@prosopo/provider-mock 2.8.143 → 2.8.145

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/provider-mock@2.8.143 build:cjs
+> @prosopo/provider-mock@2.8.145 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -57,12 +57,14 @@ ViteCommonJSConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 4 modules transformed.
+✓ 6 modules transformed.
 rendering chunks...
 computing gzip size...
+dist/cjs/isMain.cjs                      0.57 kB │ gzip: 0.33 kB
 dist/cjs/_virtual/_rolldown/runtime.cjs  1.00 kB │ gzip: 0.50 kB
-dist/cjs/start.cjs                       1.15 kB │ gzip: 0.51 kB
-dist/cjs/db.cjs                          2.27 kB │ gzip: 0.87 kB
-dist/cjs/api.cjs                         3.06 kB │ gzip: 1.32 kB
+dist/cjs/verify.cjs                      1.60 kB │ gzip: 0.76 kB
+dist/cjs/start.cjs                       2.70 kB │ gzip: 1.19 kB
+dist/cjs/db.cjs                          2.71 kB │ gzip: 1.02 kB
+dist/cjs/api.cjs                         4.67 kB │ gzip: 1.86 kB
 
-✓ built in 42ms
+✓ built in 48ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/provider-mock@2.8.143 build:tsc
+> @prosopo/provider-mock@2.8.145 build:tsc
 > tsc --build --verbose
 
-5:54:07 PM - Projects in this build: 
+3:32:10 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../../packages/util/tsconfig.json
     * ../../packages/logger/tsconfig.json
@@ -27,51 +27,51 @@
     * ../../packages/dotenv/tsconfig.json
     * tsconfig.json
 
