@prosopo/provider 5.15.0 → 5.17.0

package/dist/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.js

@@ -68,6 +68,7 @@ var runConfiguredCaptchaTypeShortCircuit = async (input, res) => {
 		}));
 		case CaptchaType.pow: return res.json(await input.tasks.frictionlessManager.sendPowCaptcha(sessionParams));
 		case CaptchaType.puzzle: return res.json(await input.tasks.frictionlessManager.sendPuzzleCaptcha(sessionParams));
+		case CaptchaType.iconOrder: return res.json(await input.tasks.frictionlessManager.sendIconOrderCaptcha(sessionParams));
 		default: throw new Error(`Unhandled configured captchaType in /frictionless short-circuit: ${configuredType}`);
 	}
 };

package/dist/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.js.map

@@ -1 +1 @@
-{"version":3,"file":"shortCircuit.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,WAAW,EAKX,gBAAgB,GAChB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAE/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAoCvD,MAAM,wBAAwB,GAAG,KAAK,EAAE,KAAwB,EAAE,EAAE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB;QACvC,CAAC,CAAC,CACA,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,8BAA8B,CACnE,KAAK,CAAC,iBAAiB,CACvB,CACD,EAAE,QAAQ;QACZ,CAAC,CAAC,SAAS,CAAC;IACb,OAAO;QAGN,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,cAAc,MAAM,EAAE,EAAE;QAC9C,KAAK,EAAE,CAAC;QAIR,SAAS,EAAE,kBAAkB,CAC5B,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAClD,CAAC,YAAY;QACd,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAqB;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,EAAE;QACrB,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;SAClC,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI;YAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC;KACF,CAAC;AACH,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EACnD,KAAwB,EACxB,GAAa,EACc,EAAE;IAC7B,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,kCAAkC;YAC5C,WAAW,EAAE,WAAW,CAAC,GAAG;SAC5B;KACD,CAAC,CAAC,CAAC;IAEJ,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACnD,MAAM,wBAAwB,CAAC,KAAK,CAAC,CACrC,CACD,CAAC;AACH,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,EACxD,KAAwB,EACxB,GAAa,EACc,EAAE;IAC7B,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC;IAChE,IAAI,CAAC,cAAc,IAAI,cAAc,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAE5D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,QAAQ,EAAE,yBAAyB;YACnC,WAAW,EAAE,cAAc;SAC3B;KACD,CAAC,CAAC,CAAC;IAEJ,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,QAAQ,cAAc,EAAE,CAAC;QACxB,KAAK,WAAW,CAAC,KAAK;YACrB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBACtD,GAAG,aAAa;gBAChB,iBAAiB,EAAE,gBAAgB,CAClC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EACtC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAC3B;aACD,CAAC,CACF,CAAC;QACH,KAAK,WAAW,CAAC,GAAG;YACnB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,aAAa,CAAC,CACnE,CAAC;QACH,KAAK,WAAW,CAAC,MAAM;YACtB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CACtE,CAAC;QACH;YACC,MAAM,IAAI,KAAK,CACd,oEAAoE,cAAc,EAAE,CACpF,CAAC;IACJ,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"shortCircuit.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,WAAW,EAKX,gBAAgB,GAChB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAE/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAoCvD,MAAM,wBAAwB,GAAG,KAAK,EAAE,KAAwB,EAAE,EAAE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB;QACvC,CAAC,CAAC,CACA,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,8BAA8B,CACnE,KAAK,CAAC,iBAAiB,CACvB,CACD,EAAE,QAAQ;QACZ,CAAC,CAAC,SAAS,CAAC;IACb,OAAO;QAGN,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,cAAc,MAAM,EAAE,EAAE;QAC9C,KAAK,EAAE,CAAC;QAIR,SAAS,EAAE,kBAAkB,CAC5B,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAClD,CAAC,YAAY;QACd,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAqB;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,EAAE;QACrB,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;SAClC,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI;YAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC;KACF,CAAC;AACH,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EACnD,KAAwB,EACxB,GAAa,EACc,EAAE;IAC7B,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,kCAAkC;YAC5C,WAAW,EAAE,WAAW,CAAC,GAAG;SAC5B;KACD,CAAC,CAAC,CAAC;IAEJ,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACnD,MAAM,wBAAwB,CAAC,KAAK,CAAC,CACrC,CACD,CAAC;AACH,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,EACxD,KAAwB,EACxB,GAAa,EACc,EAAE;IAC7B,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC;IAChE,IAAI,CAAC,cAAc,IAAI,cAAc,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAE5D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,uBAAuB;QAC5B,IAAI,EAAE;YACL,QAAQ,EAAE,yBAAyB;YACnC,WAAW,EAAE,cAAc;SAC3B;KACD,CAAC,CAAC,CAAC;IAEJ,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,QAAQ,cAAc,EAAE,CAAC;QACxB,KAAK,WAAW,CAAC,KAAK;YACrB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBACtD,GAAG,aAAa;gBAChB,iBAAiB,EAAE,gBAAgB,CAClC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EACtC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAC3B;aACD,CAAC,CACF,CAAC;QACH,KAAK,WAAW,CAAC,GAAG;YACnB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,aAAa,CAAC,CACnE,CAAC;QACH,KAAK,WAAW,CAAC,MAAM;YACtB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CACtE,CAAC;QACH,KAAK,WAAW,CAAC,SAAS;YACzB,OAAO,GAAG,CAAC,IAAI,CACd,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CACzD,aAAa,CACb,CACD,CAAC;QACH;YACC,MAAM,IAAI,KAAK,CACd,oEAAoE,cAAc,EAAE,CACpF,CAAC;IACJ,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/getIconOrderCaptchaChallenge.d.ts

