@prosopo/provider 3.15.0 → 4.7.2

package/dist/api/captcha/getFrictionlessCaptchaChallenge.js

@@ -1,366 +1,4 @@
-import { ProsopoApiError } from "@prosopo/common";
-import { GetFrictionlessCaptchaChallengeRequestBody, ApiParams, CaptchaType, ContextType } from "@prosopo/types";
-import { flatten, compareBinaryStrings } from "@prosopo/util";
-import { getCompositeIpAddress } from "../../compositeIpAddress.js";
-import { FrictionlessReason, FrictionlessManager } from "../../tasks/frictionless/frictionlessTasks.js";
-import { timestampDecayFunction } from "../../tasks/frictionless/frictionlessTasksUtils.js";
-import "../../tasks/index.js";
-import { hashUserAgent } from "../../utils/hashUserAgent.js";
-import { hashUserIp } from "../../utils/hashUserIp.js";
-import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
-import { getRequestUserScope } from "../blacklistRequestInspector.js";
-import { determineContextType, getContextThreshold } from "./contextAwareValidation.js";
-import { Tasks } from "../../tasks/tasks.js";
-const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
-const getRoundsFromSimScore = (simScore) => {
-  if (simScore >= 0.9) return 0;
-  if (simScore >= 0.8) return 3;
-  if (simScore >= 0.7) return 4;
-  if (simScore >= 0.6) return 6;
-  if (simScore >= 0.5) return 7;
-  return 8;
-};
-const getFrictionlessCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res, next) => {
-  try {
-    const tasks = new Tasks(env, req.logger);
-    const { token, headHash, dapp, user } = GetFrictionlessCaptchaChallengeRequestBody.parse(req.body);
-    if (getMaintenanceMode()) {
-      req.logger.info(() => ({
-        msg: "Maintenance mode active - storing dummy token and sending PoW captcha",
-        data: { dapp, user }
-      }));
-      return res.json(
-        await tasks.frictionlessManager.sendPowCaptcha({
-          token,
-          score: 0,
-          threshold: 0.5,
-          scoreComponents: {
-            baseScore: 0
-          },
-          providerSelectEntropy: 0,
-          ipAddress: getCompositeIpAddress(req.ip || ""),
-          webView: false,
-          iFrame: false,
-          decryptedHeadHash: ""
-        })
-      );
-    }
-    const existingToken = await tasks.db.getSessionRecordByToken(token);
-    if (existingToken) {
-      req.logger.info(() => ({
-        token: existingToken,
-        msg: "Token has already been used"
-      }));
-      return next(
-        new ProsopoApiError("API.BAD_REQUEST", {
-          context: {
-            code: 400,
-            siteKey: dapp,
-            user
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const userSitekeyIpHash = hashUserIp(user, req.ip || "", dapp);
-    const existingSession = await tasks.db.getSessionByuserSitekeyIpHash(userSitekeyIpHash);
-    if (existingSession) {
-      req.logger.info(() => ({
-        msg: "Reusing existing session for user-IP-sitekey combination",
-        data: {
-          userSitekeyIpHash,
-          sessionId: existingSession.sessionId,
-          captchaType: existingSession.captchaType
-        }
-      }));
-      return res.json({
-        [ApiParams.captchaType]: existingSession.captchaType,
-        [ApiParams.sessionId]: existingSession.sessionId,
-        [ApiParams.status]: "ok"
-      });
-    }
-    const lScore = tasks.frictionlessManager.checkLangRules(
-      req.headers["accept-language"] || ""
-    );
-    const {
-      baseBotScore,
-      timestamp,
-      providerSelectEntropy,
-      userId,
-      userAgent,
-      webView,
-      iFrame,
-      decryptedHeadHash,
-      decryptionFailed
-    } = await tasks.frictionlessManager.decryptPayload(token, headHash);
-    req.logger.debug(() => ({
-      msg: "Decrypted payload",
-      data: {
-        baseBotScore,
-        timestamp,
-        providerSelectEntropy,
-        userId,
-        userAgent,
-        webView
-      }
-    }));
-    let botScore = baseBotScore + lScore;
-    const clientRecord = await tasks.db.getClientRecord(dapp);
-    if (!clientRecord) {
-      return next(
-        new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-          context: { code: 400, siteKey: dapp },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const { valid, reason } = await tasks.frictionlessManager.isValidRequest(
-      clientRecord,
-      CaptchaType.frictionless,
-      env
-    );
-    if (!valid) {
-      return next(
-        new ProsopoApiError(reason || "API.BAD_REQUEST", {
-          context: {
-            code: 400,
-            siteKey: dapp,
-            user
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const botThreshold = clientRecord.settings?.frictionlessThreshold || DEFAULT_FRICTIONLESS_THRESHOLD;
-    let scoreComponents = {
