@prosopo/provider 4.15.14 → 4.15.15

package/dist/cjs/api/captcha/getPoWCaptchaChallenge.cjs

@@ -1,201 +1,132 @@
-"use strict";
-const common = require("@prosopo/common");
-const types = require("@prosopo/types");
-const util = require("@prosopo/util");
-const compositeIpAddress = require("../../compositeIpAddress.cjs");
-require("../../tasks/index.cjs");
-const normalizeRequestIp = require("../../utils/normalizeRequestIp.cjs");
-const apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
-const blacklistRequestInspector = require("../blacklistRequestInspector.cjs");
-const metrics = require("../metrics.cjs");
-const validateAddress = require("../validateAddress.cjs");
-const maintenanceModeResponses = require("./maintenanceModeResponses.cjs");
-const tasks = require("../../tasks/tasks.cjs");
-const getPoWCaptchaChallenge = (env, userAccessRulesStorage) => async (req, res, next) => {
-  let parsed;
-  try {
-    parsed = types.GetPowCaptchaChallengeRequestBody.parse(req.body);
-  } catch (err) {
-    return next(
-      new common.ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-        context: { code: 400, error: err },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
-  const { user, dapp, sessionId, simdReadings } = parsed;
-  validateAddress.validateSiteKey(dapp);
-  validateAddress.validateAddr(user);
-  if (apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) {
-    req.logger.info(() => ({
-      msg: "Maintenance mode active - returning dummy PoW challenge",
-      data: { dapp, user, sessionId }
-    }));
-    return res.json(maintenanceModeResponses.buildPowMaintenanceResponse(user, dapp));
-  }
-  const tasks$1 = new tasks.Tasks(env, req.logger);
-  try {
-    const clientSettings = await tasks$1.db.getClientRecord(dapp);
-    if (!clientSettings) {
-      return next(
-        new common.ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-          context: { code: 400, siteKey: dapp },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const normalizedIp = normalizeRequestIp.normalizeRequestIp(req.ip, req.logger);
-    if (!normalizedIp) {
-      req.logger.warn(() => ({
-        msg: "Request missing IP; geoblocking will be skipped"
-      }));
-    }
-    const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
-    const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
-    const userScope = blacklistRequestInspector.getRequestUserScope(
-      util.flatten(req.headers),
-      req.ja4,
-      normalizedIp,
-      user,
-      void 0,
-      // headHash
-      void 0,
-      // coords
-      countryCode,
-      asn
-    );
-    const userAccessPolicy = (await tasks$1.powCaptchaManager.getPrioritisedAccessPolicies(
-      userAccessRulesStorage,
-      dapp,
-      userScope
-    )).find((p) => !p.deferToVerify);
-    const {
-      valid,
-      reason,
-      sessionId: validSessionId,
-      powDifficulty
-    } = await tasks$1.powCaptchaManager.isValidRequest(
-      clientSettings,
-      types.CaptchaType.pow,
-      env,
-      sessionId,
-      userAccessPolicy,
-      normalizedIp
-    );
-    if (!valid) {
-      return next(
-        new common.ProsopoApiError(reason || "API.BAD_REQUEST", {
-          context: {
-            code: 400,
-            siteKey: dapp,
-            user
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const origin = req.headers.origin;
-    if (!origin) {
-      return next(
-        new common.ProsopoApiError("API.BAD_REQUEST", {
-          context: {
-            error: "Origin header not found",
-            code: 400,
-            siteKey: dapp,
-            user
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const difficulty = powDifficulty || userAccessPolicy?.powDifficulty || clientSettings?.settings?.powDifficulty;
-    const challenge = await tasks$1.powCaptchaManager.getPowCaptchaChallenge(
-      user,
-      dapp,
-      origin,
-      difficulty
-    );
-    if (validSessionId && simdReadings) {
-      await tasks$1.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(
-        validSessionId,
-        simdReadings,
-        types.SimdReadingsStage.challenge
-      ).catch((updateErr) => {
-        req.logger.warn(() => ({
-          err: updateErr,
-          msg: "Failed to patch session with SIMD readings on PoW challenge"
-        }));
-      });
-    }
-    await tasks$1.db.storePowCaptchaRecord(
-      challenge.challenge,
-      {
-        requestedAtTimestamp: challenge.requestedAtTimestamp,
-        userAccount: user,
-        dappAccount: dapp
-      },
-      challenge.difficulty,
-      challenge.providerSignature,
-      compositeIpAddress.getCompositeIpAddress(normalizedIp),
-      util.flatten(req.headers),
-      req.ja4,
-      validSessionId,
-      void 0,
-      void 0,
-      void 0,
-      // Persist the full ipinfo payload — consumers (portal,
-      // anomaly detection, CHECK_IP_INFO backfill) read the
-      // individual flags off this object instead of separate
-      // flat fields.