@@ -0,0 +1,5 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+declare const _default: (env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage) => (req: import("express").Request & import("../../express.js").AugmentedRequest, res: import("express").Response, next: import("express").NextFunction) => Promise<void | import("express").Response<any, Record<string, any>>>;
+export default _default;
+//# sourceMappingURL=getIconOrderCaptchaChallenge.d.ts.map

package/dist/api/captcha/getIconOrderCaptchaChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIconOrderCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getIconOrderCaptchaChallenge.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;8BAkFhE,mBAAmB,0BACA,kBAAkB;AAF3C,wBAUI"}

package/dist/api/captcha/getIconOrderCaptchaChallenge.js

@@ -0,0 +1,37 @@
+import { renderIconOrderImages, resolveIconOrderRenderSettings } from "../../tasks/iconOrder/iconOrderRenderer.js";
+import { interactiveChallengeHandler } from "./interactiveCaptchaChallenge.js";
+import { buildIconOrderMaintenanceResponse } from "./maintenanceModeResponses.js";
+import { ApiParams, CaptchaType } from "@prosopo/types";
+//#region src/api/captcha/getIconOrderCaptchaChallenge.ts
+var issueIconOrderChallenge = async ({ tasks, user, dapp, clientSettings, sessionRecord, trafficVerdict, provenance }) => {
+	const challengeVerdict = trafficVerdict.kind === "challenge" ? trafficVerdict : void 0;
+	const tolerance = challengeVerdict?.iconOrderTolerance ?? sessionRecord?.iconOrderTolerance ?? clientSettings?.settings?.iconOrderTolerance;
+	const renderSettings = resolveIconOrderRenderSettings(clientSettings?.settings?.iconOrder, challengeVerdict?.iconOrderSettings ?? sessionRecord?.iconOrder);
+	const challenge = await tasks.iconOrderCaptchaManager.getIconOrderCaptchaChallenge(user, dapp, tolerance, () => renderIconOrderImages(renderSettings));
+	await tasks.db.storeIconOrderCaptchaRecord(challenge.challenge, {
+		requestedAtTimestamp: challenge.requestedAtTimestamp,
+		userAccount: user,
+		dappAccount: dapp
+	}, challenge.targets, challenge.tolerance, challenge.providerSignature, provenance.ipAddress, provenance.headers, provenance.ja4, provenance.sessionId, provenance.ipInfo);
+	return {
+		logData: { tolerance: challenge.tolerance },
+		response: {
+			[ApiParams.status]: "ok",
+			[ApiParams.challenge]: challenge.challenge,
+			[ApiParams.background]: challenge.images.background,
+			[ApiParams.legend]: challenge.images.legend,
+			[ApiParams.legendIconSize]: challenge.images.legendIconSize,
+			[ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
+			[ApiParams.signature]: { [ApiParams.provider]: { [ApiParams.challenge]: challenge.providerSignature } }
+		}
+	};
+};
+var getIconOrderCaptchaChallenge_default = (env, userAccessRulesStorage) => interactiveChallengeHandler(env, userAccessRulesStorage, {
+	captchaType: CaptchaType.iconOrder,
+	label: "icon-order",
+	manager: (tasks) => tasks.iconOrderCaptchaManager,
+	maintenanceResponse: buildIconOrderMaintenanceResponse,
+	issue: issueIconOrderChallenge
+});
+//#endregion
+export { getIconOrderCaptchaChallenge_default as default };

