@prosopo/client-example-server 2.7.18 → 2.7.48

package/CHANGELOG.md

@@ -1,5 +1,367 @@
 # @prosopo/client-example-server
 
+## 2.7.48
+### Patch Changes
+
+- 8ce9205: Change engine requirements
+- b6e98b2: Run npm audit
+- Updated dependencies [15ae7cf]
+- Updated dependencies [bb5f41c]
+- Updated dependencies [8ce9205]
+- Updated dependencies [df79c03]
+- Updated dependencies [b6e98b2]
+  - @prosopo/types@3.6.0
+  - @prosopo/util@3.2.0
+  - @prosopo/keyring@2.8.36
+  - @prosopo/common@3.1.22
+  - @prosopo/dotenv@3.0.27
+  - @prosopo/server@2.9.44
+  - @prosopo/config@3.1.22
+
+## 2.7.47
+### Patch Changes
+
+- Updated dependencies [8f1773a]
+  - @prosopo/types@3.5.11
+  - @prosopo/keyring@2.8.35
+  - @prosopo/server@2.9.43
+
+## 2.7.46
+### Patch Changes
+
+- Updated dependencies [cb8ab85]
+  - @prosopo/types@3.5.10
+  - @prosopo/keyring@2.8.34
+  - @prosopo/server@2.9.42
+
+## 2.7.45
+### Patch Changes
+
+- Updated dependencies [43907e8]
+- Updated dependencies [005ce66]
+- Updated dependencies [7101036]
+  - @prosopo/types@3.5.9
+  - @prosopo/util@3.1.7
+  - @prosopo/keyring@2.8.33
+  - @prosopo/server@2.9.41
+
+## 2.7.44
+### Patch Changes
+
+- Updated dependencies [e5c259d]
+  - @prosopo/types@3.5.8
+  - @prosopo/keyring@2.8.32
+  - @prosopo/server@2.9.40
+
+## 2.7.43
+### Patch Changes
+
+- Updated dependencies [c9d8fdf]
+- Updated dependencies [b8185a4]
+  - @prosopo/common@3.1.21
+  - @prosopo/config@3.1.21
+  - @prosopo/server@2.9.39
+  - @prosopo/dotenv@3.0.26
+  - @prosopo/keyring@2.8.31
+  - @prosopo/types@3.5.7
+  - @prosopo/util@3.1.6
+
+## 2.7.42
+### Patch Changes
+
+- Updated dependencies [5d11a81]
+  - @prosopo/types@3.5.6
+  - @prosopo/keyring@2.8.30
+  - @prosopo/server@2.9.38
+
+## 2.7.41
+### Patch Changes
+
+- Updated dependencies [494c5a8]
+  - @prosopo/types@3.5.5
+  - @prosopo/keyring@2.8.29
+  - @prosopo/server@2.9.37
+
+## 2.7.40
+### Patch Changes
+
+- Updated dependencies [08ff50f]
+  - @prosopo/types@3.5.4
+  - @prosopo/keyring@2.8.28
+  - @prosopo/server@2.9.36
+
+## 2.7.39
+### Patch Changes
+
+- Updated dependencies [1e3a838]
+  - @prosopo/config@3.1.20
+  - @prosopo/server@2.9.35
+  - @prosopo/common@3.1.20
+  - @prosopo/dotenv@3.0.25
+  - @prosopo/keyring@2.8.27
+  - @prosopo/types@3.5.3
+  - @prosopo/util@3.1.5
+
+## 2.7.38
+### Patch Changes
+
+- 5659b24: Release 3.4.4
+- Updated dependencies [f912439]
+- Updated dependencies [5659b24]
+  - @prosopo/common@3.1.19
+  - @prosopo/keyring@2.8.26
+  - @prosopo/dotenv@3.0.24
+  - @prosopo/server@2.9.34
+  - @prosopo/types@3.5.2
+  - @prosopo/util@3.1.4
+  - @prosopo/config@3.1.19
+
+## 2.7.37
+### Patch Changes
+
+- 50c4120: Release 3.4.3
+- Updated dependencies [52cd544]
+- Updated dependencies [c72ecbd]
