@prosopo/provider 2.1.7 → 2.1.9

package/.dockerignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+.env*
+.git/
+.cache/

package/dist/api/admin.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import { Router } from "express";
+export declare function prosopoAdminRouter(env: ProviderEnvironment): Router;
+//# sourceMappingURL=admin.d.ts.map

package/dist/api/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/api/admin.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAgCnE"}

package/dist/api/admin.js

@@ -0,0 +1,36 @@
+import { logError } from "@prosopo/common";
+import { AdminApiPaths, RegisterSitekeyBody, } from "@prosopo/types";
+import { Router } from "express";
+import { Tasks } from "../index.js";
+export function prosopoAdminRouter(env) {
+    const router = Router();
+    const tasks = new Tasks(env);
+    router.post(AdminApiPaths.UpdateDataset, async (req, res, next) => {
+        try {
+            const result = await tasks.datasetManager.providerSetDataset(req.body);
+            console.info(`Dataset update complete: ${result}`);
+            res.status(200).send(result);
+        }
+        catch (err) {
+            logError(err, tasks.logger);
+            res.status(500).send("An internal server error occurred.");
+        }
+    });
+    router.post(AdminApiPaths.SiteKeyRegister, async (req, res, next) => {
+        try {
+            const { siteKey, settings } = RegisterSitekeyBody.parse(req.body);
+            const temp = settings || {};
+            await tasks.clientTaskManager.registerSiteKey(siteKey, temp);
+            const response = {
+                status: "success",
+            };
+            res.json(response);
+        }
+        catch (err) {
+            logError(err, tasks.logger);
+            res.status(500).send("An internal server error occurred.");
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=admin.js.map

package/dist/api/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/api/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAcnD,OAAO,EACN,aAAa,EAEb,mBAAmB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,UAAU,kBAAkB,CAAC,GAAwB;IAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEvE,OAAO,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACnE,IAAI,CAAC;YACJ,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,QAAQ,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAgB;gBAC7B,MAAM,EAAE,SAAS;aACjB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/authMiddleware.d.ts

@@ -0,0 +1,6 @@
+import type { KeyringPair } from "@polkadot/keyring/types";
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { NextFunction, Request, Response } from "express";
+export declare const authMiddleware: (env: ProviderEnvironment) => (req: Request, res: Response, next: NextFunction) => Promise<void>;
+export declare const verifySignature: (signature: string, timestamp: string, pair: KeyringPair) => void;
+//# sourceMappingURL=authMiddleware.d.ts.map

package/dist/api/authMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.d.ts","sourceRoot":"","sources":["../../src/api/authMiddleware.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAI3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,eAAO,MAAM,cAAc,QAAS,mBAAmB,WACnC,OAAO,OAAO,QAAQ,QAAQ,YAAY,kBA0B7D,CAAC;AAwCF,eAAO,MAAM,eAAe,cAChB,MAAM,aACN,MAAM,QACX,WAAW,SASjB,CAAC"}

package/dist/api/authMiddleware.js

@@ -0,0 +1,66 @@
+import { hexToU8a, isHex } from "@polkadot/util";
+import { ProsopoApiError, ProsopoEnvError } from "@prosopo/common";
+import { ApiPrefix } from "@prosopo/types";
+export const authMiddleware = (env) => {
+    return async (req, res, next) => {
+        try {
+            if (req.url.indexOf(ApiPrefix) === -1) {
+                next();
+                return;
+            }
+            const { signature, timestamp } = extractHeaders(req);
+            if (!env.pair) {
+                res.status(401).json({
+                    error: "Unauthorized",
+                    message: new ProsopoEnvError("CONTRACT.CANNOT_FIND_KEYPAIR"),
+                });
+                return;
+            }
+            verifySignature(signature, timestamp, env.pair);
+            next();
+        }
+        catch (err) {
+            console.error("Auth Middleware Error:", err);
+            res.status(401).json({ error: "Unauthorized", message: err });
+            return;
+        }
+    };
+};
+const extractHeaders = (req) => {
+    const signature = req.headers.signature;
+    const timestamp = req.headers.timestamp;
+    if (!timestamp) {
+        throw new ProsopoApiError("GENERAL.INVALID_TIMESTAMP", {
+            context: { error: "Missing timestamp", code: 400 },
+        });
+    }
+    if (!signature) {
+        throw new ProsopoApiError("GENERAL.INVALID_SIGNATURE", {
+            context: { error: "Missing signature", code: 400 },
+        });
+    }
+    if (Array.isArray(signature) ||
+        Array.isArray(timestamp) ||
+        !isHex(signature)) {
+        throw new ProsopoApiError("CONTRACT.INVALID_DATA_FORMAT", {
+            context: { error: "Invalid header format", code: 400 },
+        });
+    }
+    const now = new Date().getTime();
+    const ts = Number.parseInt(timestamp, 10);
+    if (now - ts > 300000) {
+        throw new ProsopoApiError("GENERAL.INVALID_TIMESTAMP", {
+            context: { error: "Timestamp is too old", code: 400 },
+        });
+    }
+    return { signature, timestamp };
+};
+export const verifySignature = (signature, timestamp, pair) => {
+    const u8Sig = hexToU8a(signature);
+    if (!pair.verify(timestamp, u8Sig, pair.publicKey)) {
+        throw new ProsopoApiError("GENERAL.INVALID_SIGNATURE", {
+            context: { error: "Signature verification failed", code: 401 },
+        });
+    }
+};
+//# sourceMappingURL=authMiddleware.js.map