package/dist/api/captcha/getIconOrderCaptchaChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIconOrderCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getIconOrderCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EACN,SAAS,EACT,WAAW,GAEX,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACN,qBAAqB,EACrB,8BAA8B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAGN,2BAA2B,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,+BAA+B,CAAC;AAElF,MAAM,uBAAuB,GAAG,KAAK,EAAE,EACtC,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,GACa,EAEtB,EAAE;IACH,MAAM,gBAAgB,GACrB,cAAc,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAGlE,MAAM,SAAS,GACd,gBAAgB,EAAE,kBAAkB;QACpC,aAAa,EAAE,kBAAkB;QACjC,cAAc,EAAE,QAAQ,EAAE,kBAAkB,CAAC;IAC9C,MAAM,cAAc,GAAG,8BAA8B,CACpD,cAAc,EAAE,QAAQ,EAAE,SAAS,EACnC,gBAAgB,EAAE,iBAAiB,IAAI,aAAa,EAAE,SAAS,CAC/D,CAAC;IAEF,MAAM,SAAS,GACd,MAAM,KAAK,CAAC,uBAAuB,CAAC,4BAA4B,CAC/D,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,GAAG,EAAE,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAC3C,CAAC;IAIH,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CACzC,SAAS,CAAC,SAAS,EACnB;QACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;KACjB,EACD,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,iBAAiB,EAC3B,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,GAAG,EACd,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,MAAM,CACjB,CAAC;IAEF,OAAO;QACN,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;QAC3C,QAAQ,EAAE;YACT,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU;YACnD,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM;YAC3C,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc;YAC3D,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,2BAA2B,CAAC,GAAG,EAAE,sBAAsB,EAAE;IACxD,WAAW,EAAE,WAAW,CAAC,SAAS;IAClC,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,uBAAuB;IACjD,mBAAmB,EAAE,iCAAiC;IACtD,KAAK,EAAE,uBAAuB;CAC9B,CAAC,CAAC"}

package/dist/api/captcha/getImageCaptchaChallenge.js

@@ -1,12 +1,12 @@
-import { validateAddr, validateSiteKey } from "../validateAddress.js";
 import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
 import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
+import { validateAddr, validateSiteKey } from "../validateAddress.js";
 import { Tasks } from "../../tasks/tasks.js";
 import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
 import { isReservedTestSiteKey } from "../testSiteKey.js";
 import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
-import { buildImageMaintenanceResponse } from "./maintenanceModeResponses.js";
 import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
+import { buildImageMaintenanceResponse } from "./maintenanceModeResponses.js";
 import { getSealedAssetsResolver } from "./sealedAssetsResolver.js";
 import { getSignedAssetsResolver } from "./signedAssetsResolver.js";
 import { ProsopoApiError } from "@prosopo/common";

