@prosopo/provider 3.15.0 → 4.7.2

package/dist/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.js

@@ -0,0 +1,123 @@
+import { CaptchaType, FrictionlessReason } from "@prosopo/types";
+import "../../../tasks/frictionless/frictionlessTasks.js";
+import { attachHoneypot } from "./honeypotResponse.js";
+const handleAccessPolicy = async (input, res) => {
+  if (!input.userAccessPolicy) {
+    return {
+      handled: false,
+      botScore: input.botScore,
+      scoreComponents: input.scoreComponents
+    };
+  }
+  const { tasks, clientRecord, userAccessPolicy, logger, requestId } = input;
+  logger.info(() => ({
+    msg: "User access policy matched",
+    data: {
+      requestId,
+      policy: userAccessPolicy,
+      captchaType: userAccessPolicy.captchaType,
+      userScope: input.userScope
+    }
+  }));
+  const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(
+    userAccessPolicy,
+    input.baseBotScore,
+    input.botScore,
+    input.scoreComponents
+  );
+  const botScore = scoreUpdate.score;
+  const scoreComponents = scoreUpdate.scoreComponents;
+  tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  if (userAccessPolicy.type === "block") {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "block",
+        captchaType: CaptchaType.image
+      }
+    }));
+    await tasks.frictionlessManager.registerBlockedSession({
+      solvedImagesCount: clientRecord.settings.imageMaxRounds,
+      userSitekeyIpHash: input.userSitekeyIpHash,
+      reason: FrictionlessReason.ACCESS_POLICY_BLOCK,
+      siteKey: input.dapp,
+      ipInfo: input.ipInfo,
+      headers: input.flatHeaders
+    });
+    return {
+      handled: true,
+      response: res.status(401).json({ error: "Unauthorized" })
+    };
+  }
+  const captchaTypeBaseParams = {
+    userSitekeyIpHash: input.userSitekeyIpHash,
+    reason: FrictionlessReason.USER_ACCESS_POLICY,
+    siteKey: input.dapp,
+    ipInfo: input.ipInfo,
+    headers: input.flatHeaders
+  };
+  if (userAccessPolicy.captchaType === CaptchaType.image) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: CaptchaType.image
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendImageCaptcha({
+          ...captchaTypeBaseParams,
+          solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(
+            userAccessPolicy.solvedImagesCount,
+            clientRecord.settings.imageMaxRounds
+          ) : clientRecord.settings.imageMaxRounds
+        })
+      )
+    };
+  }
+  if (userAccessPolicy.captchaType === CaptchaType.pow) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: CaptchaType.pow
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams)
+      )
+    };
+  }
+  if (userAccessPolicy.captchaType === CaptchaType.puzzle) {
+    logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId,
+        decision: "user_access_policy",
+        captchaType: CaptchaType.puzzle
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return {
+      handled: true,
+      response: res.json(
+        await tasks.frictionlessManager.sendPuzzleCaptcha(
+          captchaTypeBaseParams
+        )
+      )
+    };
+  }
+  return { handled: false, botScore, scoreComponents };
+};
+export {
+  handleAccessPolicy
+};

