@prosopo/provider 3.12.14 → 3.13.6

package/dist/tasks/detection/getBotScore.js

@@ -1,7 +1,7 @@
-import pBPrK9 from "./decodePayload.js";
+import fYWyhW from "./decodePayload.js";
 const DEFAULT_ENTROPY = 13837;
 const getBotScore = async (payload, headHash, privateKeyString) => {
-  const result = await pBPrK9(
+  const result = await fYWyhW(
     payload,
     headHash,
     privateKeyString

package/dist/tasks/frictionless/frictionlessTasks.js

@@ -15,9 +15,18 @@ const getDefaultEntropy = () => {
 };
 const DEFAULT_MAX_TIMESTAMP_AGE = 60 * 10 * 1e3;
 const DEFAULT_ENTROPY = getDefaultEntropy();
+var FrictionlessReason = /* @__PURE__ */ ((FrictionlessReason2) => {
+  FrictionlessReason2["CONTEXT_AWARE_VALIDATION_FAILED"] = "CONTEXT_AWARE_VALIDATION_FAILED";
+  FrictionlessReason2["USER_ACCESS_POLICY"] = "USER_ACCESS_POLICY";
+  FrictionlessReason2["USER_AGENT_MISMATCH"] = "USER_AGENT_MISMATCH";
+  FrictionlessReason2["OLD_TIMESTAMP"] = "OLD_TIMESTAMP";
+  FrictionlessReason2["BOT_SCORE_ABOVE_THRESHOLD"] = "BOT_SCORE_ABOVE_THRESHOLD";
+  FrictionlessReason2["WEBVIEW_DETECTED"] = "WEBVIEW_DETECTED";
+  return FrictionlessReason2;
+})(FrictionlessReason || {});
 class FrictionlessManager extends CaptchaManager {
   constructor(db, pair, config, logger) {
-    super(db, pair, logger);
+    super(db, pair, config, logger);
     this.config = config;
   }
   setSessionParams(params) {
@@ -42,7 +51,7 @@ class FrictionlessManager extends CaptchaManager {
   checkLangRules(acceptLanguage) {
     return checkLangRules(this.config, acceptLanguage);
   }
-  async createSession(token, score, threshold, scoreComponents, providerSelectEntropy, ipAddress, captchaType, solvedImagesCount, powDifficulty, webView = false, iFrame = false, decryptedHeadHash = "") {
+  async createSession(token, score, threshold, scoreComponents, providerSelectEntropy, ipAddress, captchaType, solvedImagesCount, powDifficulty, userSitekeyIpHash, webView = false, iFrame = false, decryptedHeadHash = "", reason) {
     const sessionRecord = {
       sessionId: v4(),
       createdAt: /* @__PURE__ */ new Date(),
@@ -55,9 +64,11 @@ class FrictionlessManager extends CaptchaManager {
       captchaType,
       solvedImagesCount,
       powDifficulty,
+      userSitekeyIpHash,
       webView,
       iFrame,
-      decryptedHeadHash
+      decryptedHeadHash,
+      reason
     };
     await this.db.storeSessionRecord(sessionRecord);
     return sessionRecord;
@@ -95,11 +106,13 @@ class FrictionlessManager extends CaptchaManager {
       effectiveParams.providerSelectEntropy,
       effectiveParams.ipAddress,
       CaptchaType.image,
-      params?.solvedImagesCount,
+      effectiveParams.solvedImagesCount,
       void 0,
+      effectiveParams.userSitekeyIpHash,
       effectiveParams.webView ?? false,
       effectiveParams.iFrame ?? false,
-      effectiveParams.decryptedHeadHash
+      effectiveParams.decryptedHeadHash,
+      effectiveParams.reason
     );
     return {
       [ApiParams.captchaType]: CaptchaType.image,
@@ -123,10 +136,12 @@ class FrictionlessManager extends CaptchaManager {
       effectiveParams.ipAddress,
       CaptchaType.pow,
       void 0,
-      params?.powDifficulty,
+      effectiveParams.powDifficulty,
+      effectiveParams.userSitekeyIpHash,
       effectiveParams.webView ?? false,
       effectiveParams.iFrame ?? false,
-      effectiveParams.decryptedHeadHash
+      effectiveParams.decryptedHeadHash,
+      effectiveParams.reason
     );
     return {
       [ApiParams.captchaType]: CaptchaType.pow,
@@ -232,6 +247,7 @@ class FrictionlessManager extends CaptchaManager {
     let webView;
     let iFrame;
     let decryptedHeadHash = "";
+    let decryptionFailed = false;
     for (const [keyIndex, key] of decryptKeys.entries()) {
       try {
         this.logger.info(() => ({
@@ -279,6 +295,7 @@ class FrictionlessManager extends CaptchaManager {
           timestamp = 0;
           providerSelectEntropy = DEFAULT_ENTROPY + 1;
           decryptedHeadHash = "";
+          decryptionFailed = true;
         }
       }
     }
@@ -294,6 +311,7 @@ class FrictionlessManager extends CaptchaManager {
       timestamp = 0;
       providerSelectEntropy = DEFAULT_ENTROPY - undefinedCount;
       decryptedHeadHash = "";
+      decryptionFailed = true;
     }
     this.logger.info(() => ({
       msg: "decryptPayload result",
@@ -305,7 +323,8 @@ class FrictionlessManager extends CaptchaManager {
         userAgent,
         webView,
         iFrame,
-        decryptedHeadHash
+        decryptedHeadHash,
+        decryptionFailed
       }
     }));
     return {
@@ -314,13 +333,18 @@ class FrictionlessManager extends CaptchaManager {
       providerSelectEntropy: Number(providerSelectEntropy),
       userId,
       userAgent,
-      webView,
-      iFrame,
-      decryptedHeadHash
+      webView: webView || false,
+      iFrame: iFrame || false,
+      decryptedHeadHash,
+      decryptionFailed
     };
   }
+  async getClientEntropy(siteKey) {
+    return this.db.getClientEntropy(siteKey);
+  }
 }
 export {
   DEFAULT_ENTROPY,
-  FrictionlessManager
+  FrictionlessManager,
+  FrictionlessReason
 };

