@prosopo/provider 4.15.14 → 4.15.15

package/dist/cjs/api/block.cjs

@@ -1,32 +1,20 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const apiToggleMaintenanceModeEndpoint = require("./admin/apiToggleMaintenanceModeEndpoint.cjs");
-const blacklistRequestInspector = require("./blacklistRequestInspector.cjs");
-const blockMiddleware = (providerEnvironment) => {
-  let blacklistRequestInspector$1;
-  const environmentReadinessWaiter = providerEnvironment.isReady.bind(providerEnvironment);
-  return (req, res, next) => {
-    if (apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) {
-      return next();
-    }
-    if (!blacklistRequestInspector$1) {
-      try {
-        const db = providerEnvironment.getDb();
-        const userAccessRulesStorage = db.getUserAccessRulesStorage();
-        blacklistRequestInspector$1 = new blacklistRequestInspector.BlacklistRequestInspector(
-          userAccessRulesStorage,
-          environmentReadinessWaiter,
-          db
-        );
-      } catch {
-        return next();
-      }
-    }
-    return blacklistRequestInspector$1.abortRequestForBlockedUsers(
-      req,
-      res,
-      next
-    );
-  };
+const require_blacklistRequestInspector = require("./blacklistRequestInspector.cjs");
+const require_apiToggleMaintenanceModeEndpoint = require("./admin/apiToggleMaintenanceModeEndpoint.cjs");
+//#region src/api/block.ts
+var blockMiddleware = (providerEnvironment) => {
+	let blacklistRequestInspector;
+	const environmentReadinessWaiter = providerEnvironment.isReady.bind(providerEnvironment);
+	return (req, res, next) => {
+		if (require_apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) return next();
+		if (!blacklistRequestInspector) try {
+			const db = providerEnvironment.getDb();
+			const userAccessRulesStorage = db.getUserAccessRulesStorage();
+			blacklistRequestInspector = new require_blacklistRequestInspector.BlacklistRequestInspector(userAccessRulesStorage, environmentReadinessWaiter, db);
+		} catch {
+			return next();
+		}
+		return blacklistRequestInspector.abortRequestForBlockedUsers(req, res, next);
+	};
 };
+//#endregion
 exports.blockMiddleware = blockMiddleware;