-5:54:07 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/util/tsconfig.json' is up to date because newest input '../../packages/util/src/url.ts' is older than output '../../packages/util/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/util/tsconfig.json' is up to date because newest input '../../packages/util/src/url.ts' is older than output '../../packages/util/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/logger/tsconfig.json' is up to date because newest input '../../packages/logger/src/index.ts' is older than output '../../packages/logger/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/logger/tsconfig.json' is up to date because newest input '../../packages/logger/src/logger.ts' is older than output '../../packages/logger/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/api-route/tsconfig.json' is up to date because newest input '../../packages/api-route/src/apiRoutes.ts' is older than output '../../packages/api-route/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/api-route/tsconfig.json' is up to date because newest input '../../packages/api-route/src/apiRoutes.ts' is older than output '../../packages/api-route/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/locale/tsconfig.json' is up to date because newest input '../../packages/locale/src/translationKey.ts' is older than output '../../packages/locale/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/locale/tsconfig.json' is up to date because newest input '../../packages/locale/src/translationKey.ts' is older than output '../../packages/locale/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/util-crypto/tsconfig.json' is up to date because newest input '../../packages/util-crypto/src/types.ts' is older than output '../../packages/util-crypto/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/util-crypto/tsconfig.json' is up to date because newest input '../../packages/util-crypto/src/types.ts' is older than output '../../packages/util-crypto/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/types/tsconfig.json' is up to date because newest input '../../packages/types/src/types.test-d.ts' is older than output '../../packages/types/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/types/tsconfig.json' is up to date because newest input '../../packages/types/src/types.test-d.ts' is older than output '../../packages/types/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/common/tsconfig.json' is up to date because newest input '../../packages/common/src/error.ts' is older than output '../../packages/common/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/common/tsconfig.json' is up to date because newest input '../../packages/common/src/index.ts' is older than output '../../packages/common/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/ipinfo/tsconfig.json' is up to date because newest input '../../packages/ipinfo/src/IpInfoService.ts' is older than output '../../packages/ipinfo/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/ipinfo/tsconfig.json' is up to date because newest input '../../packages/ipinfo/src/IpInfoService.ts' is older than output '../../packages/ipinfo/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/redis-client/tsconfig.json' is up to date because newest input '../../packages/redis-client/src/redisClient.ts' is older than output '../../packages/redis-client/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/redis-client/tsconfig.json' is up to date because newest input '../../packages/redis-client/src/index.ts' is older than output '../../packages/redis-client/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/api/tsconfig.json' is up to date because newest input '../../packages/api/src/index.ts' is older than output '../../packages/api/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/api/tsconfig.json' is up to date because newest input '../../packages/api/src/index.ts' is older than output '../../packages/api/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/user-access-policy/tsconfig.json' is up to date because newest input '../../packages/user-access-policy/src/ruleRecord.ts' is older than output '../../packages/user-access-policy/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/user-access-policy/tsconfig.json' is up to date because newest input '../../packages/user-access-policy/src/transformRule.ts' is older than output '../../packages/user-access-policy/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/types-database/tsconfig.json' is up to date because newest input '../../packages/types-database/src/types/captcha.ts' is older than output '../../packages/types-database/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/types-database/tsconfig.json' is up to date because newest input '../../packages/types-database/src/types.test-d.ts' is older than output '../../packages/types-database/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/database/tsconfig.json' is up to date because newest input '../../packages/database/src/tests/unit/redisCacheEscalation.unit.test.ts' is older than output '../../packages/database/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/database/tsconfig.json' is up to date because newest input '../../packages/database/src/tests/unit/redisCacheEscalation.unit.test.ts' is older than output '../../packages/database/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/keyring/tsconfig.json' is up to date because newest input '../../packages/keyring/src/keyring/keyring.test.ts' is older than output '../../packages/keyring/tsconfig.tsbuildinfo'
+3:32:10 PM - Project '../../packages/keyring/tsconfig.json' is up to date because newest input '../../packages/keyring/src/keyring/keyring.test.ts' is older than output '../../packages/keyring/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/types-env/tsconfig.json' is up to date because newest input '../../packages/types-env/src/env.ts' is older than output '../../packages/types-env/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/types-env/tsconfig.json' is up to date because newest input '../../packages/types-env/src/env.ts' is older than output '../../packages/types-env/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/env/tsconfig.json' is up to date because newest input '../../packages/env/src/index.ts' is older than output '../../packages/env/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/env/tsconfig.json' is up to date because newest input '../../packages/env/src/index.ts' is older than output '../../packages/env/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/api-express-router/tsconfig.json' is up to date because newest input '../../packages/api-express-router/src/middlewares/requestLoggerMiddleware.ts' is older than output '../../packages/api-express-router/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/api-express-router/tsconfig.json' is up to date because newest input '../../packages/api-express-router/src/middlewares/requestLoggerMiddleware.ts' is older than output '../../packages/api-express-router/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/datasets/tsconfig.json' is up to date because newest input '../../packages/datasets/src/index.ts' is older than output '../../packages/datasets/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/datasets/tsconfig.json' is up to date because newest input '../../packages/datasets/src/tests/dataset.unit.test.ts' is older than output '../../packages/datasets/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/load-balancer/tsconfig.json' is up to date because newest input '../../packages/load-balancer/src/balancer.ts' is older than output '../../packages/load-balancer/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/load-balancer/tsconfig.json' is up to date because newest input '../../packages/load-balancer/src/balancer.ts' is older than output '../../packages/load-balancer/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/provider/tsconfig.json' is up to date because newest input '../../packages/provider/src/util.ts' is older than output '../../packages/provider/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/provider/tsconfig.json' is up to date because newest input '../../packages/provider/src/util.ts' is older than output '../../packages/provider/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project '../../packages/dotenv/tsconfig.json' is up to date because newest input '../../packages/dotenv/src/env.ts' is older than output '../../packages/dotenv/tsconfig.tsbuildinfo'
+3:32:11 PM - Project '../../packages/dotenv/tsconfig.json' is up to date because newest input '../../packages/dotenv/src/env.ts' is older than output '../../packages/dotenv/tsconfig.tsbuildinfo'
 