package/dist/tasks/frictionless/frictionlessTasksUtils.js

@@ -6,7 +6,10 @@ const computeFrictionlessScore = (scoreComponents) => {
     ).toFixed(2)
   );
 };
-const timestampDecayFunction = (timestamp) => {
+const timestampDecayFunction = (timestamp, decryptionFailed) => {
+  if (decryptionFailed) {
+    return 6;
+  }
   const max = (/* @__PURE__ */ new Date()).getTime();
   if (max - timestamp > 36e5) {
     return 12;

package/dist/tasks/imgCaptcha/imgCaptchaTasks.js

@@ -9,11 +9,12 @@ import { constructPairList, containsIdenticalPairs } from "../../pairs.js";
 import { checkLangRules } from "../../rules/lang.js";
 import { shuffleArray, deepValidateIpAddress } from "../../util.js";
 import { CaptchaManager } from "../captchaManager.js";
+import { FrictionlessReason } from "../frictionless/frictionlessTasks.js";
 import { computeFrictionlessScore } from "../frictionless/frictionlessTasksUtils.js";
 import { buildTreeAndGetCommitmentId } from "./imgCaptchaTasksUtils.js";
 class ImgCaptchaManager extends CaptchaManager {
   constructor(db, pair, config, logger) {
-    super(db, pair, logger);
+    super(db, pair, config, logger);
     this.config = config;
   }
   async getCaptchaWithProof(datasetId, solved, size) {
@@ -332,7 +333,7 @@ class ImgCaptchaManager extends CaptchaManager {
     }
     return void 0;
   }
-  async verifyImageCaptchaSolution(user, dapp, commitmentId, env, maxVerifiedTime, ip, disallowWebView) {
+  async verifyImageCaptchaSolution(user, dapp, commitmentId, env, maxVerifiedTime, ip, disallowWebView, contextAwareEnabled = false) {
     const solution = await (commitmentId ? this.getDappUserCommitmentById(commitmentId) : this.getDappUserCommitmentByAccount(user, dapp));
     if (!solution) {
       this.logger.debug(() => ({
@@ -407,6 +408,11 @@ class ImgCaptchaManager extends CaptchaManager {
           }));
           return { status: "API.USER_NOT_VERIFIED", verified: false };
         }
+        if (contextAwareEnabled && sessionRecord.reason === FrictionlessReason.CONTEXT_AWARE_VALIDATION_FAILED) {
+          this.logger.info(() => ({
+            msg: "Context aware validation failed"
+          }));
+        }
       }
     }
     return {