package/dist/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessPolicy.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,WAAW,GAIX,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AAEtF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA4BvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACtC,KAAwB,EACxB,GAAa,EACkB,EAAE;IACjC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO;YACN,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;SACtC,CAAC;IACH,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAE3E,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClB,GAAG,EAAE,4BAA4B;QACjC,IAAI,EAAE;YACL,SAAS;YACT,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,gBAAgB,CAAC,WAAW;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD,CAAC,CAAC,CAAC;IAEJ,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,yBAAyB,CACtE,gBAAgB,EAChB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,eAAe,CACrB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;IACnC,MAAM,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;IACpD,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAEjE,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,WAAW,CAAC,KAAK;aAC9B;SACD,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,CAAC,mBAAmB,CAAC,sBAAsB,CAAC;YACtD,iBAAiB,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc;YACvD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,MAAM,EAAE,kBAAkB,CAAC,mBAAmB;YAC9C,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,WAAW;SAC1B,CAAC,CAAC;QAEH,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;SACzD,CAAC;IACH,CAAC;IAED,MAAM,qBAAqB,GAAG;QAC7B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,kBAAkB,CAAC,kBAAkB;QAC7C,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;KAC1B,CAAC;IAEF,IAAI,gBAAgB,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,oBAAoB;gBAC9B,WAAW,EAAE,WAAW,CAAC,KAAK;aAC9B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG,CAAC,IAAI,CACjB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBAChD,GAAG,qBAAqB;gBACxB,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;oBACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CACR,gBAAgB,CAAC,iBAAiB,EAClC,YAAY,CAAC,QAAQ,CAAC,cAAc,CACpC;oBACF,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc;aACvC,CAAC,CACF;SACD,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,WAAW,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,oBAAoB;gBAC9B,WAAW,EAAE,WAAW,CAAC,GAAG;aAC5B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG,CAAC,IAAI,CACjB,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,qBAAqB,CAAC,CACrE;SACD,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS;gBACT,QAAQ,EAAE,oBAAoB;gBAC9B,WAAW,EAAE,WAAW,CAAC,MAAM;aAC/B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG,CAAC,IAAI,CACjB,MAAM,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAChD,qBAAqB,CACrB,CACD;SACD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;AACtD,CAAC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
+export declare const getRoundsFromSimScore: (simScore: number) => number;
+//# sourceMappingURL=constants.d.ts.map

package/dist/api/captcha/getFrictionlessCaptchaChallenge/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/constants.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,eAAO,MAAM,qBAAqB,aAAc,MAAM,KAAG,MAOxD,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/constants.js

@@ -0,0 +1,13 @@
+const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
+const getRoundsFromSimScore = (simScore) => {
+  if (simScore >= 0.9) return 0;
+  if (simScore >= 0.8) return 3;
+  if (simScore >= 0.7) return 4;
+  if (simScore >= 0.6) return 6;
+  if (simScore >= 0.5) return 7;
+  return 8;
+};
+export {
+  DEFAULT_FRICTIONLESS_THRESHOLD,
+  getRoundsFromSimScore
+};

package/dist/api/captcha/getFrictionlessCaptchaChallenge/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/constants.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAU,EAAE;IACjE,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACV,CAAC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.d.ts

@@ -0,0 +1,36 @@
+import { type IPInfoResponse, type RequestHeaders, type ScoreComponents } from "@prosopo/types";
+import type { ClientRecord } from "@prosopo/types-database";
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../../express.js";
+import type { Tasks } from "../../../tasks/index.js";
+export type DecisionMachineInput = {
+    tasks: Tasks;
+    env: ProviderEnvironment;
+    clientRecord: ClientRecord;
+    dapp: string;
+    user: string;
+    userSitekeyIpHash: string;
+    flatHeaders: RequestHeaders;
+    ipInfo: IPInfoResponse | undefined;
+    timestamp: number;
+    decryptionFailed: boolean;
+    userAgent: string | undefined;
+    userId: string | undefined;
+    webView: boolean;
+    decryptedHeadHash: string;
+    providerSelectEntropy: number;
+    baseBotScore: number;
+    botScore: number;
+    scoreComponents: ScoreComponents;
+    token: string;
+    botThreshold: number;
+};
+type ExpressHandle = {
+    req: Request & AugmentedRequest;
+    res: Response;
+    next: NextFunction;
+};
+export declare const runDecisionMachine: (input: DecisionMachineInput, handle: ExpressHandle) => Promise<unknown>;
+export {};
+//# sourceMappingURL=decisionMachine.d.ts.map

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionMachine.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.ts"],"names":[],"mappings":"AAeA,OAAO,EAGN,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAM5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AASrD,MAAM,MAAM,oBAAoB,GAAG;IAClC,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,EAAE,mBAAmB,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,cAAc,CAAC;IAC5B,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,eAAe,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,aAAa,GAAG;IACpB,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAChC,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;CACnB,CAAC;AAIF,eAAO,MAAM,kBAAkB,UACvB,oBAAoB,UACnB,aAAa,KACnB,OAAO,CAAC,OAAO,CAqLjB,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js