-5:54:07 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+3:32:11 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-5:54:07 PM - Building project '/home/runner/work/captcha/captcha/demos/provider-mock/tsconfig.json'...
+3:32:11 PM - Building project '/home/runner/work/captcha/captcha/demos/provider-mock/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/provider-mock@2.8.143 build
+> @prosopo/provider-mock@2.8.145 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/provider-mock@2.8.143 build:cross-env
+> @prosopo/provider-mock@2.8.145 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -61,12 +61,14 @@ ViteEsmConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 4 modules transformed.
+✓ 6 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js  0.04 kB │ gzip: 0.06 kB
-dist/start.js                       0.90 kB │ gzip: 0.46 kB
-dist/db.js                          2.24 kB │ gzip: 0.86 kB
-dist/api.js                         2.81 kB │ gzip: 1.24 kB
+dist/isMain.js                      0.52 kB │ gzip: 0.32 kB
+dist/verify.js                      1.45 kB │ gzip: 0.74 kB
+dist/start.js                       2.21 kB │ gzip: 1.05 kB
+dist/db.js                          2.66 kB │ gzip: 1.01 kB
+dist/api.js                         4.12 kB │ gzip: 1.74 kB
 
-✓ built in 43ms
+✓ built in 57ms

package/CHANGELOG.md

@@ -1,5 +1,57 @@
 # @prosopo/provider-mock
 
+## 2.8.145
+### Patch Changes
+
+- Updated dependencies [216f8cd]
+  - @prosopo/types-database@5.0.4
+  - @prosopo/provider@5.0.5
+  - @prosopo/types@5.0.4
+  - @prosopo/database@4.0.5
+  - @prosopo/api-express-router@3.1.59
+
+## 2.8.144
+### Patch Changes
+
+- 1b2cca9: Add unit and type tests for the provider mock, and fix the defects they found:
+  
+  - `/test` opened a mongo connection and only closed it after a successful write, so
+    every failing request leaked a connection for the life of the process. The close
+    now happens in a `finally`.
+  - `JA4Database.connect()` read models off `this.connection` without checking the base
+    class had set one, turning a failed connect into "cannot read properties of
+    undefined" much later; it now throws `DATABASE.CONNECTION_UNDEFINED`.
+  - Queries issued before `connect()` hit an unreachable `!this.tables` guard and threw a
+    `TypeError`; they now report a `ProsopoDBError`.
+  - The api port was the hardcoded string `"9229"`. It is now read from
+    `PROVIDER_MOCK_PORT`, validated as a port number, and defaulted when unusable.
+  - `start.ts` called `startApi()` at module scope, so importing anything from the
+    package started a server. Startup is now behind an `isMain` guard.
+  - Startup failures resolved quietly, leaving a container with nothing listening in it;
+    `main` now exits non-zero.
+  - Route handlers are adapted through `toRequestHandler`, which forwards a rejected
+    handler to the error middleware instead of leaving an unhandled rejection and a
+    hanging request.
+- Updated dependencies [132e9e3]
+- Updated dependencies [a308b9b]
+- Updated dependencies [8386644]
+- Updated dependencies [16dbab0]
+- Updated dependencies [69c6982]
+- Updated dependencies [9091a78]
+- Updated dependencies [9ec6cc4]
+- Updated dependencies [6d4bb65]
+- Updated dependencies [d7b93f1]
+- Updated dependencies [063e69d]
+  - @prosopo/provider@5.0.4
+  - @prosopo/types@5.0.3
+  - @prosopo/database@4.0.4
+  - @prosopo/locale@3.3.0
+  - @prosopo/api-express-router@3.1.58
+  - @prosopo/types-database@5.0.3
+  - @prosopo/common@3.1.50
+  - @prosopo/logger@2.0.6
+  - @prosopo/dotenv@3.0.52
+
 ## 2.8.143
 ### Patch Changes
 

package/Dockerfile

@@ -0,0 +1,11 @@
+FROM node:24
+
+COPY ./demos/provider-mock/dist/bundle/ /usr/src/app
+
+EXPOSE 9229 9339 80 443
+
+WORKDIR /usr/src/app
+
+EXPOSE 9229 80 443
+
+CMD ["node", "./provider-mock.start.bundle.js"]