package/dist/tasks/powCaptcha/powTasks.js

@@ -9,8 +9,8 @@ import { computeFrictionlessScore } from "../frictionless/frictionlessTasksUtils
 import { checkPowSignature, validateSolution } from "./powTasksUtils.js";
 const DEFAULT_POW_DIFFICULTY = 4;
 class PowCaptchaManager extends CaptchaManager {
-  constructor(db, pair, logger) {
-    super(db, pair, logger);
+  constructor(db, pair, config, logger) {
+    super(db, pair, config, logger);
     this.POW_SEPARATOR = POW_SEPARATOR;
   }
   /**

package/dist/tasks/tasks.js

@@ -19,6 +19,7 @@ class Tasks {
     this.powCaptchaManager = new PowCaptchaManager(
       this.db,
       this.pair,
+      this.config,
       this.logger
     );
     this.datasetManager = new DatasetManager(

package/dist/utils/hashUserIp.js

@@ -0,0 +1,9 @@
+import { createHash } from "node:crypto";
+function hashUserIp(user, ip, sitekey) {
+  const hash = createHash("sha256");
+  hash.update(`${user}:${ip}:${sitekey}`, "utf8");
+  return hash.digest("hex");
+}
+export {
+  hashUserIp
+};

package/package.json

@@ -1,12 +1,12 @@
 {
 	"name": "@prosopo/provider",
-	"version": "3.12.14",
+	"version": "3.13.6",
 	"author": "PROSOPO LIMITED <info@prosopo.io>",
 	"license": "Apache-2.0",
 	"type": "module",
 	"engines": {
-		"node": ">=v20.0.0",
-		"npm": ">=10.6.0"
+		"node": "^24",
+		"npm": "^11"
 	},
 	"scripts": {
 		"clean": "del-cli --verbose dist tsconfig.tsbuildinfo",
@@ -22,23 +22,22 @@
 	"dependencies": {
 		"@noble/hashes": "1.8.0",
 		"@polkadot/util": "13.5.7",
-		"@prosopo/api": "3.1.32",
-		"@prosopo/api-express-router": "3.0.33",
-		"@prosopo/api-route": "2.6.29",
-		"@prosopo/common": "3.1.21",
-		"@prosopo/config": "3.1.21",
-		"@prosopo/database": "3.4.13",
-		"@prosopo/datasets": "3.0.42",
-		"@prosopo/env": "3.2.21",
-		"@prosopo/keyring": "2.8.35",
-		"@prosopo/load-balancer": "2.8.8",
-		"@prosopo/locale": "3.1.21",
-		"@prosopo/types": "3.5.11",
-		"@prosopo/types-database": "3.3.13",
-		"@prosopo/types-env": "2.7.46",
-		"@prosopo/user-access-policy": "3.5.27",
-		"@prosopo/util": "3.1.7",
-		"@prosopo/util-crypto": "13.5.23",
+		"@prosopo/api": "3.1.36",
+		"@prosopo/api-express-router": "3.0.39",
+		"@prosopo/api-route": "2.6.33",
+		"@prosopo/common": "3.1.25",
+		"@prosopo/database": "3.5.5",
+		"@prosopo/datasets": "3.0.48",
+		"@prosopo/env": "3.2.27",
+		"@prosopo/keyring": "2.8.39",
+		"@prosopo/load-balancer": "2.8.12",
+		"@prosopo/locale": "3.1.25",
+		"@prosopo/types": "3.6.3",
+		"@prosopo/types-database": "4.0.5",
+		"@prosopo/types-env": "2.7.52",
+		"@prosopo/user-access-policy": "3.5.31",
+		"@prosopo/util": "3.2.3",
+		"@prosopo/util-crypto": "13.5.27",
 		"cron": "3.1.7",
 		"express": "4.21.2",
 		"geolib": "3.3.4",
@@ -50,6 +49,7 @@
 		"zod": "3.23.8"
 	},
 	"devDependencies": {
+		"@prosopo/config": "3.1.25",
 		"@types/node": "22.5.5",
 		"@types/uuid": "10.0.0",
 		"@vitest/coverage-v8": "3.2.4",