package/dist/api/authMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.js","sourceRoot":"","sources":["../../src/api/authMiddleware.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAwB,EAAE,EAAE;IAC1D,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,CAAC;YAEJ,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,EAAE,CAAC;gBACP,OAAO;YACR,CAAC;YAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAErD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,IAAI,eAAe,CAAC,8BAA8B,CAAC;iBAC5D,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAEhD,IAAI,EAAE,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;IACF,CAAC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,EAAE;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAmB,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAmB,CAAC;IAElD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE;YACtD,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE;YACtD,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACJ,CAAC;IAED,IACC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,CAAC,KAAK,CAAC,SAAS,CAAC,EAChB,CAAC;QACF,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE;YACzD,OAAO,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE;SACtD,CAAC,CAAC;IACJ,CAAC;IAGD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE;YACtD,OAAO,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,EAAE;SACrD,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC9B,SAAiB,EACjB,SAAiB,EACjB,IAAiB,EAChB,EAAE;IACH,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAElC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE;YACtD,OAAO,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,GAAG,EAAE;SAC9D,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC"}

package/dist/api/block.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { NextFunction, Request, Response } from "express";
+export declare const blockMiddleware: (env: ProviderEnvironment) => (req: Request, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
+//# sourceMappingURL=block.d.ts.map

package/dist/api/block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.d.ts","sourceRoot":"","sources":["../../src/api/block.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAI/D,eAAO,MAAM,eAAe,QAAS,mBAAmB,WACpC,OAAO,OAAO,QAAQ,QAAQ,YAAY,4DA+D7D,CAAC"}

package/dist/api/block.js

@@ -0,0 +1,55 @@
+import { ApiPrefix } from "@prosopo/types";
+import { getIPAddress } from "../util.js";
+export const blockMiddleware = (env) => {
+    return async (req, res, next) => {
+        try {
+            if (req.url.indexOf(ApiPrefix) === -1) {
+                next();
+                return;
+            }
+            if (!req.ip) {
+                console.log("No IP", req.ip);
+                return res.status(401).json({ error: "Unauthorized" });
+            }
+            await env.isReady();
+            const ipAddress = getIPAddress(req.ip || "");
+            const userAccount = req.body.user;
+            const dappAccount = req.body.dapp;
+            const rule = await env.getDb().getIPBlockRuleRecord(ipAddress.bigInt());
+            if (rule && BigInt(rule.ip) === ipAddress.bigInt()) {
+                if (rule.global && rule.hardBlock) {
+                    return res.status(401).json({ error: "Unauthorized" });
+                }
+                if (dappAccount) {
+                    const dappRule = await env
+                        .getDb()
+                        .getIPBlockRuleRecord(ipAddress.bigInt(), dappAccount);
+                    if (dappRule?.hardBlock &&
+                        dappRule.dappAccount === dappAccount &&
+                        BigInt(dappRule.ip) === ipAddress.bigInt()) {
+                        return res.status(401).json({ error: "Unauthorized" });
+                    }
+                }
+            }
+            if (userAccount && dappAccount) {
+                const rule = await env
+                    .getDb()
+                    .getUserBlockRuleRecord(userAccount, dappAccount);
+                if (rule &&
+                    rule.userAccount === userAccount &&
+                    rule.dappAccount === dappAccount &&
+                    rule.hardBlock) {
+                    return res.status(401).json({ error: "Unauthorized" });
+                }
+            }
+            next();
+            return;
+        }
+        catch (err) {
+            console.error("Block Middleware Error:", err);
+            res.status(401).json({ error: "Unauthorized", message: err });
+            return;
+        }
+    };
+};
+//# sourceMappingURL=block.js.map