@@ -0,0 +1,287 @@
+import { ProsopoApiError } from "@prosopo/common";
+import { FrictionlessReason, CaptchaType, ContextType } from "@prosopo/types";
+import { compareBinaryStrings } from "@prosopo/util";
+import { FrictionlessManager } from "../../../tasks/frictionless/frictionlessTasks.js";
+import { timestampDecayFunction } from "../../../tasks/frictionless/frictionlessTasksUtils.js";
+import { hashUserAgent } from "../../../utils/hashUserAgent.js";
+import { determineContextType, getContextThreshold } from "../contextAwareValidation.js";
+import { getRoundsFromSimScore } from "./constants.js";
+import { attachHoneypot } from "./honeypotResponse.js";
+const runDecisionMachine = async (input, handle) => {
+  const {
+    tasks,
+    env,
+    clientRecord,
+    dapp,
+    userSitekeyIpHash,
+    flatHeaders,
+    ipInfo
+  } = input;
+  const { req, res } = handle;
+  let { botScore, scoreComponents } = input;
+  const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
+  if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
+    req.logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId: req.requestId,
+        decision: "auto_ban_score",
+        botScore,
+        autoBanThreshold,
+        token: input.token
+      }
+    }));
+    await tasks.frictionlessManager.registerBlockedSession({
+      solvedImagesCount: clientRecord.settings.imageMaxRounds,
+      userSitekeyIpHash,
+      reason: FrictionlessReason.AUTO_BAN_SCORE,
+      siteKey: dapp,
+      ipInfo,
+      headers: flatHeaders
+    });
+    return res.status(401).json({ error: "Unauthorized" });
+  }
+  const userAgentMismatchResponse = await runUserAgentMismatchCheck(
+    input,
+    handle
+  );
+  if (userAgentMismatchResponse) return userAgentMismatchResponse;
+  const contextResponse = await runContextAwareValidation(input, handle);
+  if (contextResponse) return contextResponse;
+  if (clientRecord.settings.disallowWebView && input.webView) {
+    tasks.logger.info(() => ({ msg: "WebView detected" }));
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseWebView(
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+    req.logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId: req.requestId,
+        decision: "webview_detected",
+        captchaType: CaptchaType.image
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return res.json(
+      await tasks.frictionlessManager.sendImageCaptcha({
+        solvedImagesCount: Math.min(
+          env.config.captchas.solved.count * 2,
+          clientRecord.settings.imageMaxRounds
+        ),
+        userSitekeyIpHash,
+        reason: FrictionlessReason.WEBVIEW_DETECTED,
+        siteKey: dapp,
+        ipInfo,
+        headers: flatHeaders
+      })
+    );
+  }
+  if (FrictionlessManager.timestampTooOld(input.timestamp)) {
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseTimestamp(
+      input.timestamp,
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+    req.logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId: req.requestId,
+        decision: "timestamp_too_old",
+        captchaType: CaptchaType.image
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return res.json(
+      await tasks.frictionlessManager.sendImageCaptcha({
+        solvedImagesCount: timestampDecayFunction(
+          input.timestamp,
+          input.decryptionFailed,
+          clientRecord.settings.imageMaxRounds
+        ),
+        userSitekeyIpHash,
+        reason: FrictionlessReason.OLD_TIMESTAMP,
+        siteKey: dapp,
+        ipInfo,
+        headers: flatHeaders
+      })
+    );
+  }
+  const hostVerified = await tasks.frictionlessManager.hostVerified(
+    input.providerSelectEntropy
+  );
+  if (!hostVerified.verified) {
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseUnverifiedHost(
+      hostVerified.domain,
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  }
+  if (Number(botScore) > input.botThreshold) {
+    req.logger.info(() => ({
+      msg: "Bot score is greater than threshold",
+      data: {
+        botScore,
+        botThreshold: input.botThreshold,
+        token: input.token
+      }
+    }));
+    req.logger.info(() => ({
+      msg: "Frictionless decision",
+      data: {
+        requestId: req.requestId,
+        decision: "bot_score_above_threshold",
+        captchaType: CaptchaType.image
+      }
+    }));
