? PROCAPTCHA_HEADER;
+    const isProtected = createPathMatcher(options.endpoints?.length ? options.endpoints : DEFAULT_ENDPOINTS);
+    return {
+        id: "procaptcha",
+        $InferServerPlugin: {},
+        fetchPlugins: getToken
+            ? [
+                {
+                    id: "procaptcha",
+                    name: "procaptcha",
+                    hooks: {
+                        onRequest: async (context) => {
+                            if (context.headers.has(headerName) ||
+                                !isProtected(authPathOf(context.url, context.baseURL))) {
+                                return context;
+                            }
+                            const token = await getToken();
+                            if (token) {
+                                context.headers.set(headerName, token);
+                            }
+                            return context;
+                        },
+                    },
+                },
+            ]
+            : [],
+    };
+};
+//# sourceMappingURL=client.js.map

package/dist/tsc/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAejE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,KAAa,EACb,aAAqB,iBAAiB,EACb,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvD,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAE,OAA2B,EAAU,EAAE;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,iBAAiB,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAmC,EAAE,EAAE,EAAE;IACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,WAAW,GAAG,iBAAiB,CACpC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CACjE,CAAC;IAEF,OAAO;QACN,EAAE,EAAE,YAAY;QAChB,kBAAkB,EAAE,EAAmC;QACvD,YAAY,EAAE,QAAQ;YACrB,CAAC,CAAC;gBACA;oBACC,EAAE,EAAE,YAAY;oBAChB,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE;wBACN,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;4BAC5B,IACC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gCAC/B,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EACrD,CAAC;gCACF,OAAO,OAAO,CAAC;4BAChB,CAAC;4BACD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;4BAC/B,IAAI,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;4BACxC,CAAC;4BACD,OAAO,OAAO,CAAC;wBAChB,CAAC;qBACD;iBACD;aACD;YACF,CAAC,CAAC,EAAE;KAC4B,CAAC;AACpC,CAAC,CAAC"}

package/dist/tsc/constants.d.ts

@@ -0,0 +1,12 @@
+export declare const PROCAPTCHA_SITEVERIFY_URL = "https://api.prosopo.io/siteverify";
+export declare const PROCAPTCHA_HEADER = "x-captcha-response";
+export declare const DEFAULT_ENDPOINTS: readonly string[];
+export declare const DEFAULT_TIMEOUT_MS = 10000;
+export declare const PROCAPTCHA_ERROR_CODES: {
+    PROCAPTCHA_MISSING_RESPONSE: import("better-auth").RawError<"PROCAPTCHA_MISSING_RESPONSE">;
+    PROCAPTCHA_VERIFICATION_FAILED: import("better-auth").RawError<"PROCAPTCHA_VERIFICATION_FAILED">;
+    PROCAPTCHA_SERVICE_UNAVAILABLE: import("better-auth").RawError<"PROCAPTCHA_SERVICE_UNAVAILABLE">;
+    PROCAPTCHA_UNKNOWN_ERROR: import("better-auth").RawError<"PROCAPTCHA_UNKNOWN_ERROR">;
+};
+export type ProcaptchaErrorCode = keyof typeof PROCAPTCHA_ERROR_CODES;
+//# sourceMappingURL=constants.d.ts.map

package/dist/tsc/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,yBAAyB,sCAAsC,CAAC;AAE7E,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAI9C,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,eAAO,MAAM,sBAAsB;;;;;CAKjC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,sBAAsB,CAAC"}