-      baseScore: baseBotScore,
-      ...lScore && { lScore }
-    };
-    const ipAddress = getCompositeIpAddress(req.ip || "");
-    tasks.frictionlessManager.setSessionParams({
-      token,
-      score: botScore,
-      threshold: botThreshold,
-      scoreComponents,
-      providerSelectEntropy,
-      ipAddress,
-      webView,
-      iFrame,
-      decryptedHeadHash
-    });
-    const userScope = getRequestUserScope(
-      flatten(req.headers),
-      req.ja4,
-      req.ip,
-      user
-    );
-    const userAccessPolicy = (await tasks.frictionlessManager.getPrioritisedAccessPolicies(
-      userAccessRulesStorage,
-      dapp,
-      userScope
-    ))[0];
-    if (userAccessPolicy) {
-      const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(
-        userAccessPolicy,
-        baseBotScore,
-        botScore,
-        scoreComponents
-      );
-      botScore = scoreUpdate.score;
-      scoreComponents = scoreUpdate.scoreComponents;
-      tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-      if (userAccessPolicy.captchaType === CaptchaType.image) {
-        return res.json(
-          await tasks.frictionlessManager.sendImageCaptcha({
-            solvedImagesCount: userAccessPolicy.solvedImagesCount,
-            userSitekeyIpHash,
-            reason: FrictionlessReason.USER_ACCESS_POLICY
-          })
-        );
-      }
-      if (userAccessPolicy.captchaType === CaptchaType.pow) {
-        return res.json(
-          await tasks.frictionlessManager.sendPowCaptcha({
-            userSitekeyIpHash,
-            reason: FrictionlessReason.USER_ACCESS_POLICY
-          })
-        );
-      }
-    }
-    const headersUserAgent = req.headers["user-agent"];
-    const hashedHeadersUserAgent = headersUserAgent ? hashUserAgent(headersUserAgent) : "";
-    const headersProsopoUser = req.headers["prosopo-user"];
-    if (hashedHeadersUserAgent !== userAgent || headersProsopoUser !== userId) {
-      req.logger.info(() => ({
-        msg: "User agent or user id does not match",
-        data: {
-          headersUserAgent,
-          hashedHeadersUserAgent,
-          userAgent,
-          // This is the hashed user agent from the token
-          headersProsopoUser,
-          userId
-        }
-      }));
-      return res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          solvedImagesCount: timestampDecayFunction(
-            timestamp,
-            decryptionFailed
-          ),
-          userSitekeyIpHash,
-          reason: FrictionlessReason.USER_AGENT_MISMATCH
-        })
-      );
-    }
-    if (clientRecord.settings.contextAware?.enabled) {
-      const contexts = clientRecord.settings.contextAware?.contexts || {};
-      const hasDefault = contexts[ContextType.Default] !== void 0;
-      const hasWebview = contexts[ContextType.Webview] !== void 0;
-      let contextType;
-      if (hasDefault && hasWebview) {
-        contextType = determineContextType(webView);
-      } else if (hasDefault) {
-        contextType = ContextType.Default;
-      } else if (hasWebview) {
-        contextType = ContextType.Webview;
-      } else {
-        contextType = void 0;
-      }
-      if (contextType) {
-        const clientEntropy = await tasks.frictionlessManager.getClientContextEntropy(
-          clientRecord.account,
-          contextType
-        );
-        if (clientEntropy) {
-          if (!decryptedHeadHash) {
-            tasks.logger.info(() => ({
-              msg: "No decryptedHeadHash in session for context aware client"
-            }));
-            return next(
-              new ProsopoApiError("API.BAD_REQUEST", {
-                context: {
-                  code: 400,
-                  siteKey: dapp,
-                  user
-                },
-                i18n: req.i18n,
-                logger: req.logger
-              })
-            );
-          }
-          const threshold = getContextThreshold(
-            clientRecord.settings,
-            contextType
-          );
-          const sim = compareBinaryStrings(decryptedHeadHash, clientEntropy);
-          const isValidContext = sim >= threshold;
-          if (!isValidContext) {
-            return res.json(
-              await tasks.frictionlessManager.sendImageCaptcha({
-                solvedImagesCount: getRoundsFromSimScore(sim),
-                userSitekeyIpHash,
-                reason: FrictionlessReason.CONTEXT_AWARE_VALIDATION_FAILED
-              })
-            );
-          }
-        }
-      }
-    }
-    if (clientRecord.settings.disallowWebView && webView) {
-      tasks.logger.info(() => ({
-        msg: "WebView detected"
-      }));
-      const scoreUpdate = tasks.frictionlessManager.scoreIncreaseWebView(
-        baseBotScore,