package/dist/api/block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.js","sourceRoot":"","sources":["../../src/api/block.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAwB,EAAE,EAAE;IAC3D,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,CAAC;YAEJ,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,EAAE,CAAC;gBACP,OAAO;YACR,CAAC;YAGD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;YAEpB,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBAEpD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACxD,CAAC;gBAED,IAAI,WAAW,EAAE,CAAC;oBACjB,MAAM,QAAQ,GAAG,MAAM,GAAG;yBACxB,KAAK,EAAE;yBACP,oBAAoB,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;oBACxD,IACC,QAAQ,EAAE,SAAS;wBACnB,QAAQ,CAAC,WAAW,KAAK,WAAW;wBACpC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,EACzC,CAAC;wBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;oBACxD,CAAC;gBACF,CAAC;YACF,CAAC;YAED,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,GAAG;qBACpB,KAAK,EAAE;qBACP,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAEnD,IACC,IAAI;oBACJ,IAAI,CAAC,WAAW,KAAK,WAAW;oBAChC,IAAI,CAAC,WAAW,KAAK,WAAW;oBAChC,IAAI,CAAC,SAAS,EACb,CAAC;oBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACxD,CAAC;YACF,CAAC;YAED,IAAI,EAAE,CAAC;YACP,OAAO;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;IACF,CAAC,CAAC;AACH,CAAC,CAAC"}

package/dist/api/captcha.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import { type Router } from "express";
+export declare function prosopoRouter(env: ProviderEnvironment): Router;
+//# sourceMappingURL=captcha.d.ts.map

package/dist/api/captcha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captcha.d.ts","sourceRoot":"","sources":["../../src/api/captcha.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAgB/C,wBAAgB,aAAa,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAmc9D"}