package/dist/tsc/constants.js

@@ -0,0 +1,16 @@
+import { defineErrorCodes } from "better-auth";
+export const PROCAPTCHA_SITEVERIFY_URL = "https://api.prosopo.io/siteverify";
+export const PROCAPTCHA_HEADER = "x-captcha-response";
+export const DEFAULT_ENDPOINTS = [
+    "/sign-up/email",
+    "/sign-in/email",
+    "/request-password-reset",
+];
+export const DEFAULT_TIMEOUT_MS = 10_000;
+export const PROCAPTCHA_ERROR_CODES = defineErrorCodes({
+    PROCAPTCHA_MISSING_RESPONSE: "Missing Procaptcha response",
+    PROCAPTCHA_VERIFICATION_FAILED: "Procaptcha verification failed",
+    PROCAPTCHA_SERVICE_UNAVAILABLE: "Procaptcha service unavailable",
+    PROCAPTCHA_UNKNOWN_ERROR: "Something went wrong",
+});
+//# sourceMappingURL=constants.js.map

package/dist/tsc/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IACnD,gBAAgB;IAChB,gBAAgB;IAChB,yBAAyB;CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;IACtD,2BAA2B,EAAE,6BAA6B;IAC1D,8BAA8B,EAAE,gCAAgC;IAChE,8BAA8B,EAAE,gCAAgC;IAChE,wBAAwB,EAAE,sBAAsB;CAChD,CAAC,CAAC"}

package/dist/tsc/index.d.ts

@@ -0,0 +1,28 @@
+import type { AuthContext } from "better-auth";
+export { DEFAULT_ENDPOINTS, PROCAPTCHA_ERROR_CODES, PROCAPTCHA_HEADER, PROCAPTCHA_SITEVERIFY_URL, type ProcaptchaErrorCode, } from "./constants.js";
+export { verifyProcaptchaToken, type SiteVerifyErrorResponse, type SiteVerifyRequestBody, type SiteVerifyResponse, type VerifyResult, type VerifyTokenParams, } from "./siteverify.js";
+export interface ProcaptchaOptions {
+    secretKey: string;
+    endpoints?: readonly string[];
+    siteVerifyURL?: string;
+    headerName?: string;
+    sendIP?: boolean;
+    sendEmailDomain?: boolean;
+    maxScore?: number;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+export declare const procaptcha: (options: ProcaptchaOptions) => {
+    id: "procaptcha";
+    $ERROR_CODES: {
+        PROCAPTCHA_MISSING_RESPONSE: import("better-auth").RawError<"PROCAPTCHA_MISSING_RESPONSE">;
+        PROCAPTCHA_VERIFICATION_FAILED: import("better-auth").RawError<"PROCAPTCHA_VERIFICATION_FAILED">;
+        PROCAPTCHA_SERVICE_UNAVAILABLE: import("better-auth").RawError<"PROCAPTCHA_SERVICE_UNAVAILABLE">;
+        PROCAPTCHA_UNKNOWN_ERROR: import("better-auth").RawError<"PROCAPTCHA_UNKNOWN_ERROR">;
+    };
+    onRequest: (request: Request, ctx: AuthContext) => Promise<{
+        response: Response;
+    } | undefined>;
+    options: ProcaptchaOptions;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/tsc/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACX,WAAW,EAGX,MAAM,aAAa,CAAC;AAarB,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,mBAAmB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,iBAAiB;IAEjC,SAAS,EAAE,MAAM,CAAC;IAOlB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,UAAU,CAAC,EAAE,MAAM,CAAC;IAOpB,MAAM,CAAC,EAAE,OAAO,CAAC;IAOjB,eAAe,CAAC,EAAE,OAAO,CAAC;IAM1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB;AA8CD,eAAO,MAAM,UAAU,YAAa,iBAAiB;;;;;;;;yBAUzC,OAAO,OACX,WAAW,KACd,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,GAAG,SAAS,CAAC;;CAgE/C,CAAC"}