-        botScore,
-        scoreComponents
-      );
-      botScore = scoreUpdate.score;
-      scoreComponents = scoreUpdate.scoreComponents;
-      tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-      return res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          solvedImagesCount: env.config.captchas.solved.count * 2,
-          userSitekeyIpHash,
-          reason: FrictionlessReason.WEBVIEW_DETECTED
-        })
-      );
-    }
-    if (FrictionlessManager.timestampTooOld(timestamp)) {
-      const scoreUpdate = tasks.frictionlessManager.scoreIncreaseTimestamp(
-        timestamp,
-        baseBotScore,
-        botScore,
-        scoreComponents
-      );
-      botScore = scoreUpdate.score;
-      scoreComponents = scoreUpdate.scoreComponents;
-      tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-      return res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          solvedImagesCount: timestampDecayFunction(
-            timestamp,
-            decryptionFailed
-          ),
-          userSitekeyIpHash,
-          reason: FrictionlessReason.OLD_TIMESTAMP
-        })
-      );
-    }
-    const hostVerified = await tasks.frictionlessManager.hostVerified(
-      providerSelectEntropy
-    );
-    if (!hostVerified.verified) {
-      const scoreUpdate = tasks.frictionlessManager.scoreIncreaseUnverifiedHost(
-        hostVerified.domain,
-        baseBotScore,
-        botScore,
-        scoreComponents
-      );
-      botScore = scoreUpdate.score;
-      scoreComponents = scoreUpdate.scoreComponents;
-      tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-    }
-    if (Number(botScore) > botThreshold) {
-      req.logger.info(() => ({
-        msg: "Bot score is greater than threshold",
-        data: {
-          botScore,
-          botThreshold,
-          token
-        }
-      }));
-      return res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          solvedImagesCount: env.config.captchas.solved.count,
-          userSitekeyIpHash,
-          reason: FrictionlessReason.BOT_SCORE_ABOVE_THRESHOLD
-        })
-      );
-    }
-    return res.json(
-      await tasks.frictionlessManager.sendPowCaptcha({
-        userSitekeyIpHash
-      })
-    );
-  } catch (err) {
-    req.logger.error(() => ({
-      err,
-      msg: "Error in frictionless captcha challenge"
-    }));
-    return next(
-      new ProsopoApiError("API.BAD_REQUEST", {
-        context: { code: 400, error: err },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
-};
+import { default as default2 } from "./getFrictionlessCaptchaChallenge/handler.js";
 export {
-  getFrictionlessCaptchaChallenge as default
+  default2 as default
 };

package/dist/api/captcha/getFrictionlessCaptchaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getFrictionlessCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getFrictionlessCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,SAAS,EACT,WAAW,EACX,WAAW,EACX,0CAA0C,GAC1C,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACN,oBAAoB,EACpB,mBAAmB,GACnB,MAAM,6BAA6B,CAAC;AAErC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAE,EAAE;IAClD,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACV,CAAC,CAAC;AAEF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GACpC,0CAA0C,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAG5D,IAAI,kBAAkB,EAAE,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,uEAAuE;gBAC5E,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACpB,CAAC,CAAC,CAAC;YAGJ,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;gBAC9C,KAAK;gBACL,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG;gBACd,eAAe,EAAE;oBAChB,SAAS,EAAE,CAAC;iBACZ;gBACD,qBAAqB,EAAE,CAAC;gBACxB,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC9C,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK;gBACb,iBAAiB,EAAE,EAAE;aACrB,CAAC,CACF,CAAC;QACH,CAAC;QAGD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAEpE,IAAI,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,6BAA6B;aAClC,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAGD,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAE/D,MAAM,eAAe,GACpB,MAAM,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;QAEjE,IAAI,eAAe,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,0DAA0D;gBAC/D,IAAI,EAAE;oBACL,iBAAiB;oBACjB,SAAS,EAAE,eAAe,CAAC,SAAS;oBACpC,WAAW,EAAE,eAAe,CAAC,WAAW;iBACxC;aACD,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CAAC;gBACf,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,WAAW;gBACpD,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,SAAS;gBAChD,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;aACxB,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACtD,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