package/dist/api/captcha.js

@@ -0,0 +1,284 @@
+import { validateAddress } from "@polkadot/util-crypto/address";
+import { ProsopoApiError } from "@prosopo/common";
+import { parseCaptchaAssets } from "@prosopo/datasets";
+import { ApiParams, ApiPaths, CaptchaRequestBody, CaptchaSolutionBody, GetFrictionlessCaptchaChallengeRequestBody, GetPowCaptchaChallengeRequestBody, SubmitPowCaptchaSolutionBody, } from "@prosopo/types";
+import { flatten, version } from "@prosopo/util";
+import express from "express";
+import { getBotScore } from "../tasks/detection/getBotScore.js";
+import { Tasks } from "../tasks/tasks.js";
+import { getIPAddress } from "../util.js";
+import { handleErrors } from "./errorHandler.js";
+const NO_IP_ADDRESS = "NO_IP_ADDRESS";
+const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
+export function prosopoRouter(env) {
+    const router = express.Router();
+    const tasks = new Tasks(env);
+    const GetImageCaptchaChallengePath = `${ApiPaths.GetImageCaptchaChallenge}/:${ApiParams.datasetId}/:${ApiParams.user}/:${ApiParams.dapp}`;
+    router.get(GetImageCaptchaChallengePath, async (req, res, next) => {
+        let parsed;
+        try {
+            parsed = CaptchaRequestBody.parse(req.params);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+                context: { code: 400, error: err },
+            }));
+        }
+        const { datasetId, user, dapp } = parsed;
+        try {
+            validateAddress(dapp, false, 42);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("API.INVALID_SITE_KEY", {
+                context: { code: 400, error: err, siteKey: dapp },
+            }));
+        }
+        try {
+            validateAddress(user, false, 42);
+            const clientRecord = await tasks.db.getClientRecord(dapp);
+            if (!clientRecord) {
+                return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+                    context: { code: 400, siteKey: dapp },
+                }));
+            }
+            const taskData = await tasks.imgCaptchaManager.getRandomCaptchasAndRequestHash(datasetId, user, getIPAddress(req.ip || ""), flatten(req.headers, ","));
+            const captchaResponse = {
+                [ApiParams.status]: "ok",
+                [ApiParams.captchas]: taskData.captchas.map((captcha) => ({
+                    ...captcha,
+                    items: captcha.items.map((item) => parseCaptchaAssets(item, env.assetsResolver)),
+                })),
+                [ApiParams.requestHash]: taskData.requestHash,
+                [ApiParams.timestamp]: taskData.timestamp.toString(),
+                [ApiParams.signature]: {
+                    [ApiParams.provider]: {
+                        [ApiParams.requestHash]: taskData.signedRequestHash,
+                    },
+                },
+            };
+            return res.json(captchaResponse);
+        }
+        catch (err) {
+            tasks.logger.error({ err, params: req.params });
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: {
+                    error: err,
+                    code: 500,
+                    params: req.params,
+                },
+            }));
+        }
+    });
+    router.post(ApiPaths.SubmitImageCaptchaSolution, async (req, res, next) => {
+        let parsed;
+        try {
+            parsed = CaptchaSolutionBody.parse(req.body);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+                context: { code: 400, error: err, body: req.body },
+            }));
+        }
+        const { user, dapp } = parsed;
+        try {
+            validateAddress(dapp, false, 42);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("API.INVALID_SITE_KEY", {
+                context: { code: 400, error: err, siteKey: dapp },
+            }));
+        }
+        try {
+            validateAddress(user, false, 42);
+            const clientRecord = await tasks.db.getClientRecord(parsed.dapp);
+            if (!clientRecord) {
+                return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+                    context: { code: 400, siteKey: dapp },
+                }));
+            }
+            const result = await tasks.imgCaptchaManager.dappUserSolution(user, dapp, parsed[ApiParams.requestHash], parsed[ApiParams.captchas], parsed[ApiParams.signature].user.timestamp, Number.parseInt(parsed[ApiParams.timestamp]), parsed[ApiParams.signature].provider.requestHash, getIPAddress(req.ip || "").bigInt(), flatten(req.headers, ","));
+            const returnValue = {
+                status: req.i18n.t(result.verified ? "API.CAPTCHA_PASSED" : "API.CAPTCHA_FAILED"),
+                ...result,
+            };
+            return res.json(returnValue);
+        }
+        catch (err) {
+            tasks.logger.error({ err, body: req.body });
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: { code: 500, siteKey: req.body.dapp },
+            }));
+        }
+    });
+    router.post(ApiPaths.GetPowCaptchaChallenge, async (req, res, next) => {
+        let parsed;
+        try {
+            parsed = GetPowCaptchaChallengeRequestBody.parse(req.body);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+                context: { code: 400, error: err },
+            }));
+        }
+        const { user, dapp, sessionId } = parsed;
+        try {
+            validateAddress(dapp, false, 42);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("API.INVALID_SITE_KEY", {
+                context: { code: 400, error: err, siteKey: dapp },
+            }));
+        }
+        try {
+            validateAddress(user, false, 42);
+            const clientSettings = await tasks.db.getClientRecord(dapp);
+            const clientRecord = await tasks.db.getClientRecord(dapp);
+            if (!clientRecord) {
+                return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+                    context: { code: 400, siteKey: dapp },
+                }));
+            }
+            if (sessionId) {
+                const sessionRecord = await tasks.db.checkAndRemoveSession(sessionId);
+                if (!sessionRecord) {