package/dist/api.d.ts

@@ -1,3 +1,36 @@
-import { type Router } from "express";
-export declare function prosopoRouter(): Router;
+import type { IncomingHttpHeaders } from "node:http";
+import { type Logger } from "@prosopo/logger";
+import { type ProcaptchaOutput, type ProcaptchaToken } from "@prosopo/types";
+import { type RequestHandler, type Router } from "express";
+import { JA4Database, type JA4Store } from "./db.js";
+export interface ApiRequest {
+    body: unknown;
+    headers: IncomingHttpHeaders;
+    t: (key: string) => string;
+}
+export interface ApiResponse {
+    json: (body: object) => unknown;
+    status: (code: number) => {
+        send: (body: string) => unknown;
+    };
+}
+export type ApiNext = (error: unknown) => void;
+export interface RouterDeps {
+    db: JA4Store;
+    getJA4: (headers: IncomingHttpHeaders, logger?: Logger) => Promise<{
+        ja4PlusFingerprint: string;
+    }>;
+    decodeToken: (token: ProcaptchaToken) => ProcaptchaOutput;
+    logger: Logger;
+}
+export declare const DEFAULT_MONGO_URL = "mongodb://localhost:27017";
+export declare const DEFAULT_MONGO_DBNAME = "client";
+export declare const DEFAULT_MONGO_AUTH_SOURCE = "admin";
+export declare const createDatabase: (env?: NodeJS.ProcessEnv) => JA4Database;
+export declare const defaultRouterDeps: () => RouterDeps;
+export declare const createVerifyHandler: (deps: RouterDeps) => (req: ApiRequest, res: ApiResponse, next: ApiNext) => Promise<void>;
+export declare const createTestHandler: (deps: RouterDeps) => (req: ApiRequest, res: ApiResponse) => Promise<void>;
+export declare const verifyRateLimit: () => RequestHandler;
+export declare const toRequestHandler: (handler: (req: ApiRequest, res: ApiResponse, next: ApiNext) => Promise<void>) => RequestHandler;
+export declare function prosopoRouter(deps?: RouterDeps): Router;
 //# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAuBA,OAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAQ/C,wBAAgB,aAAa,IAAI,MAAM,CAqFtC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAEN,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAGpB,MAAM,gBAAgB,CAAC;AAExB,OAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIrD,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,mBAAmB,CAAC;IAC7B,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC3B;AAGD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;KAAE,CAAC;CAC9D;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;AAE/C,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,MAAM,EAAE,CACP,OAAO,EAAE,mBAAmB,EAC5B,MAAM,CAAC,EAAE,MAAM,KACX,OAAO,CAAC;QAAE,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,WAAW,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,gBAAgB,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,iBAAiB,8BAA8B,CAAC;AAC7D,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAC7C,eAAO,MAAM,yBAAyB,UAAU,CAAC;AAEjD,eAAO,MAAM,cAAc,SACrB,MAAM,CAAC,UAAU,KACpB,WAKD,CAAC;AAEH,eAAO,MAAM,iBAAiB,QAAO,UAKnC,CAAC;AAUH,eAAO,MAAM,mBAAmB,SACxB,UAAU,WACL,UAAU,OAAO,WAAW,QAAQ,OAAO,KAAG,OAAO,CAAC,IAAI,CA4BrE,CAAC;AAGH,eAAO,MAAM,iBAAiB,SACtB,UAAU,WACL,UAAU,OAAO,WAAW,KAAG,OAAO,CAAC,IAAI,CA8BtD,CAAC;AAQH,eAAO,MAAM,eAAe,QAAO,cAMhC,CAAC;AAOJ,eAAO,MAAM,gBAAgB,YACnB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,KAC1E,cAYF,CAAC;AAOF,wBAAgB,aAAa,CAAC,IAAI,GAAE,UAAgC,GAAG,MAAM,CAgB5E"}