-      req.ipInfo
-    );
-    const getPowCaptchaResponse = {
-      [types.ApiParams.status]: "ok",
-      [types.ApiParams.challenge]: challenge.challenge,
-      [types.ApiParams.difficulty]: challenge.difficulty,
-      [types.ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
-      [types.ApiParams.signature]: {
-        [types.ApiParams.provider]: {
-          [types.ApiParams.challenge]: challenge.providerSignature
-        }
-      }
-    };
-    req.logger.info(() => ({
-      msg: "PoW captcha challenge issued",
-      data: {
-        captchaType: types.CaptchaType.pow,
-        challenge: challenge.challenge,
-        difficulty: challenge.difficulty,
-        user,
-        dapp,
-        session: sessionId
-      }
-    }));
-    metrics.recordCaptchaIssued(types.CaptchaType.pow);
-    return res.json(getPowCaptchaResponse);
-  } catch (err) {
-    metrics.recordCaptchaIssueError(types.CaptchaType.pow);
-    req.logger.error(() => ({
-      err,
-      body: req.body,
-      msg: "Error in PoW captcha challenge request"
-    }));
-    return next(
-      new common.ProsopoApiError("API.BAD_REQUEST", {
-        context: {
-          code: 500,
-          siteKey: req.body.dapp,
-          user: req.body.user,
-          error: err
-        },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
+const require_validateAddress = require("../validateAddress.cjs");
+const require_compositeIpAddress = require("../../compositeIpAddress.cjs");
+const require_metrics = require("../metrics.cjs");
+const require_blacklistRequestInspector = require("../blacklistRequestInspector.cjs");
+const require_tasks = require("../../tasks/tasks.cjs");
+const require_apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
+const require_normalizeRequestIp = require("../../utils/normalizeRequestIp.cjs");
+const require_maintenanceModeResponses = require("./maintenanceModeResponses.cjs");
+let _prosopo_common = require("@prosopo/common");
+let _prosopo_types = require("@prosopo/types");
+let _prosopo_util = require("@prosopo/util");
+//#region src/api/captcha/getPoWCaptchaChallenge.ts
+var getPoWCaptchaChallenge_default = (env, userAccessRulesStorage) => async (req, res, next) => {
+	let parsed;
+	try {
+		parsed = _prosopo_types.GetPowCaptchaChallengeRequestBody.parse(req.body);
+	} catch (err) {
+		return next(new _prosopo_common.ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	const { user, dapp, sessionId, simdReadings } = parsed;
+	require_validateAddress.validateSiteKey(dapp);
+	require_validateAddress.validateAddr(user);
+	if (require_apiToggleMaintenanceModeEndpoint.getMaintenanceMode()) {
+		req.logger.info(() => ({
+			msg: "Maintenance mode active - returning dummy PoW challenge",
+			data: {
+				dapp,
+				user,
+				sessionId
+			}
+		}));
+		return res.json(require_maintenanceModeResponses.buildPowMaintenanceResponse(user, dapp));
+	}
+	const tasks = new require_tasks.Tasks(env, req.logger);
+	try {
+		const clientSettings = await tasks.db.getClientRecord(dapp);
+		if (!clientSettings) return next(new _prosopo_common.ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const normalizedIp = require_normalizeRequestIp.normalizeRequestIp(req.ip, req.logger);
+		if (!normalizedIp) req.logger.warn(() => ({ msg: "Request missing IP; geoblocking will be skipped" }));