+- Updated dependencies [b117ba3]
+- Updated dependencies [50c4120]
+  - @prosopo/types@3.5.1
+  - @prosopo/dotenv@3.0.23
+  - @prosopo/keyring@2.8.25
+  - @prosopo/common@3.1.18
+  - @prosopo/server@2.9.33
+  - @prosopo/util@3.1.3
+  - @prosopo/config@3.1.18
+
+## 2.7.36
+### Patch Changes
+
+- 618703f: Release 3.4.2
+- Updated dependencies [618703f]
+- Updated dependencies [e20ad6b]
+  - @prosopo/keyring@2.8.24
+  - @prosopo/common@3.1.17
+  - @prosopo/dotenv@3.0.22
+  - @prosopo/server@2.9.32
+  - @prosopo/types@3.5.0
+  - @prosopo/util@3.1.2
+  - @prosopo/config@3.1.17
+
+## 2.7.35
+### Patch Changes
+
+- 11303d9: Release 3.4.0
+- 18cb28b: Release 3.4.1
+- Updated dependencies [11303d9]
+- Updated dependencies [18cb28b]
+- Updated dependencies [11303d9]
+  - @prosopo/keyring@2.8.23
+  - @prosopo/common@3.1.16
+  - @prosopo/dotenv@3.0.21
+  - @prosopo/server@2.9.31
+  - @prosopo/types@3.4.1
+  - @prosopo/util@3.1.1
+  - @prosopo/config@3.1.16
+
+## 2.7.34
+### Patch Changes
+
+- f3f7aec: Release 3.4.0
+- Updated dependencies [f3f7aec]
+- Updated dependencies [6768f14]
+  - @prosopo/keyring@2.8.22
+  - @prosopo/common@3.1.15
+  - @prosopo/dotenv@3.0.20
+  - @prosopo/server@2.9.30
+  - @prosopo/types@3.4.0
+  - @prosopo/util@3.1.0
+  - @prosopo/config@3.1.15
+
+## 2.7.33
+### Patch Changes
+
+- Release 3.3.1
+- 0824221: Release 3.2.4
+- Updated dependencies [97edf3f]
+- Updated dependencies
+- Updated dependencies [0824221]
+  - @prosopo/types@3.3.0
+  - @prosopo/keyring@2.8.21
+  - @prosopo/common@3.1.14
+  - @prosopo/dotenv@3.0.19
+  - @prosopo/server@2.9.29
+  - @prosopo/util@3.0.17
+  - @prosopo/config@3.1.14
+
+## 2.7.32
+### Patch Changes
+
+- 008d112: Release 3.3.0
+- Updated dependencies [509be28]
+- Updated dependencies [008d112]
+  - @prosopo/types@3.2.1
+  - @prosopo/keyring@2.8.20
+  - @prosopo/common@3.1.13
+  - @prosopo/dotenv@3.0.18
+  - @prosopo/server@2.9.28
+  - @prosopo/util@3.0.16
+  - @prosopo/config@3.1.13
+
+## 2.7.31
+### Patch Changes
+
+- 0824221: Release 3.2.4
+- Updated dependencies [cf48565]
+- Updated dependencies [0824221]
+  - @prosopo/types@3.2.0
+  - @prosopo/keyring@2.8.19
+  - @prosopo/common@3.1.12
+  - @prosopo/dotenv@3.0.17
+  - @prosopo/server@2.9.27
+  - @prosopo/util@3.0.15
+  - @prosopo/config@3.1.12
+
+## 2.7.30
+### Patch Changes
+
+- 0d1a33e: Adding ipcomparison service with user features
+- 1a23649: Release 3.2.3
+- Updated dependencies [0d1a33e]
+- Updated dependencies [0d1a33e]
+- Updated dependencies [1a23649]
+  - @prosopo/types@3.1.4
+  - @prosopo/keyring@2.8.18
+  - @prosopo/common@3.1.11
+  - @prosopo/dotenv@3.0.16
+  - @prosopo/server@2.9.26
+  - @prosopo/util@3.0.14
+  - @prosopo/config@3.1.11
+
+## 2.7.29
+### Patch Changes
+
+- 657a827: Release 3.2.2