package/dist/cjs/api/captcha/checkSpamEmail.cjs

@@ -1,102 +1,92 @@
-"use strict";
-const common = require("@prosopo/common");
-const types = require("@prosopo/types");
-const util = require("@prosopo/util");
-const zod = require("zod");
-require("../../tasks/index.cjs");
-const checkSpamEmail$1 = require("../../tasks/spam/checkSpamEmail.cjs");
-const apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
-const metrics = require("../metrics.cjs");
-const tasks = require("../../tasks/tasks.cjs");
-const CheckSpamEmailRequestBody = zod.object({
-  email: types.safeLine(types.INPUT_LIMITS.EMAIL),
-  dapp: types.safeLine(types.INPUT_LIMITS.ID)
+const require_metrics = require("../metrics.cjs");
+const require_checkSpamEmail = require("../../tasks/spam/checkSpamEmail.cjs");
+const require_tasks = require("../../tasks/tasks.cjs");
+const require_apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
+let _prosopo_common = require("@prosopo/common");
+let _prosopo_types = require("@prosopo/types");
+let _prosopo_util = require("@prosopo/util");
+//#region src/api/captcha/checkSpamEmail.ts
+var CheckSpamEmailRequestBody = (0, require("zod").object)({
+	email: (0, _prosopo_types.safeLine)(_prosopo_types.INPUT_LIMITS.EMAIL),
+	dapp: (0, _prosopo_types.safeLine)(_prosopo_types.INPUT_LIMITS.ID)
 });
-const checkSpamEmail = (env) => async (req, res, next) => {
-  let email;
-  let dapp;
-  try {
-    ({ email, dapp } = CheckSpamEmailRequestBody.parse(req.body));
-  } catch (err) {
-    return next(
-      new common.ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-        context: { code: 400, error: err },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
-  try {
-    const emailDomain = util.extractDomainFromEmail(email);
-    req.logger.info(() => ({
-      msg: "Check spam email handler entry",
-      data: {
-        emailDomain,
-        path: req.path,
-        method: req.method
-      }
-    }));
-    if (apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) {
-      req.logger.info(() => ({
-        msg: "Maintenance mode active - returning isSpam=false",
-        data: { emailDomain }
-      }));
-      return res.json({ isSpam: false, emailDomain });
-    }
-    const tasks$1 = new tasks.Tasks(env, req.logger);
-    const clientRecord = await tasks$1.db.getClientRecord(dapp);
-    if (!clientRecord) {
-      return next(
-        new common.ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-          context: { code: 400, siteKey: dapp },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const valid = clientRecord.settings.spamEmailDomainCheckEnabled;
-    if (!valid) {
-      return next(
-        new common.ProsopoApiError("API.BAD_REQUEST", {
-          context: {
-            code: 400,
-            siteKey: dapp
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const isSpam = await checkSpamEmail$1.checkSpamEmail(
-      email,
-      tasks$1.db,
-      env.config,
-      req.logger
-    );
-    req.logger.info(() => ({
-      msg: "Spam email check result",
-      data: {
-        emailDomain,
-        isSpam
-      }
-    }));
-    metrics.recordSpamEmail(isSpam ? "spam" : "ham");
-    return res.json({
-      isSpam,
-      emailDomain
-    });
-  } catch (error) {
-    req.logger.error(() => ({
-      msg: "Error in check spam email handler",
-      error
-    }));
-    return next(
-      new common.ProsopoApiError("API.INTERNAL_SERVER_ERROR", {
-        context: { code: 500 },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
+var checkSpamEmail_default = (env) => async (req, res, next) => {
+	let email;
+	let dapp;
+	try {
+		({email, dapp} = CheckSpamEmailRequestBody.parse(req.body));
+	} catch (err) {
+		return next(new _prosopo_common.ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	try {
+		const emailDomain = (0, _prosopo_util.extractDomainFromEmail)(email);
+		req.logger.info(() => ({
+			msg: "Check spam email handler entry",
+			data: {
+				emailDomain,
+				path: req.path,
+				method: req.method
+			}
+		}));
+		if (require_apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) {
+			req.logger.info(() => ({
+				msg: "Maintenance mode active - returning isSpam=false",
+				data: { emailDomain }
+			}));
+			return res.json({
+				isSpam: false,
+				emailDomain
+			});
+		}
+		const tasks = new require_tasks.Tasks(env, req.logger);
+		const clientRecord = await tasks.db.getClientRecord(dapp);
+		if (!clientRecord) return next(new _prosopo_common.ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		if (!clientRecord.settings.spamEmailDomainCheckEnabled) return next(new _prosopo_common.ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const isSpam = await require_checkSpamEmail.checkSpamEmail(email, tasks.db, env.config, req.logger);
+		req.logger.info(() => ({
+			msg: "Spam email check result",
+			data: {
+				emailDomain,
+				isSpam
+			}
+		}));
+		require_metrics.recordSpamEmail(isSpam ? "spam" : "ham");
+		return res.json({
+			isSpam,
+			emailDomain
+		});
+	} catch (error) {
+		req.logger.error(() => ({
+			msg: "Error in check spam email handler",
+			error
+		}));
+		return next(new _prosopo_common.ProsopoApiError("API.INTERNAL_SERVER_ERROR", {
+			context: { code: 500 },
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
 };
-module.exports = checkSpamEmail;
+//#endregion
+exports.default = checkSpamEmail_default;

package/dist/cjs/api/captcha/contextAwareValidation.cjs

@@ -1,20 +1,27 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const types = require("@prosopo/types");
+let _prosopo_types = require("@prosopo/types");
+//#region src/api/captcha/contextAwareValidation.ts
+/**
+* Determines the context type based on the webView flag
+* @param webView - Whether the request is from a WebView
+* @returns The context type (Webview or Default)
+*/
 function determineContextType(webView) {
-  return webView ? types.ContextType.Webview : types.ContextType.Default;
+	return webView ? _prosopo_types.ContextType.Webview : _prosopo_types.ContextType.Default;
 }
+/**
+* Gets the threshold for a specific context type from client settings
+* @param settings - Client settings
+* @param contextType - The context type to get the threshold for
+* @returns The threshold for the context type, or the global threshold if not configured
+*/
 function getContextThreshold(settings, contextType) {
-  const contextAware = settings.contextAware;
-  if (contextAware === void 0) {
-    return types.contextAwareThresholdDefault;
-  }
-  const contexts = contextAware.contexts;
-  let contextConfig;
-  if (contexts !== void 0) {
-    contextConfig = contexts[contextType];
-  }
-  return contextConfig?.threshold ?? types.contextAwareThresholdDefault;
+	const contextAware = settings.contextAware;
+	if (contextAware === void 0) return _prosopo_types.contextAwareThresholdDefault;
+	const contexts = contextAware.contexts;
+	let contextConfig;
+	if (contexts !== void 0) contextConfig = contexts[contextType];
+	return contextConfig?.threshold ?? _prosopo_types.contextAwareThresholdDefault;
 }
+//#endregion
 exports.determineContextType = determineContextType;
 exports.getContextThreshold = getContextThreshold;

