@prosopo/provider 3.12.14 → 3.13.0

package/dist/api/captcha/submitImageCaptchaSolution.js

@@ -0,0 +1,87 @@
+import { ProsopoApiError } from "@prosopo/common";
+import { CaptchaSolutionBody, ApiParams } from "@prosopo/types";
+import { getIPAddress, flatten } from "@prosopo/util";
+import "../../tasks/index.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
+import { validateSiteKey, validateAddr } from "../validateAddress.js";
+import { Tasks } from "../../tasks/tasks.js";
+const submitImageCaptchaSolution = (env, userAccessRulesStorage) => async (req, res, next) => {
+  const tasks = new Tasks(env, req.logger);
+  if (getMaintenanceMode()) {
+    req.logger.info(() => ({
+      msg: "Maintenance mode active - returning verified for image captcha"
+    }));
+    const result = {
+      status: "ok",
+      captchas: [],
+      verified: true
+    };
+    return res.json(result);
+  }
+  let parsed;
+  try {
+    parsed = CaptchaSolutionBody.parse(req.body);
+  } catch (err) {
+    return next(
+      new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+        context: { code: 400, error: err, body: req.body },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+  const { user, dapp } = parsed;
+  validateSiteKey(dapp);
+  validateAddr(user);
+  try {
+    const clientRecord = await tasks.db.getClientRecord(parsed.dapp);
+    if (!clientRecord) {
+      return next(
+        new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+          context: { code: 400, siteKey: dapp },
+          i18n: req.i18n,
+          logger: req.logger
+        })
+      );
+    }
+    const result = await tasks.imgCaptchaManager.dappUserSolution(
+      user,
+      dapp,
+      parsed[ApiParams.requestHash],
+      parsed[ApiParams.captchas],
+      parsed[ApiParams.signature].user.timestamp,
+      Number.parseInt(parsed[ApiParams.timestamp]),
+      parsed[ApiParams.signature].provider.requestHash,
+      getIPAddress(req.ip || ""),
+      flatten(req.headers),
+      req.ja4
+    );
+    const returnValue = {
+      status: req.i18n.t(
+        result.verified ? "API.CAPTCHA_PASSED" : "API.CAPTCHA_FAILED"
+      ),
+      ...result
+    };
+    return res.json(returnValue);
+  } catch (err) {
+    req.logger.error(() => ({
+      err,
+      body: req.body,
+      msg: "Error in image captcha solution submission"
+    }));
+    return next(
+      new ProsopoApiError("API.BAD_REQUEST", {
+        context: {
+          code: 500,
+          siteKey: req.body.dapp,
+          error: err
+        },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+};
+export {
+  submitImageCaptchaSolution as default
+};

package/dist/api/captcha/submitPoWCaptchaSolution.js

@@ -0,0 +1,77 @@
+import { ProsopoApiError } from "@prosopo/common";
+import { SubmitPowCaptchaSolutionBody } from "@prosopo/types";
+import { getIPAddress, flatten } from "@prosopo/util";
+import { Tasks } from "../../tasks/tasks.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
+import { validateSiteKey, validateAddr } from "../validateAddress.js";
+const submitPoWCaptchaSolution = (env) => async (req, res, next) => {
+  let parsed;
+  const tasks = new Tasks(env, req.logger);
+  if (getMaintenanceMode()) {
+    req.logger.info(() => ({
+      msg: "Maintenance mode active - returning verified"
+    }));
+    const response = {
+      status: "ok",
+      verified: true
+    };
+    return res.json(response);
+  }
+  try {
+    parsed = SubmitPowCaptchaSolutionBody.parse(req.body);
+  } catch (err) {
+    return next(
+      new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+        context: { code: 400, error: err, body: req.body },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+  const { challenge, signature, nonce, verifiedTimeout, dapp, user } = parsed;
+  validateSiteKey(dapp);
+  validateAddr(user);
+  try {
+    const clientRecord = await tasks.db.getClientRecord(dapp);
+    if (!clientRecord) {
+      return next(
+        new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+          context: { code: 400, siteKey: dapp },
+          i18n: req.i18n,
+          logger: req.logger
+        })
+      );
+    }
+    const verified = await tasks.powCaptchaManager.verifyPowCaptchaSolution(
+      challenge,
+      signature.provider.challenge,
+      nonce,
+      verifiedTimeout,
+      signature.user.timestamp,
+      getIPAddress(req.ip || ""),
+      flatten(req.headers)
+    );
+    const response = { status: "ok", verified };
+    return res.json(response);
+  } catch (err) {
+    req.logger.error(() => ({
+      err,
+      body: req.body,
+      msg: "Error in PoW captcha solution submission"
+    }));
+    return next(
+      new ProsopoApiError("API.BAD_REQUEST", {
+        context: {
+          code: 500,
+          siteKey: req.body.dapp,
+          error: err
+        },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+};
+export {
+  submitPoWCaptchaSolution as default
+};