+                    return next(new ProsopoApiError("API.BAD_REQUEST", {
+                        context: { error: "Session ID not found", code: 400 },
+                    }));
+                }
+            }
+            else if (!(clientSettings?.settings?.captchaType === "pow")) {
+                return next(new ProsopoApiError("API.INCORRECT_CAPTCHA_TYPE", {
+                    context: { code: 400, siteKey: dapp },
+                }));
+            }
+            const origin = req.headers.origin;
+            if (!origin) {
+                return next(new ProsopoApiError("API.BAD_REQUEST", {
+                    context: { error: "Origin header not found", code: 400 },
+                }));
+            }
+            const challenge = await tasks.powCaptchaManager.getPowCaptchaChallenge(user, dapp, origin, clientSettings?.settings?.powDifficulty);
+            await tasks.db.storePowCaptchaRecord(challenge.challenge, {
+                requestedAtTimestamp: challenge.requestedAtTimestamp,
+                userAccount: user,
+                dappAccount: dapp,
+            }, challenge.difficulty, challenge.providerSignature, getIPAddress(req.ip || "").bigInt(), flatten(req.headers, ","));
+            const getPowCaptchaResponse = {
+                [ApiParams.status]: "ok",
+                [ApiParams.challenge]: challenge.challenge,
+                [ApiParams.difficulty]: challenge.difficulty,
+                [ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
+                [ApiParams.signature]: {
+                    [ApiParams.provider]: {
+                        [ApiParams.challenge]: challenge.providerSignature,
+                    },
+                },
+            };
+            return res.json(getPowCaptchaResponse);
+        }
+        catch (err) {
+            tasks.logger.error({ err, body: req.body });
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: {
+                    code: 500,
+                    siteKey: req.body.dapp,
+                },
+            }));
+        }
+    });
+    router.post(ApiPaths.SubmitPowCaptchaSolution, async (req, res, next) => {
+        let parsed;
+        try {
+            parsed = SubmitPowCaptchaSolutionBody.parse(req.body);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+                context: { code: 400, error: err, body: req.body },
+            }));
+        }
+        const { challenge, difficulty, signature, nonce, verifiedTimeout, dapp, user, } = parsed;
+        try {
+            validateAddress(dapp, false, 42);
+        }
+        catch (err) {
+            return next(new ProsopoApiError("API.INVALID_SITE_KEY", {
+                context: { code: 400, error: err, siteKey: dapp },
+            }));
+        }
+        try {
+            validateAddress(user, false, 42);
+            validateAddress(dapp, false, 42);
+            const clientRecord = await tasks.db.getClientRecord(dapp);
+            if (!clientRecord) {
+                return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+                    context: { code: 400, siteKey: dapp },
+                }));
+            }
+            const verified = await tasks.powCaptchaManager.verifyPowCaptchaSolution(challenge, difficulty, signature.provider.challenge, nonce, verifiedTimeout, signature.user.timestamp, getIPAddress(req.ip || ""), flatten(req.headers, ","));
+            const response = { status: "ok", verified };
+            return res.json(response);
+        }
+        catch (err) {
+            tasks.logger.error({ err, body: req.body });
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: {
+                    code: 500,
+                    siteKey: req.body.dapp,
+                },
+            }));
+        }
+    });
+    router.post(ApiPaths.GetFrictionlessCaptchaChallenge, async (req, res, next) => {
+        try {
+            const { token, dapp, user } = GetFrictionlessCaptchaChallengeRequestBody.parse(req.body);
+            const botScore = await getBotScore(token);
+            const clientConfig = await tasks.db.getClientRecord(dapp);
+            const botThreshold = clientConfig?.settings?.frictionlessThreshold ||
+                DEFAULT_FRICTIONLESS_THRESHOLD;
+            const ipAddress = getIPAddress(req.ip || "");
+            const isIpBlocked = await tasks.frictionlessManager.checkIpRules(ipAddress, dapp);
+            if (isIpBlocked)
+                return res.json(tasks.frictionlessManager.sendImageCaptcha());
+            const isUserBlocked = await tasks.frictionlessManager.checkUserRules(user, dapp);
+            if (isUserBlocked)
+                return res.json(tasks.frictionlessManager.sendImageCaptcha());
+            if (Number(botScore) > botThreshold)
+                return res.json(tasks.frictionlessManager.sendImageCaptcha());
+            const response = await tasks.frictionlessManager.sendPowCaptcha();
+            return res.json(response);
+        }
+        catch (err) {
+            console.error("Error in frictionless captcha challenge:", err);
+            tasks.logger.error(err);
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: { code: 400, error: err },
+            }));
+        }
+    });
+    router.post(ApiPaths.UpdateProviderClients, async (req, res, next) => {
+        try {
+            await tasks.clientTaskManager.getClientList();
+            return res.json({ message: "Provider updated" });
+        }
+        catch (err) {
+            tasks.logger.error(err);
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: { code: 400, error: err },
+            }));
+        }
+    });
+    router.get(ApiPaths.GetProviderDetails, async (req, res, next) => {
+        try {
+            return res.json({ version, ...{ message: "Provider online" } });
+        }
+        catch (err) {
+            tasks.logger.error({ err, params: req.params });
+            return next(new ProsopoApiError("API.BAD_REQUEST", {
+                context: { code: 500 },
+            }));
+        }
+    });
+    router.use(handleErrors);
+    return router;
+}
+//# sourceMappingURL=captcha.js.map