CACpC,CAAC;QAEF,MAAM,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,iBAAiB,EACjB,gBAAgB,GAChB,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEpE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE;gBACL,YAAY;gBACZ,SAAS;gBACT,qBAAqB;gBACrB,MAAM;gBACN,SAAS;gBACT,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,IAAI,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;QAErC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACvE,YAAY,EACZ,WAAW,CAAC,YAAY,EACxB,GAAG,CACH,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GACjB,YAAY,CAAC,QAAQ,EAAE,qBAAqB;YAC5C,8BAA8B,CAAC;QAGhC,IAAI,eAAe,GAAoB;YACtC,SAAS,EAAE,YAAY;YACvB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;SACzB,CAAC;QAEF,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAGtD,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC1C,KAAK;YACL,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,YAAY;YACvB,eAAe;YACf,qBAAqB;YACrB,SAAS;YACT,OAAO;YACP,MAAM;YACN,iBAAiB;SACjB,CAAC,CAAC;QAGH,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,EAAE,EACN,IAAI,CACJ,CAAC;QACF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,mBAAmB,CAAC,4BAA4B,CAC3D,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT,CACD,CAAC,CAAC,CAAC,CAAC;QAGL,IAAI,gBAAgB,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,yBAAyB,CACtE,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,eAAe,CACf,CAAC;YACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;YAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;YAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAEjE,IAAI,gBAAgB,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBACxD,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;oBAChD,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;oBACrD,iBAAiB;oBACjB,MAAM,EAAE,kBAAkB,CAAC,kBAAkB;iBAC7C,CAAC,CACF,CAAC;YACH,CAAC;YACD,IAAI,gBAAgB,CAAC,WAAW,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;gBACtD,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;oBAC9C,iBAAiB;oBACjB,MAAM,EAAE,kBAAkB,CAAC,kBAAkB;iBAC7C,CAAC,CACF,CAAC;YACH,CAAC;QACF,CAAC;QAID,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,sBAAsB,GAAG,gBAAgB;YAC9C,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACN,MAAM,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvD,IACC,sBAAsB,KAAK,SAAS;YACpC,kBAAkB,KAAK,MAAM,EAC5B,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,sCAAsC;gBAC3C,IAAI,EAAE;oBACL,gBAAgB;oBAChB,sBAAsB;oBACtB,SAAS,EAAE,SAAS;oBACpB,kBAAkB;oBAClB,MAAM;iBACN;aACD,CAAC,CAAC,CAAC;YAEJ,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBAChD,iBAAiB,EAAE,sBAAsB,CACxC,SAAS,EACT,gBAAgB,CAChB;gBACD,iBAAiB;gBACjB,MAAM,EAAE,kBAAkB,CAAC,mBAAmB;aAC9C,CAAC,CACF,CAAC;QACH,CAAC;QAGD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YAEjD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;YACpE,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;YAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;YAO/D,IAAI,WAAoC,CAAC;YACzC,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;gBAC9B,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACvB,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;YACnC,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACvB,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACP,WAAW,GAAG,SAAS,CAAC;YACzB,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAEjB,MAAM,aAAa,GAClB,MAAM,KAAK,CAAC,mBAAmB,CAAC,uBAAuB,CACtD,YAAY,CAAC,OAAO,EACpB,WAAW,CACX,CAAC;gBAEH,IAAI,aAAa,EAAE,CAAC;oBACnB,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBACxB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;4BACxB,GAAG,EAAE,0DAA0D;yBAC/D,CAAC,CAAC,CAAC;wBACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;4BACtC,OAAO,EAAE;gCACR,IAAI,EAAE,GAAG;gCACT,OAAO,EAAE,IAAI;gCACb,IAAI;6BACJ;4BACD,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,MAAM,EAAE,GAAG,CAAC,MAAM;yBAClB,CAAC,CACF,CAAC;oBACH,CAAC;oBAGD,MAAM,SAAS,GAAG,mBAAmB,CACpC,YAAY,CAAC,QAAQ,EACrB,WAAW,CACX,CAAC;oBAEF,MAAM,GAAG,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;oBACnE,MAAM,cAAc,GAAG,GAAG,IAAI,SAAS,CAAC;oBACxC,IAAI,CAAC,cAAc,EAAE,CAAC;wBACrB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;4BAChD,iBAAiB,EAAE,qBAAqB,CAAC,GAAG,CAAC;4BAC7C,iBAAiB;4BACjB,MAAM,EAAE,kBAAkB,CAAC,+BAA+B;yBAC1D,CAAC,CACF,CAAC;oBACH,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAGD,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,IAAI,OAAO,EAAE,CAAC;YACtD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,kBAAkB;aACvB,CAAC,CAAC,CAAC;YACJ,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CACjE,YAAY,EACZ,QAAQ,EACR,eAAe,CACf,CAAC;YACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;YAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;YAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAEjE,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBAChD,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;gBACvD,iBAAiB;gBACjB,MAAM,EAAE,kBAAkB,CAAC,gBAAgB;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAGD,IAAI,mBAAmB,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC,sBAAsB,CACnE,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,eAAe,CACf,CAAC;YACF,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;YAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;YAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAEjE,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBAChD,iBAAiB,EAAE,sBAAsB,CACxC,SAAS,EACT,gBAAgB,CAChB;gBACD,iBAAiB;gBACjB,MAAM,EAAE,kBAAkB,CAAC,aAAa;aACxC,CAAC,CACF,CAAC;QACH,CAAC;QAGD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAChE,qBAAqB,CACrB,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,WAAW,GAChB,KAAK,CAAC,mBAAmB,CAAC,2BAA2B,CACpD,YAAY,CAAC,MAAM,EACnB,YAAY,EACZ,QAAQ,EACR,eAAe,CACf,CAAC;YACH,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;YAC7B,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;YAC9C,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAClE,CAAC;QAGD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,qCAAqC;gBAC1C,IAAI,EAAE;oBACL,QAAQ;oBACR,YAAY;oBACZ,KAAK;iBACL;aACD,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBAChD,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK;gBACnD,iBAAiB;gBACjB,MAAM,EAAE,kBAAkB,CAAC,yBAAyB;aACpD,CAAC,CACF,CAAC;QACH,CAAC;QAGD,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;YAC9C,iBAAiB;SACjB,CAAC,CACF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,GAAG,EAAE,yCAAyC;SAC9C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"getFrictionlessCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getFrictionlessCaptchaChallenge.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAC"}

package/dist/api/captcha/getImageCaptchaChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getImageCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getImageCaptchaChallenge.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAMnD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAuKG"}
+{"version":3,"file":"getImageCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getImageCaptchaChallenge.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAOnD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAsMG"}

package/dist/api/captcha/getImageCaptchaChallenge.js

@@ -1,15 +1,17 @@
 import { ProsopoApiError } from "@prosopo/common";
 import { parseCaptchaAssets } from "@prosopo/datasets";
-import { CaptchaRequestBody, CaptchaType, ApiParams } from "@prosopo/types";
+import { CaptchaRequestBody, CaptchaType, imageMaxRoundsDefault, SimdReadingsStage, ApiParams } from "@prosopo/types";
 import { getIPAddress, flatten } from "@prosopo/util";
 import "../../tasks/index.js";
+import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
 import { getRequestUserScope } from "../blacklistRequestInspector.js";
 import { validateSiteKey, validateAddr } from "../validateAddress.js";
 import { Tasks } from "../../tasks/tasks.js";
 const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res, next) => {
   const tasks = new Tasks(env, req.logger);
   let parsed;
-  if (!req.ip) {
+  const normalizedIp = normalizeRequestIp(req.ip, req.logger);
+  if (!normalizedIp) {
     return next(
       new ProsopoApiError("API.BAD_REQUEST", {
         context: { code: 400, error: "IP address not found" },
@@ -18,7 +20,7 @@ const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, re
       })
     );
   }
-  const ipAddress = getIPAddress(req.ip || "");
+  const ipAddress = getIPAddress(normalizedIp);
   try {
     parsed = CaptchaRequestBody.parse(req.body);
   } catch (err) {
@@ -30,7 +32,7 @@ const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, re
       })
     );
   }
-  const { datasetId, user, dapp, sessionId } = parsed;
+  const { datasetId, user, dapp, sessionId, simdReadings } = parsed;
   validateSiteKey(dapp);
   validateAddr(user);
   try {
@@ -44,11 +46,17 @@ const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, re
         })
       );
     }
+    const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
     const userScope = getRequestUserScope(
       flatten(req.headers),
       req.ja4,
-      req.ip,
-      user
+      normalizedIp,
+      user,
+      void 0,
+      // headHash
+      void 0,
+      // coords
+      countryCode
     );
     const userAccessPolicy = (await tasks.imgCaptchaManager.getPrioritisedAccessPolicies(
       userAccessRulesStorage,
@@ -66,7 +74,7 @@ const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, re
       env,
       sessionId,
       userAccessPolicy,
-      req.ip
+      normalizedIp
     );
