@prosopo/provider 3.13.7 → 4.7.1

package/dist/cjs/api/admin/apiRemoveDetectorKeyEndpoint.cjs

@@ -1,19 +1,19 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const apiRoute = require("@prosopo/api-route");
-const common = require("@prosopo/common");
+const logger = require("@prosopo/logger");
 const types = require("@prosopo/types");
 var _documentCurrentScript = typeof document !== "undefined" ? document.currentScript : null;
 class ApiRemoveDetectorKeyEndpoint {
   constructor(clientTaskManager) {
     this.clientTaskManager = clientTaskManager;
   }
-  async processRequest(args, logger) {
-    logger = logger || common.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveDetectorKeyEndpoint.cjs", document.baseURI).href);
+  async processRequest(args, logger$1) {
+    logger$1 = logger$1 || logger.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveDetectorKeyEndpoint.cjs", document.baseURI).href);
     try {
       const { detectorKey, expirationInSeconds } = args;
-      logger = logger || common.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveDetectorKeyEndpoint.cjs", document.baseURI).href);
-      logger.info(() => ({ msg: "Removing detector key" }));
+      logger$1 = logger$1 || logger.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveDetectorKeyEndpoint.cjs", document.baseURI).href);
+      logger$1.info(() => ({ msg: "Removing detector key" }));
       await this.clientTaskManager.removeDetectorKey(
         detectorKey,
         expirationInSeconds
@@ -22,7 +22,7 @@ class ApiRemoveDetectorKeyEndpoint {
         status: apiRoute.ApiEndpointResponseStatus.SUCCESS
       };
     } catch (error) {
-      logger.error(() => ({ err: error, msg: "Error updating detector key" }));
+      logger$1.error(() => ({ err: error, msg: "Error updating detector key" }));
       return {
         status: apiRoute.ApiEndpointResponseStatus.FAIL,
         error: error.message

package/dist/cjs/api/admin/apiRemoveSiteKeyEndpoint.cjs

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const apiRoute = require("@prosopo/api-route");
+const logger = require("@prosopo/logger");
+const types = require("@prosopo/types");
+var _documentCurrentScript = typeof document !== "undefined" ? document.currentScript : null;
+class ApiRemoveSiteKeyEndpoint {
+  constructor(clientTaskManager) {
+    this.clientTaskManager = clientTaskManager;
+  }
+  async processRequest(args, logger$1) {
+    logger$1 = logger$1 || logger.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveSiteKeyEndpoint.cjs", document.baseURI).href);
+    try {
+      const { siteKey } = args;
+      logger$1.info(() => ({ data: { siteKey }, msg: "Removing site key" }));
+      await this.clientTaskManager.removeSiteKey(siteKey);
+      logger$1.info(() => ({ msg: "Site key removed" }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.SUCCESS
+      };
+    } catch (error) {
+      logger$1.error(() => ({ err: error, msg: "Error removing site key" }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.FAIL,
+        error: error.message
+      };
+    }
+  }
+  getRequestArgsSchema() {
+    return types.RemoveSitekeyBody;
+  }
+}
+exports.ApiRemoveSiteKeyEndpoint = ApiRemoveSiteKeyEndpoint;

package/dist/cjs/api/admin/apiRemoveSiteKeysEndpoint.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const apiRoute = require("@prosopo/api-route");
+const logger = require("@prosopo/logger");
+const types = require("@prosopo/types");
+var _documentCurrentScript = typeof document !== "undefined" ? document.currentScript : null;
+class ApiRemoveSiteKeysEndpoint {
+  constructor(clientTaskManager) {
+    this.clientTaskManager = clientTaskManager;
+  }
+  async processRequest(args, logger$1) {
+    logger$1 = logger$1 || logger.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiRemoveSiteKeysEndpoint.cjs", document.baseURI).href);
+    try {
+      logger$1.info(() => ({
+        data: { count: args.length },
+        msg: "Removing site keys"
+      }));
+      await this.clientTaskManager.removeSiteKeys(args);
+      logger$1.info(() => ({ msg: "Site keys removed" }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.SUCCESS
+      };
+    } catch (error) {
+      logger$1.error(() => ({ err: error, msg: "Error removing site keys" }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.FAIL,
+        error: error.message
+      };
+    }
+  }
+  getRequestArgsSchema() {
+    return types.RemoveSitekeysBody;
+  }
+}
+exports.ApiRemoveSiteKeysEndpoint = ApiRemoveSiteKeysEndpoint;