+- Updated dependencies [657a827]
+  - @prosopo/keyring@2.8.17
+  - @prosopo/common@3.1.10
+  - @prosopo/dotenv@3.0.15
+  - @prosopo/server@2.9.25
+  - @prosopo/types@3.1.3
+  - @prosopo/util@3.0.13
+  - @prosopo/config@3.1.10
+
+## 2.7.28
+### Patch Changes
+
+- 4440947: fix type-only tsc compilation
+- 7bdaca6: Release 3.2.1
+- Updated dependencies [4440947]
+- Updated dependencies [7bdaca6]
+- Updated dependencies [809b984]
+- Updated dependencies [1249ce0]
+- Updated dependencies [809b984]
+  - @prosopo/keyring@2.8.16
+  - @prosopo/common@3.1.9
+  - @prosopo/dotenv@3.0.14
+  - @prosopo/server@2.9.24
+  - @prosopo/types@3.1.2
+  - @prosopo/util@3.0.12
+  - @prosopo/config@3.1.9
+
+## 2.7.27
+### Patch Changes
+
+- 6fe8570: Release 3.2.0
+- Updated dependencies [1f980c4]
+- Updated dependencies [6fe8570]
+  - @prosopo/types@3.1.1
+  - @prosopo/keyring@2.8.15
+  - @prosopo/common@3.1.8
+  - @prosopo/dotenv@3.0.13
+  - @prosopo/server@2.9.23
+  - @prosopo/util@3.0.11
+  - @prosopo/config@3.1.8
+
+## 2.7.26
+### Patch Changes
+
+- f304be9: Release 3.1.13
+- Updated dependencies [f304be9]
+- Updated dependencies [8bdc7f0]
+  - @prosopo/keyring@2.8.14
+  - @prosopo/common@3.1.7
+  - @prosopo/dotenv@3.0.12
+  - @prosopo/server@2.9.22
+  - @prosopo/types@3.1.0
+  - @prosopo/util@3.0.10
+  - @prosopo/config@3.1.7
+
+## 2.7.25
+### Patch Changes
+
+- a07db04: Release 3.1.12
+- Updated dependencies [9eed772]
+- Updated dependencies [a07db04]
+- Updated dependencies [ebb0168]
+  - @prosopo/config@3.1.6
+  - @prosopo/server@2.9.21
+  - @prosopo/util@3.0.9
+  - @prosopo/common@3.1.6
+  - @prosopo/dotenv@3.0.11
+  - @prosopo/keyring@2.8.13
+  - @prosopo/types@3.0.10
+
+## 2.7.24
+### Patch Changes
+
+  - @prosopo/server@2.9.20
+
+## 2.7.23
+### Patch Changes
+
+- 6960643: lint detect missing and unneccessary imports
+- Updated dependencies [6960643]
+  - @prosopo/keyring@2.8.12
+  - @prosopo/common@3.1.5
+  - @prosopo/dotenv@3.0.10
+  - @prosopo/server@2.9.19
+  - @prosopo/types@3.0.9
+  - @prosopo/util@3.0.8
+
+## 2.7.22
+### Patch Changes
+
+- Updated dependencies [30e7d4d]
+  - @prosopo/config@3.1.5
+  - @prosopo/common@3.1.4
+  - @prosopo/dotenv@3.0.9
+  - @prosopo/server@2.9.18
+  - @prosopo/types@3.0.8
+  - @prosopo/util@3.0.7
+
+## 2.7.21
+### Patch Changes
+
+- 1f3a02f: Release 3.1.8
+- Updated dependencies [1f3a02f]
+  - @prosopo/server@2.9.17
+
+## 2.7.20
+### Patch Changes
+
+  - @prosopo/server@2.9.16
+
+## 2.7.19
+### Patch Changes
+
+- Updated dependencies [44ffda2]
+- Updated dependencies [a49b538]
+  - @prosopo/config@3.1.4
+  - @prosopo/common@3.1.3
+  - @prosopo/dotenv@3.0.8
+  - @prosopo/server@2.9.15
+  - @prosopo/types@3.0.7
+  - @prosopo/util@3.0.6
+
 ## 2.7.18
 ### Patch Changes
 