     if (!valid) {
       return next(
@@ -83,19 +91,38 @@ const getImageCaptchaChallenge = (env, userAccessRulesStorage) => async (req, re
     }
     const captchaConfig = {
       solved: {
-        count: solvedImagesCount || userAccessPolicy?.solvedImagesCount || env.config.captchas.solved.count
+        count: Math.min(
+          solvedImagesCount || userAccessPolicy?.solvedImagesCount || env.config.captchas.solved.count,
+          clientRecord.settings.imageMaxRounds ?? imageMaxRoundsDefault
+        )
       },
       unsolved: {
         count: userAccessPolicy?.unsolvedImagesCount || env.config.captchas.unsolved.count
       }
     };
+    if (validSessionId && simdReadings) {
+      await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(
+        validSessionId,
+        simdReadings,
+        SimdReadingsStage.challenge
+      ).catch((updateErr) => {
+        req.logger.warn(() => ({
+          err: updateErr,
+          msg: "Failed to patch session with SIMD readings on image challenge"
+        }));
+      });
+    }
     const taskData = await tasks.imgCaptchaManager.getRandomCaptchasAndRequestHash(
       datasetId,
       user,
       ipAddress,
       captchaConfig,
       clientRecord.settings.imageThreshold ?? 0.8,
-      validSessionId
+      validSessionId,
+      // Persist the full ipinfo payload — consumers read
+      // individual flags off this object instead of separate
+      // flat fields.
+      req.ipInfo
     );
     const captchaResponse = {
       [ApiParams.status]: "ok",

package/dist/api/captcha/getImageCaptchaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getImageCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getImageCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACN,SAAS,EAET,kBAAkB,EAGlB,WAAW,GAEX,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtE,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAoC,CAAC;IAEzC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE;YACrD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,IAAI,CAAC;QACJ,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAEpD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,EAAE,EACN,IAAI,CACJ,CAAC;QACF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,iBAAiB,CAAC,4BAA4B,CACzD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT,CACD,CAAC,CAAC,CAAC,CAAC;QAEL,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,EACzB,iBAAiB,GACjB,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,CAC/C,YAAY,EACZ,WAAW,CAAC,KAAK,EACjB,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,GAAG,CAAC,EAAE,CACN,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAA0C;YAC5D,MAAM,EAAE;gBACP,KAAK,EACJ,iBAAiB;oBACjB,gBAAgB,EAAE,iBAAiB;oBACnC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK;aACjC;YACD,QAAQ,EAAE;gBACT,KAAK,EACJ,gBAAgB,EAAE,mBAAmB;oBACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;aACnC;SACD,CAAC;QAEF,MAAM,QAAQ,GACb,MAAM,KAAK,CAAC,iBAAiB,CAAC,+BAA+B,CAC5D,SAAS,EACT,IAAI,EACJ,SAAS,EACT,aAAa,EACb,YAAY,CAAC,QAAQ,CAAC,cAAc,IAAI,GAAG,EAC3C,cAAc,CACd,CAAC;QACH,MAAM,eAAe,GAAwB;YAC5C,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC;gBAClE,GAAG,OAAO;gBACV,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAC5C;aACD,CAAC,CAAC;YACH,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,WAAW;YAC7C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE;YACpD,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,iBAAiB;iBACnD;aACD;SACD,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,gCAAgC;YACrC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK;gBAC7C,IAAI;gBACJ,IAAI;gBACJ,SAAS;aACT;SACD,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,GAAG,CAAC,MAAM;YAChB,GAAG,EAAE,0CAA0C;SAC/C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,KAAK,EAAE,GAAG;gBAEV,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"getImageCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getImageCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACN,SAAS,EAET,kBAAkB,EAGlB,WAAW,EAEX,iBAAiB,EACjB,qBAAqB,GACrB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtE,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAoC,CAAC;IAEzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE;YACrD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE7C,IAAI,CAAC;QACJ,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAElE,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,SAAS,EACT,SAAS,EACT,WAAW,CACX,CAAC;QACF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,iBAAiB,CAAC,4BAA4B,CACzD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT,CACD,CAAC,CAAC,CAAC,CAAC;QAEL,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,EACzB,iBAAiB,GACjB,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,CAC/C,YAAY,EACZ,WAAW,CAAC,KAAK,EACjB,