package/dist/cjs/api/admin/apiToggleMaintenanceModeEndpoint.cjs

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const apiRoute = require("@prosopo/api-route");
-const common = require("@prosopo/common");
+const logger = require("@prosopo/logger");
 const types = require("@prosopo/types");
 var _documentCurrentScript = typeof document !== "undefined" ? document.currentScript : null;
 function getMaintenanceMode() {
@@ -11,17 +11,17 @@ function setMaintenanceMode(enabled) {
   process.env.MAINTENANCE_MODE = enabled ? "true" : "false";
 }
 class ApiToggleMaintenanceModeEndpoint {
-  async processRequest(args, logger) {
+  async processRequest(args, logger$1) {
     const { enabled } = args;
-    logger = logger || common.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiToggleMaintenanceModeEndpoint.cjs", document.baseURI).href);
+    logger$1 = logger$1 || logger.getLogger("info", typeof document === "undefined" ? require("url").pathToFileURL(__filename).href : _documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === "SCRIPT" && _documentCurrentScript.src || new URL("api/admin/apiToggleMaintenanceModeEndpoint.cjs", document.baseURI).href);
     const previousMode = getMaintenanceMode();
-    logger.info(() => ({
+    logger$1.info(() => ({
       data: { enabled, previous: previousMode },
       msg: "Toggling maintenance mode"
     }));
     setMaintenanceMode(enabled);
     const currentMode = getMaintenanceMode();
-    logger.info(() => ({
+    logger$1.info(() => ({
       data: { enabled: currentMode },
       msg: "Maintenance mode updated"
     }));

package/dist/cjs/api/admin/apiUpdateDecisionMachineEndpoint.cjs

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const apiRoute = require("@prosopo/api-route");
+const logger = require("@prosopo/logger");
+const types = require("@prosopo/types");
+class ApiUpdateDecisionMachineEndpoint {
+  constructor(clientTaskManager) {
+    this.clientTaskManager = clientTaskManager;
+  }
+  async processRequest(args, logger$1) {
+    logger$1 = logger$1 || logger.getLogger("info", "");
+    try {
+      const {
+        decisionMachineScope,
+        decisionMachineRuntime,
+        decisionMachineSource,
+        decisionMachineLanguage,
+        decisionMachineName,
+        decisionMachineVersion,
+        decisionMachineCaptchaType,
+        dapp
+      } = args;
+      logger$1.info(() => ({
+        msg: "Updating decision machine",
+        data: { decisionMachineScope, dappAccount: dapp }
+      }));
+      const result = await this.clientTaskManager.updateDecisionMachine(
+        decisionMachineScope,
+        decisionMachineRuntime,
+        decisionMachineSource,
+        dapp,
+        decisionMachineLanguage,
+        decisionMachineName,
+        decisionMachineVersion,
+        decisionMachineCaptchaType
+      );
+      logger$1.info(() => ({
+        msg: "Decision machine updated",
+        data: result
+      }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.SUCCESS,
+        data: result
+      };
+    } catch (error) {
+      logger$1.error(() => ({
+        msg: "Error updating decision machine",
+        err: error
+      }));
+      return {
+        status: apiRoute.ApiEndpointResponseStatus.FAIL,
+        error: error.message
+      };
+    }
+  }
+  getRequestArgsSchema() {
+    return types.UpdateDecisionMachineBody;
+  }
+}
+exports.ApiUpdateDecisionMachineEndpoint = ApiUpdateDecisionMachineEndpoint;

package/dist/cjs/api/admin/apiUpdateDetectorKeyEndpoint.cjs

@@ -1,20 +1,20 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const apiRoute = require("@prosopo/api-route");
-const common = require("@prosopo/common");
+const logger = require("@prosopo/logger");
 const types = require("@prosopo/types");
 class ApiUpdateDetectorKeyEndpoint {
   constructor(clientTaskManager) {
     this.clientTaskManager = clientTaskManager;
   }
-  async processRequest(args, logger) {
-    logger = logger || common.getLogger("info", "");
+  async processRequest(args, logger$1) {
+    logger$1 = logger$1 || logger.getLogger("info", "");
     try {
       const { detectorKey } = args;
-      logger = logger || common.getLogger("info", "");
-      logger.info(() => ({ msg: "Updating detector key" }));
+      logger$1 = logger$1 || logger.getLogger("info", "");
+      logger$1.info(() => ({ msg: "Updating detector key" }));
       const activeDetectorKeys = await this.clientTaskManager.updateDetectorKey(detectorKey);
-      logger.info(() => ({
+      logger$1.info(() => ({
         msg: "Detector key updated",
         activeDetectorKeys
       }));
@@ -25,7 +25,7 @@ class ApiUpdateDetectorKeyEndpoint {
         }
       };
     } catch (error) {
-      logger.error(() => ({ msg: "Error updating detector key", err: error }));
+      logger$1.error(() => ({ msg: "Error updating detector key", err: error }));
       return {
         status: apiRoute.ApiEndpointResponseStatus.FAIL,
         error: error.message