package/dist/api/captcha.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captcha.js","sourceRoot":"","sources":["../../src/api/captcha.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACN,SAAS,EACT,QAAQ,EAER,kBAAkB,EAGlB,mBAAmB,EAInB,0CAA0C,EAE1C,iCAAiC,EAIjC,4BAA4B,GAG5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,OAAwB,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,aAAa,GAAG,eAAwB,CAAC;AAC/C,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAQ3C,MAAM,UAAU,aAAa,CAAC,GAAwB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAQ7B,MAAM,4BAA4B,GAA2C,GAAG,QAAQ,CAAC,wBAAwB,KAAK,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;IAClL,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;gBAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;aAClC,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAEzC,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,sBAAsB,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;oBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;iBACrC,CAAC,CACF,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GACb,MAAM,KAAK,CAAC,iBAAiB,CAAC,+BAA+B,CAC5D,SAAS,EACT,IAAI,EACJ,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;YACH,MAAM,eAAe,GAAwB;gBAC5C,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;gBACxB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC;oBAClE,GAAG,OAAO;oBACV,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAC5C;iBACD,CAAC,CAAC;gBACH,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,WAAW;gBAC7C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACpD,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;oBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;wBACrB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,iBAAiB;qBACnD;iBACD;aACD,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,GAAG;oBACV,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;iBAClB;aACD,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAUH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzE,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;gBAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;aAClD,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAE9B,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,sBAAsB,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAEjE,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;oBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;iBACrC,CAAC,CACF,CAAC;YACH,CAAC;YAGD,MAAM,MAAM,GACX,MAAM,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,CAC7C,IAAI,EACJ,IAAI,EACJ,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAC7B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,EAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAC5C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAChD,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;YAEH,MAAM,WAAW,GAA4B;gBAC5C,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAC7D;gBACD,GAAG,MAAM;aACT,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;aAC9C,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAQH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACrE,IAAI,MAAmD,CAAC;QAExD,IAAI,CAAC;YACJ,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;gBAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;aAClC,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QACzC,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,sBAAsB,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAEjC,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;oBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;iBACrC,CAAC,CACF,CAAC;YACH,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBACtE,IAAI,CAAC,aAAa,EAAE,CAAC;oBACpB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;wBACtC,OAAO,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,EAAE;qBACrD,CAAC,CACF,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,IAAI,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,KAAK,KAAK,CAAC,EAAE,CAAC;gBAE/D,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,4BAA4B,EAAE;oBACjD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;iBACrC,CAAC,CACF,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAElC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;oBACtC,OAAO,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,GAAG,EAAE;iBACxD,CAAC,CACF,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CACrE,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,cAAc,EAAE,QAAQ,EAAE,aAAa,CACvC,CAAC;YAEF,MAAM,KAAK,CAAC,EAAE,CAAC,qBAAqB,CACnC,SAAS,CAAC,SAAS,EACnB;gBACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;gBACpD,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;aACjB,EACD,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,iBAAiB,EAC3B,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;YAEF,MAAM,qBAAqB,GAA0B;gBACpD,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;gBACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;gBAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,UAAU;gBAC5C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;gBAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;oBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;wBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;qBAClD;iBACD;aACD,CAAC;YAEF,OAAO,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;iBACtB;aACD,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAWH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvE,IAAI,MAA8C,CAAC;QAEnD,IAAI,CAAC;YACJ,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;gBAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;aAClD,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,KAAK,EACL,eAAe,EACf,IAAI,EACJ,IAAI,GACJ,GAAG,MAAM,CAAC;QAEX,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,sBAAsB,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAEjC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;oBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;iBACrC,CAAC,CACF,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,wBAAwB,CACtE,SAAS,EACT,UAAU,EACV,SAAS,CAAC,QAAQ,CAAC,SAAS,EAC5B,KAAK,EACL,eAAe,EACf,SAAS,CAAC,IAAI,CAAC,SAAS,EACxB,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;YACF,MAAM,QAAQ,GAA+B,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACxE,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;iBACtB;aACD,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAKH,MAAM,CAAC,IAAI,CACV,QAAQ,CAAC,+BAA+B,EACxC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACJ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAC1B,0CAA0C,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,YAAY,GACjB,YAAY,EAAE,QAAQ,EAAE,qBAAqB;gBAC7C,8BAA8B,CAAC;YAGhC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAC/D,SAAS,EACT,IAAI,CACJ,CAAC;YACF,IAAI,WAAW;gBACd,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAG/D,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACnE,IAAI,EACJ,IAAI,CACJ,CAAC;YACF,IAAI,aAAa;gBAChB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAG/D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY;gBAClC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAE/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,EAAE,CAAC;YAClE,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;YAC/D,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;aAClC,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CACD,CAAC;IAKF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACpE,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;aAClC,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAKH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChE,IAAI,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;aACtB,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAKH,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/errorHandler.d.ts