package/dist/app.js

@@ -27,6 +27,7 @@ async function main() {
     ProsopoVerificationType
   ).includes(process.env.PROSOPO_VERIFICATION_TYPE) ? process.env.PROSOPO_VERIFICATION_TYPE : "api";
   const app = express();
+  app.set("trust proxy", 1);
   app.use(cors({ origin: true, credentials: true }));
   app.use(express.urlencoded({ extended: true }));
   app.use(express.json());
@@ -45,7 +46,11 @@ async function main() {
   app.options("/*", (_, res) => {
     res.sendStatus(200);
   });
-  const uri = await memoryServerSetup();
+  if (!process.env.MONGO_URI && process.env.NODE_ENV !== "development") {
+    throw new Error("Cannot run mongo memory in non-development environment");
+  }
+  logger.info(() => ({ msg: process.env.MONGO_URI }));
+  const uri = process.env.MONGO_URI || await memoryServerSetup();
   logger.info(() => ({ msg: "mongo uri", data: { uri } }));
   const mongoose = connectionFactory(uri);
   if (!process.env.PROSOPO_SITE_PRIVATE_KEY) {
@@ -58,9 +63,9 @@ async function main() {
   const config = getServerConfig();
   logger.info(() => ({ msg: "Config", data: { config } }));
   app.use(getRoutes(mongoose, config, verifyEndpoint, verifyType));
-  app.listen(
-    config.serverUrl ? Number.parseInt(at(config.serverUrl.split(":"), 2)) : 9228
-  );
+  const port = config.serverUrl ? Number.parseInt(at(config.serverUrl.split(":"), 2)) : 9228;
+  logger.info(() => ({ msg: "Listening on port", data: { port } }));
+  app.listen(port);
 }
 main().then(() => {
   logger.info(() => ({ msg: "Server started" }));

package/dist/cjs/app.cjs

@@ -10,6 +10,7 @@ const express = require("express");
 const routes = require("./routes/routes.cjs");
 const connection = require("./utils/connection.cjs");
 const database = require("./utils/database.cjs");
+var _documentCurrentScript = typeof document !== "undefined" ? document.currentScript : null;
 dotenv.loadEnv();
 function getEnvFile(filename = ".env", filepath = "./") {
   const env = process.env.NODE_ENV || "development";
@@ -20,7 +21,7 @@ var ProsopoVerificationType = /* @__PURE__ */ ((ProsopoVerificationType2) => {
   ProsopoVerificationType2["local"] = "local";
   return ProsopoVerificationType2;
 })(ProsopoVerificationType || {});
-const logger = common.getLogger("info", module);
+const logger = common.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("app.cjs", document.baseURI).href);
 async function main() {
   dotenv.loadEnv();
   const apiPrefix = process.env.NODE_ENV && process.env.NODE_ENV === "production" ? "" : `${process.env.NODE_ENV}-`;
@@ -29,6 +30,7 @@ async function main() {
     ProsopoVerificationType
   ).includes(process.env.PROSOPO_VERIFICATION_TYPE) ? process.env.PROSOPO_VERIFICATION_TYPE : "api";
   const app = express();
+  app.set("trust proxy", 1);
   app.use(cors({ origin: true, credentials: true }));
   app.use(express.urlencoded({ extended: true }));
   app.use(express.json());
@@ -47,7 +49,11 @@ async function main() {
   app.options("/*", (_, res) => {
     res.sendStatus(200);
   });
-  const uri = await database.memoryServerSetup();
+  if (!process.env.MONGO_URI && process.env.NODE_ENV !== "development") {
+    throw new Error("Cannot run mongo memory in non-development environment");
+  }
+  logger.info(() => ({ msg: process.env.MONGO_URI }));
+  const uri = process.env.MONGO_URI || await database.memoryServerSetup();
   logger.info(() => ({ msg: "mongo uri", data: { uri } }));
   const mongoose = connection(uri);
   if (!process.env.PROSOPO_SITE_PRIVATE_KEY) {
@@ -60,9 +66,9 @@ async function main() {
   const config = server.getServerConfig();
   logger.info(() => ({ msg: "Config", data: { config } }));
   app.use(routes(mongoose, config, verifyEndpoint, verifyType));
-  app.listen(
-    config.serverUrl ? Number.parseInt(util.at(config.serverUrl.split(":"), 2)) : 9228
-  );
+  const port = config.serverUrl ? Number.parseInt(util.at(config.serverUrl.split(":"), 2)) : 9228;
+  logger.info(() => ({ msg: "Listening on port", data: { port } }));
+  app.listen(port);
 }
 main().then(() => {
   logger.info(() => ({ msg: "Server started" }));