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.cjs

@@ -1,142 +1,127 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const types = require("@prosopo/types");
-require("../../../tasks/frictionless/frictionlessTasks.cjs");
-const honeypotResponse = require("./honeypotResponse.cjs");
-const handleAccessPolicy = async (input, res) => {
-  if (!input.userAccessPolicy) {
-    return {
-      handled: false,
-      botScore: input.botScore,
-      scoreComponents: input.scoreComponents
-    };
-  }
-  const { tasks, clientRecord, userAccessPolicy, logger } = input;
-  logger.info(() => ({
-    msg: "User access policy matched",
-    data: {
-      policy: userAccessPolicy,
-      captchaType: userAccessPolicy.captchaType,
-      userScope: input.userScope
-    }
-  }));
-  const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(
-    userAccessPolicy,
-    input.baseBotScore,
-    input.botScore,
-    input.scoreComponents
-  );
-  const botScore = scoreUpdate.score;
-  const scoreComponents = scoreUpdate.scoreComponents;
-  tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-  if (userAccessPolicy.type === "block") {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "block",
-        captchaType: types.CaptchaType.image
-      }
-    }));
-    await tasks.frictionlessManager.registerBlockedSession({
-      solvedImagesCount: clientRecord.settings.imageMaxRounds,
-      userSitekeyIpHash: input.userSitekeyIpHash,
-      reason: types.FrictionlessReason.ACCESS_POLICY_BLOCK,
-      siteKey: input.dapp,
-      ipInfo: input.ipInfo,
-      headers: input.flatHeaders
-    });
-    return {
-      handled: true,
-      response: res.status(401).json({ error: "Unauthorized" })
-    };
-  }
-  const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
-  if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "auto_ban_score",
-        botScore,
-        autoBanThreshold,
-        captchaType: userAccessPolicy.captchaType
-      }
-    }));
-    await tasks.frictionlessManager.registerBlockedSession({
-      solvedImagesCount: clientRecord.settings.imageMaxRounds,
-      userSitekeyIpHash: input.userSitekeyIpHash,
-      reason: types.FrictionlessReason.AUTO_BAN_SCORE,
-      siteKey: input.dapp,
-      ipInfo: input.ipInfo,
-      headers: input.flatHeaders
-    });
-    return {
-      handled: true,
-      response: res.status(401).json({ error: "Unauthorized" })
-    };
-  }
-  const captchaTypeBaseParams = {
-    userSitekeyIpHash: input.userSitekeyIpHash,
-    reason: types.FrictionlessReason.USER_ACCESS_POLICY,
-    siteKey: input.dapp,
-    ipInfo: input.ipInfo,
-    headers: input.flatHeaders
-  };
-  if (userAccessPolicy.captchaType === types.CaptchaType.image) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: types.CaptchaType.image
-      }
-    }));
-    honeypotResponse.attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          ...captchaTypeBaseParams,
-          solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(
-            userAccessPolicy.solvedImagesCount,
-            clientRecord.settings.imageMaxRounds
-          ) : clientRecord.settings.imageMaxRounds
-        })
-      )
-    };
-  }
-  if (userAccessPolicy.captchaType === types.CaptchaType.pow) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: types.CaptchaType.pow
-      }
-    }));
-    honeypotResponse.attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams)
-      )
-    };
-  }
-  if (userAccessPolicy.captchaType === types.CaptchaType.puzzle) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: types.CaptchaType.puzzle
-      }
-    }));
-    honeypotResponse.attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendPuzzleCaptcha(
-          captchaTypeBaseParams
-        )
-      )
-    };
-  }
-  return { handled: false, botScore, scoreComponents };
+const require_honeypotResponse = require("./honeypotResponse.cjs");
+let _prosopo_types = require("@prosopo/types");
+//#region src/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.ts
+var handleAccessPolicy = async (input, res) => {
+	if (!input.userAccessPolicy) return {
+		handled: false,
+		botScore: input.botScore,