@@ -0,0 +1,11 @@
+import { type ProsopoApiError } from "@prosopo/common";
+import type { ApiJsonError } from "@prosopo/types";
+import type { NextFunction, Request, Response } from "express";
+import { ZodError } from "zod";
+export declare const handleErrors: (err: ProsopoApiError | SyntaxError | ZodError, request: Request, response: Response, next: NextFunction) => void;
+export declare const unwrapError: (err: ProsopoApiError | SyntaxError | ZodError) => {
+    code: number;
+    statusMessage: string;
+    jsonError: ApiJsonError;
+};
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/api/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/api/errorHandler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,KAAK,eAAe,EAAoB,MAAM,iBAAiB,CAAC;AAEzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAE/B,eAAO,MAAM,YAAY,QACnB,eAAe,GAAG,WAAW,GAAG,QAAQ,WACpC,OAAO,YACN,QAAQ,QACZ,YAAY,SAQlB,CAAC;AAEF,eAAO,MAAM,WAAW,QAAS,eAAe,GAAG,WAAW,GAAG,QAAQ;;;;CA+BxE,CAAC"}

package/dist/api/errorHandler.js

@@ -0,0 +1,42 @@
+import { ProsopoBaseError } from "@prosopo/common";
+import { i18n as i18next } from "@prosopo/locale";
+import { ZodError } from "zod";
+export const handleErrors = (err, request, response, next) => {
+    const { code, statusMessage, jsonError } = unwrapError(err);
+    response.statusMessage = statusMessage;
+    response.set("content-type", "application/json");
+    response.status(code);
+    response.send({ error: jsonError });
+    response.end();
+};
+export const unwrapError = (err) => {
+    const code = "code" in err ? err.code : 400;
+    let message = err.message;
+    let jsonError = { code, message };
+    let statusMessage = err.message;
+    jsonError.message = message;
+    while (err instanceof ProsopoBaseError && err.context) {
+        jsonError.code =
+            err.context.translationKey || err.translationKey || jsonError.code;
+        jsonError.message = err.message;
+        if (err.context.error) {
+            err = err.context.error;
+        }
+        else {
+            break;
+        }
+    }
+    if (err instanceof ZodError) {
+        message = i18next.t("CAPTCHA.PARSE_ERROR");
+        statusMessage = message;
+        if (typeof err.message === "object") {
+            jsonError = err.message;
+        }
+        else {
+            jsonError.message = JSON.parse(err.message);
+        }
+    }
+    jsonError.code = jsonError.code || code;
+    return { code, statusMessage, jsonError };
+};
+//# sourceMappingURL=errorHandler.js.map

package/dist/api/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/api/errorHandler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAwB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG,CAC3B,GAA6C,EAC7C,OAAgB,EAChB,QAAkB,EAClB,IAAkB,EACjB,EAAE;IACH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5D,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAC;IACvC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAA6C,EAAE,EAAE;IAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC1B,IAAI,SAAS,GAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChD,IAAI,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC;IAChC,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IAE5B,OAAO,GAAG,YAAY,gBAAgB,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAEvD,SAAS,CAAC,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC;QACpE,SAAS,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAChC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACP,MAAM;QACP,CAAC;IACF,CAAC;IAED,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3C,aAAa,GAAG,OAAO,CAAC;QACxB,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC;QACzB,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IAED,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC,CAAC"}

package/dist/api/verify.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import { type Router } from "express";
+export declare function prosopoVerifyRouter(env: ProviderEnvironment): Router;
+//# sourceMappingURL=verify.d.ts.map

package/dist/api/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/api/verify.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAW/C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAyKpE"}