package/coverage/base.css

@@ -1,224 +0,0 @@
-body, html {
-  margin:0; padding: 0;
-  height: 100%;
-}
-body {
-    font-family: Helvetica Neue, Helvetica, Arial;
-    font-size: 14px;
-    color:#333;
-}
-.small { font-size: 12px; }
-*, *:after, *:before {
-  -webkit-box-sizing:border-box;
-     -moz-box-sizing:border-box;
-          box-sizing:border-box;
-  }
-h1 { font-size: 20px; margin: 0;}
-h2 { font-size: 14px; }
-pre {
-    font: 12px/1.4 Consolas, "Liberation Mono", Menlo, Courier, monospace;
-    margin: 0;
-    padding: 0;
-    -moz-tab-size: 2;
-    -o-tab-size:  2;
-    tab-size: 2;
-}
-a { color:#0074D9; text-decoration:none; }
-a:hover { text-decoration:underline; }
-.strong { font-weight: bold; }
-.space-top1 { padding: 10px 0 0 0; }
-.pad2y { padding: 20px 0; }
-.pad1y { padding: 10px 0; }
-.pad2x { padding: 0 20px; }
-.pad2 { padding: 20px; }
-.pad1 { padding: 10px; }
-.space-left2 { padding-left:55px; }
-.space-right2 { padding-right:20px; }
-.center { text-align:center; }
-.clearfix { display:block; }
-.clearfix:after {
-  content:'';
-  display:block;
-  height:0;
-  clear:both;
-  visibility:hidden;
-  }
-.fl { float: left; }
-@media only screen and (max-width:640px) {
-  .col3 { width:100%; max-width:100%; }
-  .hide-mobile { display:none!important; }
-}
-
-.quiet {
-  color: #7f7f7f;
-  color: rgba(0,0,0,0.5);
-}
-.quiet a { opacity: 0.7; }
-
-.fraction {
-  font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace;
-  font-size: 10px;
-  color: #555;
-  background: #E8E8E8;
-  padding: 4px 5px;
-  border-radius: 3px;
-  vertical-align: middle;
-}
-
-div.path a:link, div.path a:visited { color: #333; }
-table.coverage {
-  border-collapse: collapse;
-  margin: 10px 0 0 0;
-  padding: 0;
-}
-
-table.coverage td {
-  margin: 0;
-  padding: 0;
-  vertical-align: top;
-}
-table.coverage td.line-count {
-    text-align: right;
-    padding: 0 5px 0 20px;
-}
-table.coverage td.line-coverage {
-    text-align: right;
-    padding-right: 10px;
-    min-width:20px;
-}
-
-table.coverage td span.cline-any {
-    display: inline-block;
-    padding: 0 5px;
-    width: 100%;
-}
-.missing-if-branch {
-    display: inline-block;
-    margin-right: 5px;
-    border-radius: 3px;
-    position: relative;
-    padding: 0 4px;
-    background: #333;
-    color: yellow;
-}
-
-.skip-if-branch {
-    display: none;
-    margin-right: 10px;
-    position: relative;
-    padding: 0 4px;
-    background: #ccc;
-    color: white;
-}
-.missing-if-branch .typ, .skip-if-branch .typ {
-    color: inherit !important;
-}
-.coverage-summary {
-  border-collapse: collapse;
-  width: 100%;
-}
-.coverage-summary tr { border-bottom: 1px solid #bbb; }
-.keyline-all { border: 1px solid #ddd; }
-.coverage-summary td, .coverage-summary th { padding: 10px; }
-.coverage-summary tbody { border: 1px solid #bbb; }
-.coverage-summary td { border-right: 1px solid #bbb; }
-.coverage-summary td:last-child { border-right: none; }
-.coverage-summary th {
-  text-align: left;
-  font-weight: normal;
-  white-space: nowrap;
-}
-.coverage-summary th.file { border-right: none !important; }
-.coverage-summary th.pct { }
-.coverage-summary th.pic,
-.coverage-summary th.abs,
-.coverage-summary td.pct,
-.coverage-summary td.abs { text-align: right; }
-.coverage-summary td.file { white-space: nowrap;  }
-.coverage-summary td.pic { min-width: 120px !important;  }
-.coverage-summary tfoot td { }
-
-.coverage-summary .sorter {
-    height: 10px;
-    width: 7px;
-    display: inline-block;
-    margin-left: 0.5em;
-    background: url(sort-arrow-sprite.png) no-repeat scroll 0 0 transparent;
-}
-.coverage-summary .sorted .sorter {
-    background-position: 0 -20px;
-}
-.coverage-summary .sorted-desc .sorter {
-    background-position: 0 -10px;
-}
-.status-line {  height: 10px; }
-/* yellow */
-.cbranch-no { background: yellow !important; color: #111; }
-/* dark red */
-.red.solid, .status-line.low, .low .cover-fill { background:#C21F39 }
-.low .chart { border:1px solid #C21F39 }
-.highlighted,
-.highlighted .cstat-no, .highlighted .fstat-no, .highlighted .cbranch-no{
-  background: #C21F39 !important;
-}
-/* medium red */
-.cstat-no, .fstat-no, .cbranch-no, .cbranch-no { background:#F6C6CE }
-/* light red */
-.low, .cline-no { background:#FCE1E5 }
-/* light green */
-.high, .cline-yes { background:rgb(230,245,208) }
-/* medium green */
-.cstat-yes { background:rgb(161,215,106) }
-/* dark green */
-.status-line.high, .high .cover-fill { background:rgb(77,146,33) }
-.high .chart { border:1px solid rgb(77,146,33) }
-/* dark yellow (gold) */
-.status-line.medium, .medium .cover-fill { background: #f9cd0b; }
-.medium .chart { border:1px solid #f9cd0b; }
-/* light yellow */
-.medium { background: #fff4c2; }
-
-.cstat-skip { background: #ddd; color: #111; }
-.fstat-skip { background: #ddd; color: #111 !important; }
-.cbranch-skip { background: #ddd !important; color: #111; }
-
-span.cline-neutral { background: #eaeaea; }
-
-.coverage-summary td.empty {
-    opacity: .5;
-    padding-top: 4px;
-    padding-bottom: 4px;
-    line-height: 1;
-    color: #888;
-}
-
-.cover-fill, .cover-empty {
-  display:inline-block;
-  height: 12px;
-}
-.chart {
-  line-height: 0;
-}
-.cover-empty {
-    background: white;
-}
-.cover-full {
-    border-right: none !important;
-}
-pre.prettyprint {
-    border: none !important;
-    padding: 0 !important;
-    margin: 0 !important;
-}
-.com { color: #999 !important; }
-.ignore-none { color: #999; font-weight: normal; }
-
-.wrapper {
-  min-height: 100%;
-  height: auto !important;
-  height: 100%;
-  margin: 0 auto -48px;
-}
-.footer, .push {
-  height: 48px;
-}