package/dist/cjs/api/blacklistRequestInspector.cjs

@@ -3,14 +3,16 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const types = require("@prosopo/types");
 const userAccessPolicy = require("@prosopo/user-access-policy");
 const util = require("@prosopo/util");
-const getRequestUserScope = (requestHeaders, ja4, ip, user) => {
+const getRequestUserScope = (requestHeaders, ja4, ip, user, headHash, coords, countryCode) => {
   const userAgent = requestHeaders["user-agent"] ? requestHeaders["user-agent"].toString() : void 0;
   return {
     ...user && { userId: user },
     ...ja4 && { ja4Hash: ja4 },
     ...userAgent && { userAgent },
-    ...ip && { ip }
-    // TODO more things with headers
+    ...ip && { ip },
+    ...headHash && { headHash },
+    ...coords && { coords },
+    ...countryCode && { countryCode }
   };
 };
 const getPrioritisedUserScopes = (userScope) => {
@@ -66,7 +68,8 @@ class BlacklistRequestInspector {
       request.ja4,
       request.headers,
       request.body,
-      request.logger
+      request.logger,
+      request.ipInfo
     );
     if (shouldAbortRequest) {
       res.status(401).json({ error: "Unauthorized" });
@@ -74,7 +77,7 @@ class BlacklistRequestInspector {
     }
     next();
   }
-  async shouldAbortRequest(requestedRoute, rawIp, ja4, requestHeaders, requestBody, logger) {
+  async shouldAbortRequest(requestedRoute, rawIp, ja4, requestHeaders, requestBody, logger, ipInfo) {
     if (this.isApiUnrelatedRoute(requestedRoute)) {
       return false;
     }
@@ -95,9 +98,20 @@ class BlacklistRequestInspector {
         requestHeaders,
         requestBody
       );
+      const countryCode = ipInfo?.isValid ? ipInfo.countryCode : void 0;
       const accessPolicies = await getPrioritisedAccessRule(
         this.userAccessRulesStorage,
-        getRequestUserScope(requestHeaders, ja4, rawIp, userId),
+        getRequestUserScope(
+          requestHeaders,
+          ja4,
+          rawIp,
+          userId,
+          void 0,
+          // headHash
+          void 0,
+          // coords
+          countryCode
+        ),
         clientId
       );
       if (!accessPolicies || accessPolicies.length === 0 || !accessPolicies[0]) {

package/dist/cjs/api/block.cjs

@@ -2,14 +2,25 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const blacklistRequestInspector = require("./blacklistRequestInspector.cjs");
 const blockMiddleware = (providerEnvironment) => {
-  const userAccessRulesStorage = providerEnvironment.getDb().getUserAccessRulesStorage();
+  let blacklistRequestInspector$1;
   const environmentReadinessWaiter = providerEnvironment.isReady.bind(providerEnvironment);
-  const blacklistRequestInspector$1 = new blacklistRequestInspector.BlacklistRequestInspector(
-    userAccessRulesStorage,
-    environmentReadinessWaiter
-  );
-  return blacklistRequestInspector$1.abortRequestForBlockedUsers.bind(
-    blacklistRequestInspector$1
-  );
+  return (req, res, next) => {
+    if (!blacklistRequestInspector$1) {
+      try {
+        const userAccessRulesStorage = providerEnvironment.getDb().getUserAccessRulesStorage();
+        blacklistRequestInspector$1 = new blacklistRequestInspector.BlacklistRequestInspector(
+          userAccessRulesStorage,
+          environmentReadinessWaiter
+        );
+      } catch {
+        return next();
+      }
+    }
+    return blacklistRequestInspector$1.abortRequestForBlockedUsers(
+      req,
+      res,
+      next
+    );
+  };
 };
 exports.blockMiddleware = blockMiddleware;