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAA0C;YAC5D,MAAM,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,GAAG,CACd,iBAAiB;oBAChB,gBAAgB,EAAE,iBAAiB;oBACnC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EACjC,YAAY,CAAC,QAAQ,CAAC,cAAc,IAAI,qBAAqB,CAC7D;aACD;YACD,QAAQ,EAAE;gBACT,KAAK,EACJ,gBAAgB,EAAE,mBAAmB;oBACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;aACnC;SACD,CAAC;QAEF,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,+DAA+D;iBACpE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GACb,MAAM,KAAK,CAAC,iBAAiB,CAAC,+BAA+B,CAC5D,SAAS,EACT,IAAI,EACJ,SAAS,EACT,aAAa,EACb,YAAY,CAAC,QAAQ,CAAC,cAAc,IAAI,GAAG,EAC3C,cAAc,EAId,GAAG,CAAC,MAAM,CACV,CAAC;QACH,MAAM,eAAe,GAAwB;YAC5C,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC;gBAClE,GAAG,OAAO;gBACV,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAC5C;aACD,CAAC,CAAC;YACH,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,WAAW;YAC7C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE;YACpD,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,iBAAiB;iBACnD;aACD;SACD,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,gCAAgC;YACrC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK;gBAC7C,IAAI;gBACJ,IAAI;gBACJ,SAAS;aACT;SACD,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,GAAG,CAAC,MAAM;YAChB,GAAG,EAAE,0CAA0C;SAC/C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,KAAK,EAAE,GAAG;gBAEV,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/getPoWCaptchaChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPoWCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getPoWCaptchaChallenge.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAMnD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBA2KG"}
+{"version":3,"file":"getPoWCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getPoWCaptchaChallenge.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BASnD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBA0NG"}

package/dist/api/captcha/getPoWCaptchaChallenge.js

@@ -1,10 +1,13 @@
 import { ProsopoApiError } from "@prosopo/common";
-import { GetPowCaptchaChallengeRequestBody, CaptchaType, ApiParams } from "@prosopo/types";
+import { GetPowCaptchaChallengeRequestBody, CaptchaType, SimdReadingsStage, ApiParams } from "@prosopo/types";
 import { flatten } from "@prosopo/util";
 import { getCompositeIpAddress } from "../../compositeIpAddress.js";
 import "../../tasks/index.js";
+import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
 import { getRequestUserScope } from "../blacklistRequestInspector.js";
 import { validateSiteKey, validateAddr } from "../validateAddress.js";
+import { buildPowMaintenanceResponse } from "./maintenanceModeResponses.js";
 import { Tasks } from "../../tasks/tasks.js";
 const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res, next) => {
   let parsed;
@@ -21,9 +24,16 @@ const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res,
       })
     );
   }
-  const { user, dapp, sessionId } = parsed;
+  const { user, dapp, sessionId, simdReadings } = parsed;
   validateSiteKey(dapp);
   validateAddr(user);
+  if (getMaintenanceMode()) {
+    req.logger.info(() => ({
+      msg: "Maintenance mode active - returning dummy PoW challenge",
+      data: { dapp, user, sessionId }
+    }));
+    return res.json(buildPowMaintenanceResponse(user, dapp));
+  }
   try {
     const clientSettings = await tasks.db.getClientRecord(dapp);
     if (!clientSettings) {
@@ -35,11 +45,23 @@ const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res,
         })
       );
     }
+    const normalizedIp = normalizeRequestIp(req.ip, req.logger);
+    if (!normalizedIp) {
+      req.logger.warn(() => ({
+        msg: "Request missing IP; geoblocking will be skipped"
+      }));
+    }
+    const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
     const userScope = getRequestUserScope(
       flatten(req.headers),
       req.ja4,
-      req.ip,
-      user
+      normalizedIp,
+      user,
+      void 0,
+      // headHash
+      void 0,
+      // coords
+      countryCode
     );
     const userAccessPolicy = (await tasks.powCaptchaManager.getPrioritisedAccessPolicies(
       userAccessRulesStorage,
@@ -57,7 +79,7 @@ const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res,
       env,
       sessionId,
       userAccessPolicy,
-      req.ip
+      normalizedIp
     );
     if (!valid) {
       return next(
@@ -94,6 +116,18 @@ const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res,
       origin,
       difficulty
     );
+    if (validSessionId && simdReadings) {
+      await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(
+        validSessionId,
+        simdReadings,
+        SimdReadingsStage.challenge
+      ).catch((updateErr) => {