+    attachHoneypot(res, clientRecord);
+    return res.json(
+      await tasks.frictionlessManager.sendImageCaptcha({
+        solvedImagesCount: Math.min(
+          env.config.captchas.solved.count,
+          clientRecord.settings.imageMaxRounds
+        ),
+        userSitekeyIpHash,
+        reason: FrictionlessReason.BOT_SCORE_ABOVE_THRESHOLD,
+        siteKey: dapp,
+        ipInfo,
+        headers: flatHeaders
+      })
+    );
+  }
+  req.logger.info(() => ({
+    msg: "Frictionless decision",
+    data: {
+      requestId: req.requestId,
+      decision: "default_pow",
+      captchaType: CaptchaType.pow
+    }
+  }));
+  attachHoneypot(res, clientRecord);
+  return res.json(
+    await tasks.frictionlessManager.sendPowCaptcha({
+      userSitekeyIpHash,
+      siteKey: dapp,
+      ipInfo,
+      headers: flatHeaders
+    })
+  );
+};
+const runUserAgentMismatchCheck = async (input, handle) => {
+  const { req, res } = handle;
+  const headersUserAgent = req.headers["user-agent"];
+  const headersProsopoUser = req.headers["prosopo-user"];
+  const hashedHeadersUserAgent = headersUserAgent ? hashUserAgent(headersUserAgent) : "";
+  if (hashedHeadersUserAgent === input.userAgent && headersProsopoUser === input.userId) {
+    return null;
+  }
+  req.logger.info(() => ({
+    msg: "User agent or user id does not match",
+    data: {
+      headersUserAgent,
+      hashedHeadersUserAgent,
+      userAgent: input.userAgent,
+      headersProsopoUser,
+      userId: input.userId
+    }
+  }));
+  req.logger.info(() => ({
+    msg: "Frictionless decision",
+    data: {
+      requestId: req.requestId,
+      decision: "user_agent_mismatch",
+      captchaType: CaptchaType.image
+    }
+  }));
+  attachHoneypot(res, input.clientRecord);
+  return res.json(
+    await input.tasks.frictionlessManager.sendImageCaptcha({
+      solvedImagesCount: timestampDecayFunction(
+        input.timestamp,
+        input.decryptionFailed,
+        input.clientRecord.settings.imageMaxRounds
+      ),
+      userSitekeyIpHash: input.userSitekeyIpHash,
+      reason: FrictionlessReason.USER_AGENT_MISMATCH,
+      siteKey: input.dapp,
+      ipInfo: input.ipInfo,
+      headers: input.flatHeaders
+    })
+  );
+};
+const runContextAwareValidation = async (input, handle) => {
+  const { tasks, clientRecord, dapp, user } = input;
+  const { req, res, next } = handle;
+  if (!clientRecord.settings.contextAware?.enabled) return null;
+  const contexts = clientRecord.settings.contextAware?.contexts || {};
+  const hasDefault = contexts[ContextType.Default] !== void 0;
+  const hasWebview = contexts[ContextType.Webview] !== void 0;
+  let contextType;
+  if (hasDefault && hasWebview) {
+    contextType = determineContextType(input.webView);
+  } else if (hasDefault) {
+    contextType = ContextType.Default;
+  } else if (hasWebview) {
+    contextType = ContextType.Webview;
+  }
+  if (!contextType) return null;
+  const clientEntropy = await tasks.frictionlessManager.getClientContextEntropy(
+    clientRecord.account,
+    contextType
+  );
+  if (!clientEntropy) return null;
+  if (!input.decryptedHeadHash) {
+    tasks.logger.info(() => ({
+      msg: "No decryptedHeadHash in session for context aware client"
+    }));
+    return next(
+      new ProsopoApiError("API.BAD_REQUEST", {
+        context: { code: 400, siteKey: dapp, user },
+        i18n: req.i18n,
+        logger: req.logger
+      })
+    );
+  }
+  const threshold = getContextThreshold(clientRecord.settings, contextType);
+  const sim = compareBinaryStrings(input.decryptedHeadHash, clientEntropy);
+  if (sim >= threshold) return null;
+  req.logger.info(() => ({
+    msg: "Frictionless decision",
+    data: {
+      requestId: req.requestId,
+      decision: "context_aware_failed",
+      captchaType: CaptchaType.image,
+      sim,
+      threshold
+    }
+  }));
+  attachHoneypot(res, clientRecord);
+  return res.json(
+    await tasks.frictionlessManager.sendImageCaptcha({
+      solvedImagesCount: Math.min(
+        getRoundsFromSimScore(sim),
+        clientRecord.settings.imageMaxRounds
+      ),
+      userSitekeyIpHash: input.userSitekeyIpHash,
+      reason: FrictionlessReason.CONTEXT_AWARE_VALIDATION_FAILED,
+      siteKey: dapp,
+      ipInfo: input.ipInfo,
+      headers: input.flatHeaders
+    })
+  );
+};
+export {
+  runDecisionMachine
+};