package/dist/api/captcha/getPoWCaptchaChallenge.js

@@ -1,14 +1,14 @@
-import { validateAddr, validateSiteKey } from "../validateAddress.js";
-import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
 import { getCompositeIpAddress } from "../../compositeIpAddress.js";
+import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
 import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
+import { validateAddr, validateSiteKey } from "../validateAddress.js";
 import { Tasks } from "../../tasks/tasks.js";
 import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
 import { isReservedTestSiteKey } from "../testSiteKey.js";
 import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
-import { buildPowMaintenanceResponse } from "./maintenanceModeResponses.js";
-import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
 import { summariseRequestBody } from "../requestBodySummary.js";
+import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
+import { buildPowMaintenanceResponse } from "./maintenanceModeResponses.js";
 import { ProsopoApiError } from "@prosopo/common";
 import { ApiParams, CaptchaType, GetPowCaptchaChallengeRequestBody, SimdReadingsStage } from "@prosopo/types";
 import { flatten } from "@prosopo/util";

package/dist/api/captcha/getPuzzleCaptchaChallenge.d.ts

@@ -1,7 +1,5 @@
 import type { ProviderEnvironment } from "@prosopo/types-env";
 import type { AccessRulesStorage } from "@prosopo/user-access-policy";
-import type { NextFunction, Request, Response } from "express";
-import type { AugmentedRequest } from "../../express.js";
-declare const _default: (env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+declare const _default: (env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage) => (req: import("express").Request & import("../../express.js").AugmentedRequest, res: import("express").Response, next: import("express").NextFunction) => Promise<void | import("express").Response<any, Record<string, any>>>;
 export default _default;
 //# sourceMappingURL=getPuzzleCaptchaChallenge.d.ts.map

package/dist/api/captcha/getPuzzleCaptchaChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPuzzleCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAqBnD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBA8VG"}
+{"version":3,"file":"getPuzzleCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;8BA2JhE,mBAAmB,0BACA,kBAAkB;AAF3C,wBAUI"}