+		scoreComponents: input.scoreComponents
+	};
+	const { tasks, clientRecord, userAccessPolicy, logger } = input;
+	logger.info(() => ({
+		msg: "User access policy matched",
+		data: {
+			policy: userAccessPolicy,
+			captchaType: userAccessPolicy.captchaType,
+			userScope: input.userScope
+		}
+	}));
+	const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(userAccessPolicy, input.baseBotScore, input.botScore, input.scoreComponents);
+	const botScore = scoreUpdate.score;
+	const scoreComponents = scoreUpdate.scoreComponents;
+	tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+	if (userAccessPolicy.type === "block") {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "block",
+				captchaType: _prosopo_types.CaptchaType.image
+			}
+		}));
+		await tasks.frictionlessManager.registerBlockedSession({
+			solvedImagesCount: clientRecord.settings.imageMaxRounds,
+			userSitekeyIpHash: input.userSitekeyIpHash,
+			reason: _prosopo_types.FrictionlessReason.ACCESS_POLICY_BLOCK,
+			siteKey: input.dapp,
+			ipInfo: input.ipInfo,
+			headers: input.flatHeaders
+		});
+		return {
+			handled: true,
+			response: res.status(401).json({ error: "Unauthorized" })
+		};
+	}
+	const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
+	if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "auto_ban_score",
+				botScore,
+				autoBanThreshold,
+				captchaType: userAccessPolicy.captchaType
+			}
+		}));
+		await tasks.frictionlessManager.registerBlockedSession({
+			solvedImagesCount: clientRecord.settings.imageMaxRounds,
+			userSitekeyIpHash: input.userSitekeyIpHash,
+			reason: _prosopo_types.FrictionlessReason.AUTO_BAN_SCORE,
+			siteKey: input.dapp,
+			ipInfo: input.ipInfo,
+			headers: input.flatHeaders
+		});
+		return {
+			handled: true,
+			response: res.status(401).json({ error: "Unauthorized" })
+		};
+	}
+	const captchaTypeBaseParams = {
+		userSitekeyIpHash: input.userSitekeyIpHash,
+		reason: _prosopo_types.FrictionlessReason.USER_ACCESS_POLICY,
+		siteKey: input.dapp,
+		ipInfo: input.ipInfo,
+		headers: input.flatHeaders
+	};
+	if (userAccessPolicy.captchaType === _prosopo_types.CaptchaType.image) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: _prosopo_types.CaptchaType.image
+			}
+		}));
+		require_honeypotResponse.attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendImageCaptcha({
+				...captchaTypeBaseParams,
+				solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(userAccessPolicy.solvedImagesCount, clientRecord.settings.imageMaxRounds) : clientRecord.settings.imageMaxRounds
+			}))
+		};
+	}
+	if (userAccessPolicy.captchaType === _prosopo_types.CaptchaType.pow) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: _prosopo_types.CaptchaType.pow
+			}
+		}));
+		require_honeypotResponse.attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams))
+		};
+	}
+	if (userAccessPolicy.captchaType === _prosopo_types.CaptchaType.puzzle) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: _prosopo_types.CaptchaType.puzzle
+			}
+		}));
+		require_honeypotResponse.attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendPuzzleCaptcha(captchaTypeBaseParams))
+		};
+	}
+	return {
+		handled: false,
+		botScore,
+		scoreComponents
+	};
 };
+//#endregion
 exports.handleAccessPolicy = handleAccessPolicy;

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/constants.cjs

@@ -1,13 +1,13 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
-const getRoundsFromSimScore = (simScore) => {
-  if (simScore >= 0.9) return 0;
-  if (simScore >= 0.8) return 3;
-  if (simScore >= 0.7) return 4;
-  if (simScore >= 0.6) return 6;
-  if (simScore >= 0.5) return 7;
-  return 8;
+//#region src/api/captcha/getFrictionlessCaptchaChallenge/constants.ts
+var DEFAULT_FRICTIONLESS_THRESHOLD = .5;
+var getRoundsFromSimScore = (simScore) => {
+	if (simScore >= .9) return 0;
+	if (simScore >= .8) return 3;
+	if (simScore >= .7) return 4;
+	if (simScore >= .6) return 6;
+	if (simScore >= .5) return 7;
+	return 8;
 };
+//#endregion
 exports.DEFAULT_FRICTIONLESS_THRESHOLD = DEFAULT_FRICTIONLESS_THRESHOLD;
 exports.getRoundsFromSimScore = getRoundsFromSimScore;