package/dist/api.js

@@ -1,85 +1,115 @@
 import { JA4Database } from "./db.js";
+import { verifyProcaptchaOutput } from "./verify.js";
 import { getLogger } from "@prosopo/logger";
 import express from "express";
 import { ProsopoApiError } from "@prosopo/common";
 import { getJA4 } from "@prosopo/provider";
 import { ClientApiPaths, VerifySolutionBody, decodeProcaptchaOutput } from "@prosopo/types";
+import { rateLimit } from "express-rate-limit";
 //#region src/api.ts
+var DEFAULT_MONGO_URL = "mongodb://localhost:27017";
+var DEFAULT_MONGO_DBNAME = "client";
+var DEFAULT_MONGO_AUTH_SOURCE = "admin";
+var createDatabase = (env = process.env) => new JA4Database(env.MONGO_URL || "mongodb://localhost:27017", env.MONGO_DBNAME || "client", env.MONGO_AUTH_SOURCE || "admin");
+var defaultRouterDeps = () => ({
+	db: createDatabase(),
+	getJA4,
+	decodeToken: decodeProcaptchaOutput,
+	logger: getLogger("info", "provider-mock:api")
+});
 /**
-* Returns a router connected to the database which can interact with the Proposo protocol
+* Verify a solution, as the real provider would.
 *
-* @return {Router} - A middleware router that can interact with the Prosopo protocol
+* A body that does not parse is the caller's fault and is reported as a 400; a
+* token that parses but cannot be decoded is reported as a 500, because at that
+* point the request looked well formed and the mock cannot tell the difference
+* between a corrupt token and a bug of its own.
 */
-function prosopoRouter() {
-	const router = express.Router();
-	const db = new JA4Database(process.env.MONGO_URL || "mongodb://localhost:27017", process.env.MONGO_DBNAME || "client", process.env.MONGO_AUTH_SOURCE || "admin");
-	/**
-	* Verifies a user's solution as being approved or not
-	*
-	* @param {string} userAccount - Dapp User id
-	* @param {string} commitmentId - The captcha solution to look up
-	*/
-	router.post(ClientApiPaths.VerifyImageCaptchaSolutionDapp, async (req, res, next) => {
-		let body;
-		try {
-			body = VerifySolutionBody.parse(req.body);
-		} catch (err) {
-			return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-				context: {
-					error: err,
-					code: 400
-				},
-				logLevel: "info"
-			}));
-		}
-		try {
-			const { token } = body;
-			const { user, dapp, commitmentId } = decodeProcaptchaOutput(token);
-			const testCommitmentId = "0x123456789test";
-			const testAccount = "5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY";
-			const testDapp = "5C4hrfjw9DjXZTzV3MwzrrAr9P1MJhSrvWGWqi1eSuyUpnhM";
-			let statusMessage = "API.USER_NOT_VERIFIED";
-			let approved = false;
-			if (user && user === testAccount || commitmentId && commitmentId === testCommitmentId || dapp && dapp === testDapp) {
-				approved = true;
-				statusMessage = "API.USER_VERIFIED";
-				return res.json({
-					status: req.t(statusMessage),
-					verified: approved,
-					commitmentId: testCommitmentId
-				});
-			}
-			return res.json({
-				status: req.t(statusMessage),
-				verified: false
-			});
-		} catch (err) {
-			return next(new ProsopoApiError("API.UNKNOWN", { context: {
+var createVerifyHandler = (deps) => async (req, res, next) => {
+	let body;
+	try {
+		body = VerifySolutionBody.parse(req.body);
+	} catch (err) {
+		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
 				error: err,
-				code: 500
-			} }));
-		}