package/dist/api/captcha/getPuzzleCaptchaChallenge.js

@@ -1,144 +1,52 @@
-import { validateAddr, validateSiteKey } from "../validateAddress.js";
-import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
-import { getCompositeIpAddress } from "../../compositeIpAddress.js";
-import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
 import { renderPuzzleImages, resolvePuzzlePieceSize, resolvePuzzleRenderSettings } from "../../tasks/puzzle/puzzleRenderer.js";
-import { Tasks } from "../../tasks/tasks.js";
-import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
-import { isReservedTestSiteKey } from "../testSiteKey.js";
-import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
+import { interactiveChallengeHandler } from "./interactiveCaptchaChallenge.js";
 import { buildPuzzleMaintenanceResponse } from "./maintenanceModeResponses.js";
-import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
-import { summariseRequestBody } from "../requestBodySummary.js";
-import { ProsopoApiError } from "@prosopo/common";
-import { ApiParams, CaptchaType, GetPuzzleCaptchaChallengeRequestBody, SimdReadingsStage } from "@prosopo/types";
-import { flatten } from "@prosopo/util";
+import { isPuzzleImageSwitchAvailable } from "./getFrictionlessCaptchaChallenge/constants.js";
+import { ApiParams, CaptchaType } from "@prosopo/types";
 import { DEFAULT_GEOMETRY } from "@prosopo/puzzle-assets";
 //#region src/api/captcha/getPuzzleCaptchaChallenge.ts
-var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (req, res, next) => {
-	let parsed;
-	try {
-		parsed = GetPuzzleCaptchaChallengeRequestBody.parse(req.body);
-	} catch (err) {
-		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-			context: {
-				code: 400,
-				error: err
-			},
-			i18n: req.i18n,
-			logger: req.logger
+var issuePuzzleChallenge = async ({ tasks, user, dapp, origin, clientSettings, sessionRecord, trafficVerdict, provenance }) => {
+	const challengeVerdict = trafficVerdict.kind === "challenge" ? trafficVerdict : void 0;
+	const tolerance = challengeVerdict?.puzzleTolerance ?? sessionRecord?.puzzleTolerance ?? clientSettings?.settings?.puzzleTolerance;
+	const routedPuzzleSettings = challengeVerdict?.puzzleSettings ?? sessionRecord?.puzzle;
+	const effectivePuzzleSettings = resolvePuzzleRenderSettings(clientSettings?.settings?.puzzle, routedPuzzleSettings);
+	const effectivePieceSize = resolvePuzzlePieceSize(clientSettings?.settings?.puzzle, routedPuzzleSettings);
+	const challenge = await tasks.puzzleCaptchaManager.getPuzzleCaptchaChallenge(user, dapp, origin, tolerance);
+	await tasks.db.storePuzzleCaptchaRecord(challenge.challenge, {
+		requestedAtTimestamp: challenge.requestedAtTimestamp,
+		userAccount: user,
+		dappAccount: dapp
+	}, challenge.targetX, challenge.targetY, challenge.originX, challenge.originY, challenge.tolerance, challenge.providerSignature, provenance.ipAddress, provenance.headers, provenance.ja4, provenance.sessionId, provenance.ipInfo);
+	const images = await renderPuzzleImages({
+		targetX: challenge.targetX,
+		targetY: challenge.targetY
+	}, effectivePuzzleSettings, effectivePieceSize);
+	await tasks.db.updatePuzzleCaptchaRecord(challenge.challenge, { render: {
+		...sessionRecord?.puzzleLevel !== void 0 && { level: sessionRecord.puzzleLevel },
+		pieceSize: images.pieceSize,
+		geometry: {
+			width: DEFAULT_GEOMETRY.width,
+			height: DEFAULT_GEOMETRY.height,
+			notchSize: DEFAULT_GEOMETRY.notchSize
+		},
+		settings: {
+			decoyCount: effectivePuzzleSettings.decoyCount,
+			decoyEdgeDarkness: effectivePuzzleSettings.decoyEdgeDarkness,