package/dist/tsc/index.js

@@ -0,0 +1,94 @@
+import { getIP } from "better-auth/api";
+import { DEFAULT_ENDPOINTS, DEFAULT_TIMEOUT_MS, PROCAPTCHA_ERROR_CODES, PROCAPTCHA_HEADER, PROCAPTCHA_SITEVERIFY_URL, } from "./constants.js";
+import { createPathMatcher, normalizeAuthPath } from "./path.js";
+import { verifyProcaptchaToken } from "./siteverify.js";
+export { DEFAULT_ENDPOINTS, PROCAPTCHA_ERROR_CODES, PROCAPTCHA_HEADER, PROCAPTCHA_SITEVERIFY_URL, } from "./constants.js";
+export { verifyProcaptchaToken, } from "./siteverify.js";
+const errorResponse = (code, status) => ({
+    response: Response.json({ code, message: PROCAPTCHA_ERROR_CODES[code].message }, { status }),
+});
+const resolveClientIP = (request, options) => getIP(request, {
+    ...options,
+    advanced: {
+        ...options.advanced,
+        ipAddress: { ...options.advanced?.ipAddress, ipv6Subnet: 128 },
+    },
+}) ?? undefined;
+const readEmailDomain = async (request) => {
+    if (!request.headers.get("content-type")?.includes("application/json")) {
+        return undefined;
+    }
+    try {
+        const body = await request.clone().json();
+        if (typeof body !== "object" || body === null || !("email" in body)) {
+            return undefined;
+        }
+        const { email } = body;
+        if (typeof email !== "string") {
+            return undefined;
+        }
+        const domain = email.slice(email.lastIndexOf("@") + 1).trim();
+        return email.includes("@") && domain ? domain.toLowerCase() : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+export const procaptcha = (options) => {
+    const isProtected = createPathMatcher(options.endpoints?.length ? options.endpoints : DEFAULT_ENDPOINTS);
+    const headerName = options.headerName ?? PROCAPTCHA_HEADER;
+    return {
+        id: "procaptcha",
+        $ERROR_CODES: PROCAPTCHA_ERROR_CODES,
+        onRequest: async (request, ctx) => {
+            const path = normalizeAuthPath(new URL(request.url).pathname, ctx.options.basePath ?? "/api/auth");
+            if (!isProtected(path)) {
+                return undefined;
+            }
+            if (!options.secretKey) {
+                ctx.logger.error("Procaptcha: secretKey is not configured");
+                return errorResponse("PROCAPTCHA_UNKNOWN_ERROR", 500);
+            }
+            const token = request.headers.get(headerName);
+            if (!token) {
+                return errorResponse("PROCAPTCHA_MISSING_RESPONSE", 400);
+            }
+            const ip = options.sendIP === false
+                ? undefined
+                : resolveClientIP(request, ctx.options);
+            const email = options.sendEmailDomain
+                ? await readEmailDomain(request)
+                : undefined;
+            const result = await verifyProcaptchaToken({
+                secretKey: options.secretKey,
+                token,
+                ...(ip ? { ip } : {}),
+                ...(email ? { email } : {}),
+                siteVerifyURL: options.siteVerifyURL ?? PROCAPTCHA_SITEVERIFY_URL,
+                timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+                ...(options.fetch ? { fetch: options.fetch } : {}),
+            });
+            if (result.outcome === "error") {
+                ctx.logger.error("Procaptcha siteverify failed", {
+                    status: result.status,
+                    key: result.key,
+                    message: result.message,
+                });
+                return result.transient
+                    ? errorResponse("PROCAPTCHA_SERVICE_UNAVAILABLE", 503)
+                    : errorResponse("PROCAPTCHA_UNKNOWN_ERROR", 500);
+            }
+            if (result.outcome === "rejected") {
+                return errorResponse("PROCAPTCHA_VERIFICATION_FAILED", 403);
+            }
+            if (options.maxScore !== undefined &&
+                result.score !== undefined &&
+                result.score > options.maxScore) {
+                return errorResponse("PROCAPTCHA_VERIFICATION_FAILED", 403);
+            }
+            return undefined;
+        },
+        options,
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/tsc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EACN,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,GAEzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,GAEzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,qBAAqB,GAMrB,MAAM,iBAAiB,CAAC;AA0CzB,MAAM,aAAa,GAAG,CACrB,IAAyB,EACzB,MAAc,EACW,EAAE,CAAC,CAAC;IAC7B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CACtB,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EACvD,EAAE,MAAM,EAAE,CACV;CACD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CACvB,OAAgB,EAChB,OAA0B,EACL,EAAE,CACvB,KAAK,CAAC,OAAO,EAAE;IACd,GAAG,OAAO;IACV,QAAQ,EAAE;QACT,GAAG,OAAO,CAAC,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE;KAC9D;CACD,CAAC,IAAI,SAAS,CAAC;AAEjB,MAAM,eAAe,GAAG,KAAK,EAC5B,OAAgB,EACc,EAAE;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAY,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAA0B,EAAE,EAAE;IACxD,MAAM,WAAW,GAAG,iBAAiB,CACpC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CACjE,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAE3D,OAAO;QACN,EAAE,EAAE,YAAY;QAChB,YAAY,EAAE,sBAAsB;QACpC,SAAS,EAAE,KAAK,EACf,OAAgB,EAChB,GAAgB,EAC8B,EAAE;YAChD,MAAM,IAAI,GAAG,iBAAiB,CAC7B,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAC7B,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,WAAW,CACnC,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC5D,OAAO,aAAa,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,aAAa,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,EAAE,GACP,OAAO,CAAC,MAAM,KAAK,KAAK;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe;gBACpC,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC;gBAChC,CAAC,CAAC,SAAS,CAAC;YAEb,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK;gBACL,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,yBAAyB;gBACjE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;gBAClD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAChD,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,OAAO,EAAE,MAAM,CAAC,OAAO;iBACvB,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,SAAS;oBACtB,CAAC,CAAC,aAAa,CAAC,gCAAgC,EAAE,GAAG,CAAC;oBACtD,CAAC,CAAC,aAAa,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,aAAa,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;YAED,IACC,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAC9B,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC1B,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAC9B,CAAC;gBACF,OAAO,aAAa,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;YAED,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO;KACoB,CAAC;AAC9B,CAAC,CAAC"}