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionMachine.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,WAAW,EACX,WAAW,GAIX,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAE/F,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EACN,oBAAoB,EACpB,mBAAmB,GACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAiCvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACtC,KAA2B,EAC3B,MAAqB,EACF,EAAE;IACrB,MAAM,EACL,KAAK,EACL,GAAG,EACH,YAAY,EACZ,IAAI,EACJ,iBAAiB,EACjB,WAAW,EACX,MAAM,GACN,GAAG,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IAE1C,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACrE,IAAI,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC5E,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ;gBACR,gBAAgB;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,CAAC,mBAAmB,CAAC,sBAAsB,CAAC;YACtD,iBAAiB,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc;YACvD,iBAAiB;YACjB,MAAM,EAAE,kBAAkB,CAAC,cAAc;YACzC,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,yBAAyB,GAAG,MAAM,yBAAyB,CAChE,KAAK,EACL,MAAM,CACN,CAAC;IACF,IAAI,yBAAyB;QAAE,OAAO,yBAAyB,CAAC;IAEhE,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CACjE,KAAK,CAAC,YAAY,EAClB,QAAQ,EACR,eAAe,CACf,CAAC;QACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;QAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;QAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAEjE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,kBAAkB;gBAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;aAC9B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAChD,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAC1B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,EACpC,YAAY,CAAC,QAAQ,CAAC,cAAc,CACpC;YACD,iBAAiB;YACjB,MAAM,EAAE,kBAAkB,CAAC,gBAAgB;YAC3C,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO,EAAE,WAAW;SACpB,CAAC,CACF,CAAC;IACH,CAAC;IAED,IAAI,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,sBAAsB,CACnE,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,YAAY,EAClB,QAAQ,EACR,eAAe,CACf,CAAC;QACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;QAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;QAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAEjE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,mBAAmB;gBAC7B,WAAW,EAAE,WAAW,CAAC,KAAK;aAC9B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAChD,iBAAiB,EAAE,sBAAsB,CACxC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,gBAAgB,EACtB,YAAY,CAAC,QAAQ,CAAC,cAAc,CACpC;YACD,iBAAiB;YACjB,MAAM,EAAE,kBAAkB,CAAC,aAAa;YACxC,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO,EAAE,WAAW;SACpB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAChE,KAAK,CAAC,qBAAqB,CAC3B,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,2BAA2B,CACxE,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,YAAY,EAClB,QAAQ,EACR,eAAe,CACf,CAAC;QACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;QAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;QAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,qCAAqC;YAC1C,IAAI,EAAE;gBACL,QAAQ;gBACR,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,2BAA2B;gBACrC,WAAW,EAAE,WAAW,CAAC,KAAK;aAC9B;SACD,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAChD,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAC1B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAChC,YAAY,CAAC,QAAQ,CAAC,cAAc,CACpC;YACD,iBAAiB;YACjB,MAAM,EAAE,kBAAkB,CAAC,yBAAyB;YACpD,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO,EAAE,WAAW;SACpB,CAAC,CACF,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,WAAW,CAAC,GAAG;SAC5B;KACD,CAAC,CAAC,CAAC;IACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;QAC9C,iBAAiB;QACjB,OAAO,EAAE,IAAI;QACb,MAAM;QACN,OAAO,EAAE,WAAW;KACpB,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,KAAK,EACtC,KAA2B,EAC3B,MAAqB,EACM,EAAE;IAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,sBAAsB,GAAG,gBAAgB;QAC9C,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;IAEN,IACC,sBAAsB,KAAK,KAAK,CAAC,SAAS;QAC1C,kBAAkB,KAAK,KAAK,CAAC,MAAM,EAClC,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE;YACL,gBAAgB;YAChB,sBAAsB;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB;KACD,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,qBAAqB;YAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;SAC9B;KACD,CAAC,CAAC,CAAC;IACJ,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;QACtD,iBAAiB,EAAE,sBAAsB,CACxC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAC1C;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,kBAAkB,CAAC,mBAAmB;QAC9C,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;KAC1B,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,KAAK,EACtC,KAA2B,EAC3B,MAAqB,EACK,EAAE;IAC5B,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAClD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAElC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IAE/D,IAAI,WAAoC,CAAC;IACzC,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC9B,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;IACnC,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,uBAAuB,CAC5E,YAAY,CAAC,OAAO,EACpB,WAAW,CACX,CAAC;IAEF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,0DAA0D;SAC/D,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,GAAG,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAElC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,sBAAsB;YAChC,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,GAAG;YACH,SAAS;SACT;KACD,CAAC,CAAC,CAAC;IACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;QAChD,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAC1B,qBAAqB,CAAC,GAAG,CAAC,EAC1B,YAAY,CAAC,QAAQ,CAAC,cAAc,CACpC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,kBAAkB,CAAC,+BAA+B;QAC1D,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;KAC1B,CAAC,CACF,CAAC;AACH,CAAC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.d.ts