-	});
-	router.get("/test", async (req, res) => {
+				code: 400
+			},
+			logLevel: "info"
+		}));
+	}
+	try {
+		const outcome = verifyProcaptchaOutput(deps.decodeToken(body.token));
+		res.json({
+			status: req.t(outcome.statusMessage),
+			verified: outcome.verified,
+			...outcome.commitmentId === void 0 ? {} : { commitmentId: outcome.commitmentId }
+		});
+	} catch (err) {
+		return next(new ProsopoApiError("API.UNKNOWN", { context: {
+			error: err,
+			code: 500
+		} }));
+	}
+};
+/** Record the caller's JA4 fingerprint and hand it back to them. */
+var createTestHandler = (deps) => async (req, res) => {
+	try {
+		const { ja4PlusFingerprint } = await deps.getJA4(req.headers, deps.logger);
 		try {
-			const logger = getLogger("info", "provider-mock:api:test");
-			const ja4PlusFingerprint = await getJA4(req.headers, logger);
-			await db.connect();
-			await db.addOrUpdateJA4Record({
-				ja4_fingerprint: ja4PlusFingerprint.ja4PlusFingerprint,
+			await deps.db.connect();
+			await deps.db.addOrUpdateJA4Record({
+				ja4_fingerprint: ja4PlusFingerprint,
 				user_agent_string: req.headers["user-agent"] || ""
 			});
-			await db.close();
-			return res.json({
-				ja4: ja4PlusFingerprint.ja4PlusFingerprint,
-				ua: req.headers["user-agent"]
-			});
-		} catch (e) {
-			console.error("Error parsing ClientHello:", e);
-			return res.status(500).send("Error parsing ClientHello.");
+		} finally {
+			await deps.db.close();
 		}
-	});
+		res.json({
+			ja4: ja4PlusFingerprint,
+			ua: req.headers["user-agent"]
+		});
+	} catch (e) {
+		deps.logger.error(() => ({
+			err: e instanceof Error ? e : new Error(String(e)),
+			msg: "Failed to record the caller's JA4 fingerprint"
+		}));
+		res.status(500).send("Failed to record the caller's JA4 fingerprint.");
+	}
+};
+/**
+* Both routes do unauthenticated work on the caller's behalf — one verifies a
+* token, the other writes a fingerprint to mongo — so an unthrottled client can
+* drive the database as fast as it can send. The window is generous enough that
+* the demos and cypress runs never see it.
+*/
+var verifyRateLimit = () => rateLimit({
+	windowMs: 6e4,
+	limit: 600,
+	standardHeaders: true,
+	legacyHeaders: false
+});
+/**
+* Adapt a handler written against the narrow request/response types above to
+* the express signature. Express hands the same objects through untouched; the
+* narrow types exist only so tests can pass plain objects.
+*/
+var toRequestHandler = (handler) => {
+	const adapted = (req, res, next) => {
+		handler(req, res, next).catch(next);
+	};
+	return adapted;
+};
+/**
+* Returns a router connected to the database which can interact with the Proposo protocol
+*
+* @return {Router} - A middleware router that can interact with the Prosopo protocol
+*/
+function prosopoRouter(deps = defaultRouterDeps()) {
+	const router = express.Router();
+	router.post(ClientApiPaths.VerifyImageCaptchaSolutionDapp, verifyRateLimit(), toRequestHandler(createVerifyHandler(deps)));
+	router.get("/test", verifyRateLimit(), toRequestHandler(createTestHandler(deps)));
 	return router;
 }
 //#endregion
-export { prosopoRouter };
+export { DEFAULT_MONGO_AUTH_SOURCE, DEFAULT_MONGO_DBNAME, DEFAULT_MONGO_URL, createDatabase, createTestHandler, createVerifyHandler, defaultRouterDeps, prosopoRouter, toRequestHandler, verifyRateLimit };