package/dist/tsc/path.d.ts

@@ -0,0 +1,4 @@
+export declare const normalizeAuthPath: (pathname: string, basePath: string) => string;
+export type PathMatcher = (path: string) => boolean;
+export declare const createPathMatcher: (endpoints: readonly string[]) => PathMatcher;
+//# sourceMappingURL=path.d.ts.map

package/dist/tsc/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../src/path.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,iBAAiB,aACnB,MAAM,YACN,MAAM,KACd,MAOF,CAAC;AAoDF,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAEpD,eAAO,MAAM,iBAAiB,cAClB,SAAS,MAAM,EAAE,KAC1B,WAUF,CAAC"}

package/dist/tsc/path.js

@@ -0,0 +1,59 @@
+export const normalizeAuthPath = (pathname, basePath) => {
+    const relative = basePath && pathname.startsWith(basePath)
+        ? pathname.slice(basePath.length)
+        : pathname;
+    const collapsed = `/${relative}`.replace(/\/{2,}/g, "/");
+    return collapsed.length > 1 ? collapsed.replace(/\/$/, "") : collapsed;
+};
+const matchesSegment = (pattern, segment) => {
+    const parts = pattern.split("*");
+    if (parts.length === 1) {
+        return pattern === segment;
+    }
+    const first = parts[0] ?? "";
+    const last = parts[parts.length - 1] ?? "";
+    if (segment.length < first.length + last.length ||
+        !segment.startsWith(first) ||
+        !segment.endsWith(last)) {
+        return false;
+    }
+    let cursor = first.length;
+    const end = segment.length - last.length;
+    for (const part of parts.slice(1, -1)) {
+        const found = segment.indexOf(part, cursor);
+        if (found === -1 || found + part.length > end) {
+            return false;
+        }
+        cursor = found + part.length;
+    }
+    return true;
+};
+const matchesSegments = (patterns, segments) => {
+    const [pattern, ...restPatterns] = patterns;
+    if (pattern === undefined) {
+        return segments.length === 0;
+    }
+    if (pattern === "**") {
+        for (let skip = 0; skip <= segments.length; skip++) {
+            if (matchesSegments(restPatterns, segments.slice(skip))) {
+                return true;
+            }
+        }
+        return false;
+    }
+    const [segment, ...restSegments] = segments;
+    return (segment !== undefined &&
+        matchesSegment(pattern, segment) &&
+        matchesSegments(restPatterns, restSegments));
+};
+export const createPathMatcher = (endpoints) => {
+    const matchers = endpoints.map((endpoint) => {
+        if (!endpoint.includes("*")) {
+            return (path) => path === endpoint;
+        }
+        const patterns = endpoint.split("/");
+        return (path) => matchesSegments(patterns, path.split("/"));
+    });
+    return (path) => matchers.some((matches) => matches(path));
+};
+//# sourceMappingURL=path.js.map