package/coverage/block-navigation.js

@@ -1,87 +0,0 @@
-/* eslint-disable */
-var jumpToCode = (function init() {
-    // Classes of code we would like to highlight in the file view
-    var missingCoverageClasses = ['.cbranch-no', '.cstat-no', '.fstat-no'];
-
-    // Elements to highlight in the file listing view
-    var fileListingElements = ['td.pct.low'];
-
-    // We don't want to select elements that are direct descendants of another match
-    var notSelector = ':not(' + missingCoverageClasses.join('):not(') + ') > '; // becomes `:not(a):not(b) > `
-
-    // Selector that finds elements on the page to which we can jump
-    var selector =
-        fileListingElements.join(', ') +
-        ', ' +
-        notSelector +
-        missingCoverageClasses.join(', ' + notSelector); // becomes `:not(a):not(b) > a, :not(a):not(b) > b`
-
-    // The NodeList of matching elements
-    var missingCoverageElements = document.querySelectorAll(selector);
-
-    var currentIndex;
-
-    function toggleClass(index) {
-        missingCoverageElements
-            .item(currentIndex)
-            .classList.remove('highlighted');
-        missingCoverageElements.item(index).classList.add('highlighted');
-    }
-
-    function makeCurrent(index) {
-        toggleClass(index);
-        currentIndex = index;
-        missingCoverageElements.item(index).scrollIntoView({
-            behavior: 'smooth',
-            block: 'center',
-            inline: 'center'
-        });
-    }
-
-    function goToPrevious() {
-        var nextIndex = 0;
-        if (typeof currentIndex !== 'number' || currentIndex === 0) {
-            nextIndex = missingCoverageElements.length - 1;
-        } else if (missingCoverageElements.length > 1) {
-            nextIndex = currentIndex - 1;
-        }
-
-        makeCurrent(nextIndex);
-    }
-
-    function goToNext() {
-        var nextIndex = 0;
-
-        if (
-            typeof currentIndex === 'number' &&
-            currentIndex < missingCoverageElements.length - 1
-        ) {
-            nextIndex = currentIndex + 1;
-        }
-
-        makeCurrent(nextIndex);
-    }
-
-    return function jump(event) {
-        if (
-            document.getElementById('fileSearch') === document.activeElement &&
-            document.activeElement != null
-        ) {
-            // if we're currently focused on the search input, we don't want to navigate
-            return;
-        }
-
-        switch (event.which) {
-            case 78: // n
-            case 74: // j
-                goToNext();
-                break;
-            case 66: // b
-            case 75: // k
-            case 80: // p
-                goToPrevious();
-                break;
-        }
-    };
-})();
-window.addEventListener('keydown', jumpToCode);