package/dist/cjs/controllers/auth.cjs

@@ -19,19 +19,28 @@ const SubscribeBodySpec = types.ProcaptchaResponse.merge(
 function hashPassword(password) {
   return util.u8aToHex(blake2b.blake2b(password));
 }
-const verify = async (prosopoServer, verifyType, verifyEndpoint, token, secret) => {
+const NO_IP = "NO_IP";
+const getResponse = async (ip, token, secret, verifyEndpoint) => {
+  const body = {
+    [types.ApiParams.token]: token,
+    [types.ApiParams.secret]: secret
+  };
+  if (process.env.NODE_ENV !== "development") {
+    body[types.ApiParams.ip] = ip;
+  }
+  console.log({ body });
+  const response = await fetch(verifyEndpoint, {
+    method: "POST",
+    body: JSON.stringify(body)
+  });
+  return response.json();
+};
+const verify = async (prosopoServer, verifyType, verifyEndpoint, token, secret, ip) => {
   if (verifyType === "api") {
     console.log("Verifying using the API endpoint", verifyEndpoint);
-    const response = await fetch(verifyEndpoint, {
-      method: "POST",
-      body: JSON.stringify({
-        [types.ApiParams.token]: token,
-        [types.ApiParams.secret]: secret
-      })
-    });
-    const verifiedResponse = await response.json();
-    console.log(verifiedResponse);
-    return verifiedResponse.verified;
+    const response = await getResponse(ip, token, secret, verifyEndpoint);
+    console.log(response);
+    return response.verified;
   }
   const verified = await prosopoServer.isVerified(token);
   console.log(verified);
@@ -60,7 +69,8 @@ const signup = async (mongoose, config, verifyEndpoint, verifyType, req, res, ne
       verifyType,
       verifyEndpoint,
       token,
-      config.account.secret
+      config.account.secret,
+      req.headers["x-client-ip"]?.toString() || NO_IP
     );
     if (verified) {
       const salt = utilCrypto.randomAsHex(32);
@@ -98,7 +108,7 @@ const login = async (mongoose, config, verifyEndpoint, verifyType, req, res) =>
       const payload = SubscribeBodySpec.parse(req.body);
       const token = payload[types.ApiParams.procaptchaResponse];
       if (!config.account.secret) {
-        throw new common.ProsopoEnvError("GENERAL.MNEMONIC_UNDEFINED", {
+        throw new common.ProsopoEnvError("GENERAL.SECRET_MISSING", {
           context: { missingParams: ["PROSOPO_SITE_PRIVATE_KEY"] }
         });
       }
@@ -107,7 +117,8 @@ const login = async (mongoose, config, verifyEndpoint, verifyType, req, res) =>
         verifyType,
         verifyEndpoint,
         token,
-        config.account.secret
+        config.account.secret,
+        req.headers["x-client-ip"]?.toString() || NO_IP
       );
       console.log("verified", verified);
       if (verified) {