+			decoyBodyBrightness: effectivePuzzleSettings.decoyBodyBrightness,
+			holeDarken: effectivePuzzleSettings.holeDarken,
+			decoyHoleDarken: effectivePuzzleSettings.decoyHoleDarken
+		},
+		backgroundSeed: images.backgroundSeed,
+		renderSeed: images.renderSeed
+	} }).catch((updateErr) => {
+		tasks.logger.warn(() => ({
+			err: updateErr,
+			msg: "Failed to patch puzzle render inputs onto the challenge record"
 		}));
-	}
-	const { user, dapp, sessionId, simdReadings } = parsed;
-	validateSiteKey(dapp);
-	validateAddr(user);
-	if (getMaintenanceMode()) {
-		req.logger.info(() => ({
-			msg: "Maintenance mode active - returning dummy puzzle challenge",
-			data: {
-				dapp,
-				user,
-				sessionId
-			}
-		}));
-		return res.json(await buildPuzzleMaintenanceResponse(user, dapp));
-	}
-	if (isReservedTestSiteKey(dapp)) {
-		req.logger.warn(() => ({
-			msg: "Reserved TEST site key - returning dummy puzzle challenge",
-			data: {
-				dapp,
-				user,
-				sessionId
-			}
-		}));
-		return res.json(await buildPuzzleMaintenanceResponse(user, dapp));
-	}
-	const tasks = new Tasks(env, req.logger);
-	try {
-		const clientSettings = await tasks.db.getClientRecord(dapp);
-		if (!clientSettings) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-			context: {
-				code: 400,
-				siteKey: dapp
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const normalizedIp = normalizeRequestIp(req.ip, req.logger);
-		if (!normalizedIp) req.logger.warn(() => ({ msg: "Request missing IP; geoblocking will be skipped" }));
-		const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
-		const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
-		const sessionRecord = sessionId ? await tasks.db.getSessionRecordBySessionId(sessionId) : void 0;
-		const userScope = getRequestUserScope(flatten(req.headers), req.ja4, normalizedIp, user, sessionRecord?.decryptedHeadHash, void 0, countryCode, asn);
-		const userAccessPolicy = (await tasks.puzzleCaptchaManager.getPrioritisedAccessPolicies(userAccessRulesStorage, dapp, userScope, normalizeHeadersForMatching(req.headers))).find((p) => !p.deferToVerify);
-		const { valid, reason, sessionId: validSessionId } = await tasks.puzzleCaptchaManager.isValidRequest(clientSettings, CaptchaType.puzzle, env, sessionId, userAccessPolicy, normalizedIp);
-		if (!valid) return next(new ProsopoApiError(reason || "API.BAD_REQUEST", {
-			context: {
-				code: 400,
-				siteKey: dapp,
-				user
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const origin = req.headers.origin;
-		if (!origin) return next(new ProsopoApiError("API.BAD_REQUEST", {
-			context: {
-				error: "Origin header not found",
-				code: 400,
-				siteKey: dapp,
-				user
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const trafficVerdict = applyTrafficFilterAtRequestTime(req.ipInfo, clientSettings.settings?.trafficFilter, req.logger);
-		const tolerance = (trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleTolerance : void 0) ?? sessionRecord?.puzzleTolerance ?? clientSettings?.settings?.puzzleTolerance;
-		const routedPuzzleSettings = (trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleSettings : void 0) ?? sessionRecord?.puzzle;
-		const effectivePuzzleSettings = resolvePuzzleRenderSettings(clientSettings?.settings?.puzzle, routedPuzzleSettings);
-		const effectivePieceSize = resolvePuzzlePieceSize(clientSettings?.settings?.puzzle, routedPuzzleSettings);
-		const challenge = await tasks.puzzleCaptchaManager.getPuzzleCaptchaChallenge(user, dapp, origin, tolerance);
-		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, SimdReadingsStage.challenge).catch((updateErr) => {
-			req.logger.warn(() => ({