@@ -0,0 +1,4 @@
+import type { SimdReadings } from "@prosopo/types";
+import type { FrictionlessManager } from "../../../tasks/frictionless/frictionlessTasks.js";
+export declare const decryptIncomingSimdReadings: (manager: FrictionlessManager, encrypted: string | undefined) => Promise<SimdReadings | undefined>;
+//# sourceMappingURL=decryptSimdReadings.d.ts.map

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptSimdReadings.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AAE5F,eAAO,MAAM,2BAA2B,YAC9B,mBAAmB,aACjB,MAAM,GAAG,SAAS,KAC3B,OAAO,CAAC,YAAY,GAAG,SAAS,CAWlC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.js

@@ -0,0 +1,14 @@
+const decryptIncomingSimdReadings = async (manager, encrypted) => {
+  if (!encrypted) return void 0;
+  const decryptKeys = [
+    ...await manager.getDetectorKeys(),
+    process.env.BOT_DECRYPTION_KEY
+  ];
+  const decrypted = await manager.decryptSimdReadings(encrypted, decryptKeys);
+  if (!decrypted) return void 0;
+  const { timestamp: _ignored, ...readings } = decrypted;
+  return readings;
+};
+export {
+  decryptIncomingSimdReadings
+};

package/dist/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptSimdReadings.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC/C,OAA4B,EAC5B,SAA6B,EACO,EAAE;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,WAAW,GAAG;QACnB,GAAG,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB;KAC9B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5E,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;IACvD,OAAO,QAAQ,CAAC;AACjB,CAAC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.d.ts

@@ -0,0 +1,7 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../../express.js";
+declare const _default: (env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<unknown>;
+export default _default;
+//# sourceMappingURL=handler.d.ts.map

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAmBtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBA2VG"}