package/dist/cjs/utils/database.cjs

@@ -1,8 +1,30 @@
 "use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const mongodbMemoryServer = require("mongodb-memory-server");
 async function memoryServerSetup() {
-  const mongod = mongodbMemoryServer.MongoMemoryServer.create();
+  const MongoMemoryServer = (await import("mongodb-memory-server")).MongoMemoryServer;
+  const mongod = MongoMemoryServer.create();
   const memoryServer = await mongod;
   return memoryServer.getUri();
 }

package/dist/controllers/auth.js

@@ -17,19 +17,28 @@ const SubscribeBodySpec = ProcaptchaResponse.merge(
 function hashPassword(password) {
   return u8aToHex(blake2b(password));
 }
-const verify = async (prosopoServer, verifyType, verifyEndpoint, token, secret) => {
+const NO_IP = "NO_IP";
+const getResponse = async (ip, token, secret, verifyEndpoint) => {
+  const body = {
+    [ApiParams.token]: token,
+    [ApiParams.secret]: secret
+  };
+  if (process.env.NODE_ENV !== "development") {
+    body[ApiParams.ip] = ip;
+  }
+  console.log({ body });
+  const response = await fetch(verifyEndpoint, {
+    method: "POST",
+    body: JSON.stringify(body)
+  });
+  return response.json();
+};
+const verify = async (prosopoServer, verifyType, verifyEndpoint, token, secret, ip) => {
   if (verifyType === "api") {
     console.log("Verifying using the API endpoint", verifyEndpoint);
-    const response = await fetch(verifyEndpoint, {
-      method: "POST",
-      body: JSON.stringify({
-        [ApiParams.token]: token,
-        [ApiParams.secret]: secret
-      })
-    });
-    const verifiedResponse = await response.json();
-    console.log(verifiedResponse);
-    return verifiedResponse.verified;
+    const response = await getResponse(ip, token, secret, verifyEndpoint);
+    console.log(response);
+    return response.verified;
   }
   const verified = await prosopoServer.isVerified(token);
   console.log(verified);
@@ -58,7 +67,8 @@ const signup = async (mongoose, config, verifyEndpoint, verifyType, req, res, ne
       verifyType,
       verifyEndpoint,
       token,
-      config.account.secret
+      config.account.secret,
+      req.headers["x-client-ip"]?.toString() || NO_IP
     );
     if (verified) {
       const salt = randomAsHex(32);
@@ -96,7 +106,7 @@ const login = async (mongoose, config, verifyEndpoint, verifyType, req, res) =>
       const payload = SubscribeBodySpec.parse(req.body);
       const token = payload[ApiParams.procaptchaResponse];
       if (!config.account.secret) {
-        throw new ProsopoEnvError("GENERAL.MNEMONIC_UNDEFINED", {
+        throw new ProsopoEnvError("GENERAL.SECRET_MISSING", {
           context: { missingParams: ["PROSOPO_SITE_PRIVATE_KEY"] }
         });
       }
@@ -105,7 +115,8 @@ const login = async (mongoose, config, verifyEndpoint, verifyType, req, res) =>
         verifyType,
         verifyEndpoint,
         token,
-        config.account.secret
+        config.account.secret,
+        req.headers["x-client-ip"]?.toString() || NO_IP
       );
       console.log("verified", verified);
       if (verified) {

package/dist/utils/database.js

@@ -1,5 +1,5 @@
-import { MongoMemoryServer } from "mongodb-memory-server";
 async function memoryServerSetup() {
+  const MongoMemoryServer = (await import("mongodb-memory-server")).MongoMemoryServer;
   const mongod = MongoMemoryServer.create();
   const memoryServer = await mongod;
   return memoryServer.getUri();