-				err: updateErr,
-				msg: "Failed to patch session with SIMD readings on puzzle challenge"
-			}));
-		});
-		await tasks.db.storePuzzleCaptchaRecord(challenge.challenge, {
-			requestedAtTimestamp: challenge.requestedAtTimestamp,
-			userAccount: user,
-			dappAccount: dapp
-		}, challenge.targetX, challenge.targetY, challenge.originX, challenge.originY, challenge.tolerance, challenge.providerSignature, getCompositeIpAddress(normalizedIp), flatten(req.headers), req.ja4, validSessionId, req.ipInfo);
-		const images = await renderPuzzleImages({
-			targetX: challenge.targetX,
-			targetY: challenge.targetY
-		}, effectivePuzzleSettings, effectivePieceSize);
-		await tasks.db.updatePuzzleCaptchaRecord(challenge.challenge, { render: {
-			...sessionRecord?.puzzleLevel !== void 0 && { level: sessionRecord.puzzleLevel },
-			pieceSize: images.pieceSize,
-			geometry: {
-				width: DEFAULT_GEOMETRY.width,
-				height: DEFAULT_GEOMETRY.height,
-				notchSize: DEFAULT_GEOMETRY.notchSize
-			},
-			settings: {
-				decoyCount: effectivePuzzleSettings.decoyCount,
-				decoyEdgeDarkness: effectivePuzzleSettings.decoyEdgeDarkness,
-				decoyBodyBrightness: effectivePuzzleSettings.decoyBodyBrightness,
-				holeDarken: effectivePuzzleSettings.holeDarken,
-				decoyHoleDarken: effectivePuzzleSettings.decoyHoleDarken
-			},
-			backgroundSeed: images.backgroundSeed,
-			renderSeed: images.renderSeed
-		} }).catch((updateErr) => {
-			req.logger.warn(() => ({
-				err: updateErr,
-				msg: "Failed to patch puzzle render inputs onto the challenge record"
-			}));
-		});
-		const padBytes = trafficVerdict.padBytes;
-		const getPuzzleCaptchaResponse = {
+	});
+	return {
+		logData: { tolerance: challenge.tolerance },
+		response: {
 			[ApiParams.status]: "ok",
 			[ApiParams.challenge]: challenge.challenge,
 			[ApiParams.background]: images.background,
@@ -147,40 +55,17 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 			[ApiParams.originX]: challenge.originX,
 			[ApiParams.originY]: challenge.originY,
 			[ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
-			[ApiParams.signature]: { [ApiParams.provider]: { [ApiParams.challenge]: challenge.providerSignature } }
-		};
-		req.logger.info(() => ({
-			msg: "Puzzle captcha challenge issued",
-			data: {
-				captchaType: CaptchaType.puzzle,
-				challenge: challenge.challenge,
-				tolerance: challenge.tolerance,
-				user,
-				dapp,
-				session: sessionId
-			}
-		}));
-		res.locals.padBytes = padBytes;
-		recordCaptchaIssued(CaptchaType.puzzle);
-		return res.json(getPuzzleCaptchaResponse);
-	} catch (err) {
-		recordCaptchaIssueError(CaptchaType.puzzle);
-		req.logger.error(() => ({
-			err,
-			body: summariseRequestBody(req),
-			msg: "Error in puzzle captcha challenge request"
-		}));
-		return next(new ProsopoApiError("API.BAD_REQUEST", {
-			context: {
-				code: 500,
-				siteKey: req.body.dapp,
-				user: req.body.user,
-				error: err
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-	}
+			[ApiParams.signature]: { [ApiParams.provider]: { [ApiParams.challenge]: challenge.providerSignature } },
+			...isPuzzleImageSwitchAvailable(clientSettings?.settings ?? {}) && { [ApiParams.imageSwitchAvailable]: true }
+		}
+	};
 };
+var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => interactiveChallengeHandler(env, userAccessRulesStorage, {
+	captchaType: CaptchaType.puzzle,
+	label: "puzzle",
+	manager: (tasks) => tasks.puzzleCaptchaManager,
+	maintenanceResponse: buildPuzzleMaintenanceResponse,
+	issue: issuePuzzleChallenge
+});
 //#endregion
 export { getPuzzleCaptchaChallenge_default as default };