package/dist/tsc/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../src/path.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,QAAgB,EAChB,QAAgB,EACP,EAAE;IACX,MAAM,QAAQ,GACb,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QACxC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC;IACb,MAAM,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,OAAe,EAAW,EAAE;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,KAAK,OAAO,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IACC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;QAC3C,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACvB,QAA2B,EAC3B,QAA2B,EACjB,EAAE;IACZ,MAAM,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,GAAG,QAAQ,CAAC;IAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzD,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,GAAG,QAAQ,CAAC;IAC5C,OAAO,CACN,OAAO,KAAK,SAAS;QACrB,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC;QAChC,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,CAC3C,CAAC;AACH,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,SAA4B,EACd,EAAE;IAChB,MAAM,QAAQ,GAAkB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC;QACrD,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,IAAY,EAAW,EAAE,CAChC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAY,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC"}

package/dist/tsc/siteverify.d.ts

@@ -0,0 +1,40 @@
+import type { VerificationResponse } from "@prosopo/types";
+export interface SiteVerifyRequestBody {
+    secret: string;
+    token: string;
+    ip?: string;
+    email?: string;
+}
+export type SiteVerifyResponse = Omit<VerificationResponse, "error" | "sessionId">;
+export interface SiteVerifyErrorResponse {
+    error: {
+        code: number;
+        key: string;
+        message: string | unknown[];
+    };
+}
+export type VerifyResult = {
+    outcome: "verified";
+    score?: number;
+} | {
+    outcome: "rejected";
+    reason?: string;
+    score?: number;
+} | {
+    outcome: "error";
+    transient: boolean;
+    status?: number;
+    key?: string;
+    message: string;
+};
+export interface VerifyTokenParams {
+    secretKey: string;
+    token: string;
+    ip?: string;
+    email?: string;
+    siteVerifyURL?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+export declare const verifyProcaptchaToken: ({ secretKey, token, ip, email, siteVerifyURL, timeoutMs, fetch: fetchImpl, }: VerifyTokenParams) => Promise<VerifyResult>;
+//# sourceMappingURL=siteverify.d.ts.map

package/dist/tsc/siteverify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteverify.d.ts","sourceRoot":"","sources":["../../src/siteverify.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACpC,oBAAoB,EACpB,OAAO,GAAG,WAAW,CACrB,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,CAAC;KAC5B,CAAC;CACF;AAED,MAAM,MAAM,YAAY,GACrB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD;IACA,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACf,CAAC;AAEL,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB;AA+BD,eAAO,MAAM,qBAAqB,iFAQ/B,iBAAiB,KAAG,OAAO,CAAC,YAAY,CA+D1C,CAAC"}