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACN,cAAc,EACd,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,OAAwB,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAOtC,MAAM,UAAU,aAAa;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,IAAI,WAAW,CACzB,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,2BAA2B,EACpD,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,QAAQ,EACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CACxC,CAAC;IAQF,MAAM,CAAC,IAAI,CACV,cAAc,CAAC,8BAA8B,EAC7C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,IAAkC,CAAC;QACvC,IAAI,CAAC;YACJ,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;gBAC1C,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;gBAClC,QAAQ,EAAE,MAAM;aAChB,CAAC,CACF,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YACvB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;YAC3C,MAAM,WAAW,GAAG,kDAAkD,CAAC;YACvE,MAAM,QAAQ,GAAG,kDAAkD,CAAC;YACpE,IAAI,aAAa,GAAG,uBAAuB,CAAC;YAC5C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IACC,CAAC,IAAI,IAAI,IAAI,KAAK,WAAW,CAAC;gBAC9B,CAAC,YAAY,IAAI,YAAY,KAAK,gBAAgB,CAAC;gBACnD,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,EAC1B,CAAC;gBACF,QAAQ,GAAG,IAAI,CAAC;gBAChB,aAAa,GAAG,mBAAmB,CAAC;gBACpC,OAAO,GAAG,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;oBAC5B,QAAQ,EAAE,QAAQ;oBAClB,YAAY,EAAE,gBAAgB;iBAC9B,CAAC,CAAC;YACJ,CAAC;YAED,OAAO,GAAG,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC5B,QAAQ,EAAE,KAAK;aACf,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,aAAa,EAAE;gBAClC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;aAClC,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CACD,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;YAC3D,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,oBAAoB,CAAC;gBAC7B,eAAe,EAAE,kBAAkB,CAAC,kBAAkB;gBACtD,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE;aAClD,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC;gBACf,GAAG,EAAE,kBAAkB,CAAC,kBAAkB;gBAC1C,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;aAC7B,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACN,cAAc,EAGd,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,OAA6C,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAiB,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AA2BrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAC7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,MAAyB,OAAO,CAAC,GAAG,EACtB,EAAE,CAChB,IAAI,WAAW,CACd,GAAG,CAAC,SAAS,IAAI,iBAAiB,EAClC,GAAG,CAAC,YAAY,IAAI,oBAAoB,EACxC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAClD,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAe,EAAE,CAAC,CAAC;IACnD,EAAE,EAAE,cAAc,EAAE;IACpB,MAAM;IACN,WAAW,EAAE,sBAAsB;IACnC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC;CAC9C,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,mBAAmB,GAC/B,CAAC,IAAgB,EAAE,EAAE,CACrB,KAAK,EAAE,GAAe,EAAE,GAAgB,EAAE,IAAa,EAAiB,EAAE;IACzE,IAAI,IAAkC,CAAC;IACvC,IAAI,CAAC;QACJ,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;YAClC,QAAQ,EAAE,MAAM;SAChB,CAAC,CACF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC;YACR,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SAC1C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,aAAa,EAAE;YAClC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;SAClC,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAC7B,CAAC,IAAgB,EAAE,EAAE,CACrB,KAAK,EAAE,GAAe,EAAE,GAAgB,EAAiB,EAAE;IAC1D,IAAI,CAAC;QACJ,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAC/C,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,MAAM,CACX,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC;gBAClC,eAAe,EAAE,kBAAkB;gBACnC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE;aAClD,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YAGV,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,kBAAkB;YACvB,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;SAC7B,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAGZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClD,GAAG,EAAE,+CAA+C;SACpD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAmB,EAAE,CACnD,SAAS,CAAC;IACT,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,GAAG;IACV,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACpB,CAAC,CAAC;AAOJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,OAA4E,EAC3D,EAAE;IACnB,MAAM,OAAO,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAQ,EAAE;QAIxD,OAAO,CACN,GAA4B,EAC5B,GAA6B,EAC7B,IAAI,CACJ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AAChB,CAAC,CAAC;AAOF,MAAM,UAAU,aAAa,CAAC,OAAmB,iBAAiB,EAAE;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,IAAI,CACV,cAAc,CAAC,8BAA8B,EAC7C,eAAe,EAAE,EACjB,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,CAAC,GAAG,CACT,OAAO,EACP,eAAe,EAAE,EACjB,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CACzC,CAAC;IAEF,OAAO,MAAM,CAAC;AACf,CAAC"}