package/dist/cjs/api/captcha/checkSpamEmail.cjs

@@ -0,0 +1,79 @@
+"use strict";
+const common = require("@prosopo/common");
+const util = require("@prosopo/util");
+const zod = require("zod");
+require("../../tasks/index.cjs");
+const checkSpamEmail$1 = require("../../tasks/spam/checkSpamEmail.cjs");
+const tasks = require("../../tasks/tasks.cjs");
+const CheckSpamEmailRequestBody = zod.object({
+  email: zod.string(),
+  dapp: zod.string()
+});
+const checkSpamEmail = (env) => async (req, res, next) => {
+  try {
+    const tasks$1 = new tasks.Tasks(env, req.logger);
+    const { email, dapp } = CheckSpamEmailRequestBody.parse(req.body);
+    const emailDomain = util.extractDomainFromEmail(email);
+    req.logger.info(() => ({
+      msg: "Check spam email handler entry",
+      data: {
+        emailDomain,
+        path: req.path,
+        method: req.method
+      }
+    }));
+    const clientRecord = await tasks$1.db.getClientRecord(dapp);
+    if (!clientRecord) {
+      return next(
+        new common.ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+          context: { code: 400, siteKey: dapp },
+          i18n: req.i18n,
+          logger: req.logger
+        })
+      );
+    }
+    const valid = clientRecord.settings.spamEmailDomainCheckEnabled;
+    if (!valid) {
+      return next(
+        new common.ProsopoApiError("API.BAD_REQUEST", {
+          context: {
+            code: 400,
+            siteKey: dapp
+          },
+          i18n: req.i18n,
+          logger: req.logger
+        })
+      );
+    }
+    const isSpam = await checkSpamEmail$1.checkSpamEmail(
+      email,
+      tasks$1.db,
+      env.config,
+      req.logger
+    );
+    req.logger.info(() => ({
+      msg: "Spam email check result",
+      data: {
+        emailDomain,
+        isSpam
+      }
+    }));
+    return res.json({
+      isSpam,
+      emailDomain
+    });
+  } catch (error) {
+    req.logger.error(() => ({
+      msg: "Error in check spam email handler",
+      error
+    }));
+    return next(
+      new common.ProsopoApiError("API.INTERNAL_SERVER_ERROR", {
+        context: { code: 500 },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+};
+module.exports = checkSpamEmail;

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.cjs

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const types = require("@prosopo/types");
+require("../../../tasks/frictionless/frictionlessTasks.cjs");
+const honeypotResponse = require("./honeypotResponse.cjs");
+const handleAccessPolicy = async (input, res) => {
+  if (!input.userAccessPolicy) {
+    return {
+      handled: false,
+      botScore: input.botScore,
+      scoreComponents: input.scoreComponents
+    };
+  }
+  const { tasks, clientRecord, userAccessPolicy, logger, requestId } = input;
+  logger.info(() => ({
+    msg: "User access policy matched",
+    data: {
+      requestId,
+      policy: userAccessPolicy,
+      captchaType: userAccessPolicy.captchaType,
+      userScope: input.userScope
+    }
+  }));
+  const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(
+    userAccessPolicy,
+    input.baseBotScore,
+    input.botScore,
+    input.scoreComponents
+  );
+  const botScore = scoreUpdate.score;
+  const scoreComponents = scoreUpdate.scoreComponents;
+  tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  if (userAccessPolicy.type === "block") {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "block",
+        captchaType: types.CaptchaType.image
+      }
+    }));
+    await tasks.frictionlessManager.registerBlockedSession({
+      solvedImagesCount: clientRecord.settings.imageMaxRounds,
+      userSitekeyIpHash: input.userSitekeyIpHash,
+      reason: types.FrictionlessReason.ACCESS_POLICY_BLOCK,
+      siteKey: input.dapp,
+      ipInfo: input.ipInfo,
+      headers: input.flatHeaders
+    });
+    return {
+      handled: true,
+      response: res.status(401).json({ error: "Unauthorized" })
+    };
+  }
+  const captchaTypeBaseParams = {
+    userSitekeyIpHash: input.userSitekeyIpHash,
+    reason: types.FrictionlessReason.USER_ACCESS_POLICY,
+    siteKey: input.dapp,
+    ipInfo: input.ipInfo,
+    headers: input.flatHeaders
+  };
+  if (userAccessPolicy.captchaType === types.CaptchaType.image) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: types.CaptchaType.image
+      }
+    }));
+    honeypotResponse.attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendImageCaptcha({
+          ...captchaTypeBaseParams,
+          solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(
+            userAccessPolicy.solvedImagesCount,
+            clientRecord.settings.imageMaxRounds
+          ) : clientRecord.settings.imageMaxRounds
+        })
+      )
+    };
+  }
+  if (userAccessPolicy.captchaType === types.CaptchaType.pow) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: types.CaptchaType.pow
+      }
+    }));
+    honeypotResponse.attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams)
+      )
+    };
+  }
+  if (userAccessPolicy.captchaType === types.CaptchaType.puzzle) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: types.CaptchaType.puzzle
+      }
+    }));
+    honeypotResponse.attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendPuzzleCaptcha(
+          captchaTypeBaseParams
+        )
+      )
+    };
+  }
+  return { handled: false, botScore, scoreComponents };
+};
+exports.handleAccessPolicy = handleAccessPolicy;

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/constants.cjs

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
+const getRoundsFromSimScore = (simScore) => {
+  if (simScore >= 0.9) return 0;
+  if (simScore >= 0.8) return 3;
+  if (simScore >= 0.7) return 4;
+  if (simScore >= 0.6) return 6;
+  if (simScore >= 0.5) return 7;
+  return 8;
+};
+exports.DEFAULT_FRICTIONLESS_THRESHOLD = DEFAULT_FRICTIONLESS_THRESHOLD;
+exports.getRoundsFromSimScore = getRoundsFromSimScore;