+		const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
+		const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
+		const userScope = require_blacklistRequestInspector.getRequestUserScope((0, _prosopo_util.flatten)(req.headers), req.ja4, normalizedIp, user, void 0, void 0, countryCode, asn);
+		const userAccessPolicy = (await tasks.powCaptchaManager.getPrioritisedAccessPolicies(userAccessRulesStorage, dapp, userScope)).find((p) => !p.deferToVerify);
+		const { valid, reason, sessionId: validSessionId, powDifficulty } = await tasks.powCaptchaManager.isValidRequest(clientSettings, _prosopo_types.CaptchaType.pow, env, sessionId, userAccessPolicy, normalizedIp);
+		if (!valid) return next(new _prosopo_common.ProsopoApiError(reason || "API.BAD_REQUEST", {
+			context: {
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const origin = req.headers.origin;
+		if (!origin) return next(new _prosopo_common.ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				error: "Origin header not found",
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const difficulty = powDifficulty || userAccessPolicy?.powDifficulty || clientSettings?.settings?.powDifficulty;
+		const challenge = await tasks.powCaptchaManager.getPowCaptchaChallenge(user, dapp, origin, difficulty);
+		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, _prosopo_types.SimdReadingsStage.challenge).catch((updateErr) => {
+			req.logger.warn(() => ({
+				err: updateErr,
+				msg: "Failed to patch session with SIMD readings on PoW challenge"
+			}));
+		});
+		await tasks.db.storePowCaptchaRecord(challenge.challenge, {
+			requestedAtTimestamp: challenge.requestedAtTimestamp,
+			userAccount: user,
+			dappAccount: dapp
+		}, challenge.difficulty, challenge.providerSignature, require_compositeIpAddress.getCompositeIpAddress(normalizedIp), (0, _prosopo_util.flatten)(req.headers), req.ja4, validSessionId, void 0, void 0, void 0, req.ipInfo);
+		const getPowCaptchaResponse = {
+			[_prosopo_types.ApiParams.status]: "ok",
+			[_prosopo_types.ApiParams.challenge]: challenge.challenge,
+			[_prosopo_types.ApiParams.difficulty]: challenge.difficulty,
+			[_prosopo_types.ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
+			[_prosopo_types.ApiParams.signature]: { [_prosopo_types.ApiParams.provider]: { [_prosopo_types.ApiParams.challenge]: challenge.providerSignature } }
+		};
+		req.logger.info(() => ({
+			msg: "PoW captcha challenge issued",
+			data: {
+				captchaType: _prosopo_types.CaptchaType.pow,
+				challenge: challenge.challenge,
+				difficulty: challenge.difficulty,
+				user,
+				dapp,
+				session: sessionId
+			}
+		}));
+		require_metrics.recordCaptchaIssued(_prosopo_types.CaptchaType.pow);
+		return res.json(getPowCaptchaResponse);
+	} catch (err) {
+		require_metrics.recordCaptchaIssueError(_prosopo_types.CaptchaType.pow);
+		req.logger.error(() => ({
+			err,
+			body: req.body,
+			msg: "Error in PoW captcha challenge request"
+		}));
+		return next(new _prosopo_common.ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 500,
+				siteKey: req.body.dapp,
+				user: req.body.user,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
 };
-module.exports = getPoWCaptchaChallenge;
+//#endregion
+exports.default = getPoWCaptchaChallenge_default;