+        req.logger.warn(() => ({
+          err: updateErr,
+          msg: "Failed to patch session with SIMD readings on PoW challenge"
+        }));
+      });
+    }
     await tasks.db.storePowCaptchaRecord(
       challenge.challenge,
       {
@@ -103,10 +137,18 @@ const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res,
       },
       challenge.difficulty,
       challenge.providerSignature,
-      getCompositeIpAddress(req.ip || ""),
+      getCompositeIpAddress(normalizedIp),
       flatten(req.headers),
       req.ja4,
-      validSessionId
+      validSessionId,
+      void 0,
+      void 0,
+      void 0,
+      // Persist the full ipinfo payload — consumers (portal,
+      // anomaly detection, CHECK_IP_INFO backfill) read the
+      // individual flags off this object instead of separate
+      // flat fields.
+      req.ipInfo
     );
     const getPowCaptchaResponse = {
       [ApiParams.status]: "ok",

package/dist/api/captcha/getPoWCaptchaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPoWCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPoWCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,SAAS,EACT,WAAW,EACX,iCAAiC,GAGjC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtE,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,MAAmD,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE5B,IAAI,CAAC;QACJ,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAEzC,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,EAAE,EACN,IAAI,CACJ,CAAC;QACF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,iBAAiB,CAAC,4BAA4B,CACzD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT,CACD,CAAC,CAAC,CAAC,CAAC;QAEL,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,EACzB,aAAa,GACb,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,CAC/C,cAAc,EACd,WAAW,CAAC,GAAG,EACf,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,GAAG,CAAC,EAAE,CACN,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GACf,aAAa;YACb,gBAAgB,EAAE,aAAa;YAC/B,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CACrE,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,UAAU,CACV,CAAC;QAEF,MAAM,KAAK,CAAC,EAAE,CAAC,qBAAqB,CACnC,SAAS,CAAC,SAAS,EACnB;YACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SACjB,EACD,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,iBAAiB,EAC3B,qBAAqB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,cAAc,CACd,CAAC;QAEF,MAAM,qBAAqB,GAA0B;YACpD,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,UAAU;YAC5C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,8BAA8B;YACnC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,GAAG;gBAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,wCAAwC;SAC7C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"getPoWCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPoWCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,SAAS,EACT,WAAW,EACX,iCAAiC,EAGjC,iBAAiB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,MAAmD,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE5B,IAAI,CAAC;QACJ,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,yDAAyD;YAC9D,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,SAAS,EACT,SAAS,EACT,WAAW,CACX,CAAC;QACF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,iBAAiB,CAAC,4BAA4B,CACzD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT,CACD,CAAC,CAAC,CAAC,CAAC;QAEL,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,EACzB,aAAa,GACb,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,CAC/C,cAAc,EACd,WAAW,CAAC,GAAG,EACf,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GACf,aAAa;YACb,gBAAgB,EAAE,aAAa;YAC/B,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CACrE,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,UAAU,CACV,CAAC;QAEF,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,6DAA6D;iBAClE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC,EAAE,CAAC,qBAAqB,CACnC,SAAS,CAAC,SAAS,EACnB;YACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SACjB,EACD,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,iBAAiB,EAC3B,qBAAqB,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EAKT,GAAG,CAAC,MAAM,CACV,CAAC;QAEF,MAAM,qBAAqB,GAA0B;YACpD,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,UAAU;YAC5C,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,8BAA8B;YACnC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,GAAG;gBAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,wCAAwC;SAC7C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/getPuzzleCaptchaChallenge.d.ts

@@ -0,0 +1,7 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../express.js";
+declare const _default: (env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+export default _default;
+//# sourceMappingURL=getPuzzleCaptchaChallenge.d.ts.map