package/dist/tsc/siteverify.js

@@ -0,0 +1,80 @@
+import { DEFAULT_TIMEOUT_MS, PROCAPTCHA_SITEVERIFY_URL } from "./constants.js";
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isSiteVerifyResponse = (value) => isRecord(value) &&
+    typeof value.status === "string" &&
+    typeof value.verified === "boolean" &&
+    (value.score === undefined || typeof value.score === "number") &&
+    (value.reason === undefined || typeof value.reason === "string");
+const isSiteVerifyErrorResponse = (value) => isRecord(value) &&
+    isRecord(value.error) &&
+    typeof value.error.key === "string";
+const readJson = async (response) => {
+    try {
+        const body = await response.json();
+        return body;
+    }
+    catch {
+        return undefined;
+    }
+};
+const isTransientStatus = (status) => status === 429 || status >= 500;
+export const verifyProcaptchaToken = async ({ secretKey, token, ip, email, siteVerifyURL = PROCAPTCHA_SITEVERIFY_URL, timeoutMs = DEFAULT_TIMEOUT_MS, fetch: fetchImpl = fetch, }) => {
+    const body = {
+        secret: secretKey,
+        token,
+        ...(ip ? { ip } : {}),
+        ...(email ? { email } : {}),
+    };
+    let response;
+    try {
+        response = await fetchImpl(siteVerifyURL, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Accept: "application/json",
+            },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+    }
+    catch (error) {
+        return {
+            outcome: "error",
+            transient: true,
+            message: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const payload = await readJson(response);
+    if (!response.ok) {
+        const errorBody = isSiteVerifyErrorResponse(payload)
+            ? payload.error
+            : undefined;
+        return {
+            outcome: "error",
+            transient: isTransientStatus(response.status),
+            status: response.status,
+            ...(errorBody ? { key: errorBody.key } : {}),
+            message: typeof errorBody?.message === "string"
+                ? errorBody.message
+                : `siteverify responded with HTTP ${response.status}`,
+        };
+    }
+    if (!isSiteVerifyResponse(payload)) {
+        return {
+            outcome: "error",
+            transient: true,
+            status: response.status,
+            message: "siteverify returned an unexpected response body",
+        };
+    }
+    const score = payload.score === undefined ? {} : { score: payload.score };
+    if (!payload.verified) {
+        return {
+            outcome: "rejected",
+            ...(payload.reason ? { reason: payload.reason } : {}),
+            ...score,
+        };
+    }
+    return { outcome: "verified", ...score };
+};
+//# sourceMappingURL=siteverify.js.map

package/dist/tsc/siteverify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteverify.js","sourceRoot":"","sources":["../../src/siteverify.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AA2C/E,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACrE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEtE,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAA+B,EAAE,CAC5E,QAAQ,CAAC,KAAK,CAAC;IACf,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAChC,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;IACnC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;IAC9D,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AAElE,MAAM,yBAAyB,GAAG,CACjC,KAAc,EACqB,EAAE,CACrC,QAAQ,CAAC,KAAK,CAAC;IACf,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;IACrB,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC;AAErC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAkB,EAAoB,EAAE;IAC/D,IAAI,CAAC;QACJ,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAW,EAAE,CACrD,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AAEjC,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC3C,SAAS,EACT,KAAK,EACL,EAAE,EACF,KAAK,EACL,aAAa,GAAG,yBAAyB,EACzC,SAAS,GAAG,kBAAkB,EAC9B,KAAK,EAAE,SAAS,GAAG,KAAK,GACL,EAAyB,EAAE;IAC9C,MAAM,IAAI,GAA0B;QACnC,MAAM,EAAE,SAAS;QACjB,KAAK;QACL,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3B,CAAC;IAEF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC1B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACtC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,OAAO,CAAC,KAAK;YACf,CAAC,CAAC,SAAS,CAAC;QACb,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,EACN,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ;gBACrC,CAAC,CAAC,SAAS,CAAC,OAAO;gBACnB,CAAC,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE;SACvD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,iDAAiD;SAC1D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC1E,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,KAAK;SACR,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC;AAC1C,CAAC,CAAC"}

package/dist/tsc/tests/client.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client.unit.test.d.ts.map

package/dist/tsc/tests/client.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/client.unit.test.ts"],"names":[],"mappings":""}