package/dist/api/captcha/getPuzzleCaptchaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPuzzleCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACN,SAAS,EACT,WAAW,EACX,oCAAoC,EAGpC,iBAAiB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EACN,mBAAmB,EACnB,2BAA2B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,MAAsD,CAAC;IAE3D,IAAI,CAAC;QACJ,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAKnB,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4DAA4D;YACjE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,8BAA8B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAMD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,2DAA2D;YAChE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,8BAA8B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAId,MAAM,aAAa,GAAG,SAAS;YAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,aAAa,EAAE,iBAAiB,EAChC,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAGF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,oBAAoB,CAAC,4BAA4B,CAC5D,sBAAsB,EACtB,IAAI,EACJ,SAAS,EACT,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CACxC,CACD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAEhC,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,GACzB,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,cAAc,CAClD,cAAc,EACd,WAAW,CAAC,MAAM,EAClB,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAQD,MAAM,cAAc,GAAG,+BAA+B,CACrD,GAAG,CAAC,MAAM,EACV,cAAc,CAAC,QAAQ,EAAE,aAAa,EACtC,GAAG,CAAC,MAAM,CACV,CAAC;QACF,MAAM,sBAAsB,GAC3B,cAAc,CAAC,IAAI,KAAK,WAAW;YAClC,CAAC,CAAC,cAAc,CAAC,eAAe;YAChC,CAAC,CAAC,SAAS,CAAC;QAOd,MAAM,SAAS,GACd,sBAAsB;YACtB,aAAa,EAAE,eAAe;YAC9B,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC;QAM3C,MAAM,qBAAqB,GAC1B,cAAc,CAAC,IAAI,KAAK,WAAW;YAClC,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,oBAAoB,GACzB,qBAAqB,IAAI,aAAa,EAAE,MAAM,CAAC;QAChD,MAAM,uBAAuB,GAAG,2BAA2B,CAC1D,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;QAKF,MAAM,kBAAkB,GAAG,sBAAsB,CAChD,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;QACF,MAAM,SAAS,GACd,MAAM,KAAK,CAAC,oBAAoB,CAAC,yBAAyB,CACzD,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,SAAS,CACT,CAAC;QAEH,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,gEAAgE;iBACrE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC,EAAE,CAAC,wBAAwB,CACtC,SAAS,CAAC,SAAS,EACnB;YACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SACjB,EACD,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,iBAAiB,EAC3B,qBAAqB,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,cAAc,EAId,GAAG,CAAC,MAAM,CACV,CAAC;QAMF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACtC;YACC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;SAC1B,EACD,uBAAuB,EACvB,kBAAkB,CAClB,CAAC;QASF,MAAM,KAAK,CAAC,EAAE;aACZ,yBAAyB,CAAC,SAAS,CAAC,SAAS,EAAE;YAC/C,MAAM,EAAE;gBACP,GAAG,CAAC,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI;oBAC/C,KAAK,EAAE,aAAa,CAAC,WAAW;iBAChC,CAAC;gBACF,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE;oBACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;oBAC7B,MAAM,EAAE,gBAAgB,CAAC,MAAM;oBAC/B,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACrC;gBACD,QAAQ,EAAE;oBACT,UAAU,EAAE,uBAAuB,CAAC,UAAU;oBAC9C,iBAAiB,EAAE,uBAAuB,CAAC,iBAAiB;oBAC5D,mBAAmB,EAAE,uBAAuB,CAAC,mBAAmB;oBAChE,UAAU,EAAE,uBAAuB,CAAC,UAAU;oBAC9C,eAAe,EAAE,uBAAuB,CAAC,eAAe;iBACxD;gBACD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;aAC7B;SACD,CAAC;aACD,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,gEAAgE;aACrE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QAEzC,MAAM,wBAAwB,GAA6B;YAC1D,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU;YACzC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK;YAC/B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,iCAAiC;YACtC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,MAAM;gBAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC/B,mBAAmB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uBAAuB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,2CAA2C;SAChD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"getPuzzleCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACN,SAAS,EACT,WAAW,GAEX,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EAGN,2BAA2B,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAE/E,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACnC,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,GACa,EAEtB,EAAE;IACH,MAAM,gBAAgB,GACrB,cAAc,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAOlE,MAAM,SAAS,GACd,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,eAAe;QAC9B,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC;IAM3C,MAAM,oBAAoB,GACzB,gBAAgB,EAAE,cAAc,IAAI,aAAa,EAAE,MAAM,CAAC;IAC3D,MAAM,uBAAuB,GAAG,2BAA2B,CAC1D,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;IAKF,MAAM,kBAAkB,GAAG,sBAAsB,CAChD,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,yBAAyB,CAC3E,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,SAAS,CACT,CAAC;IAEF,MAAM,KAAK,CAAC,EAAE,CAAC,wBAAwB,CACtC,SAAS,CAAC,SAAS,EACnB;QACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;KACjB,EACD,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,iBAAiB,EAC3B,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,GAAG,EACd,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,MAAM,CACjB,CAAC;IAMF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACtC;QACC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;KAC1B,EACD,uBAAuB,EACvB,kBAAkB,CAClB,CAAC;IAMF,MAAM,KAAK,CAAC,EAAE;SACZ,yBAAyB,CAAC,SAAS,CAAC,SAAS,EAAE;QAC/C,MAAM,EAAE;YACP,GAAG,CAAC,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI;gBAC/C,KAAK,EAAE,aAAa,CAAC,WAAW;aAChC,CAAC;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE;gBACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;gBAC7B,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,SAAS,EAAE,gBAAgB,CAAC,SAAS;aACrC;YACD,QAAQ,EAAE;gBACT,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,iBAAiB,EAAE,uBAAuB,CAAC,iBAAiB;gBAC5D,mBAAmB,EAAE,uBAAuB,CAAC,mBAAmB;gBAChE,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,eAAe,EAAE,uBAAuB,CAAC,eAAe;aACxD;YACD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B;KACD,CAAC;SACD,KAAK,CAAC,CAAC,SAAkB,EAAE,EAAE;QAC7B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,gEAAgE;SACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEJ,OAAO;QACN,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;QAC3C,QAAQ,EAAE;YACT,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU;YACzC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK;YAC/B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;YACD,GAAG,CAAC,4BAA4B,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC,IAAI;gBACnE,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,IAAI;aACtC,CAAC;SACF;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,2BAA2B,CAAC,GAAG,EAAE,sBAAsB,EAAE;IACxD,WAAW,EAAE,WAAW,CAAC,MAAM;IAC/B,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB;IAC9C,mBAAmB,EAAE,8BAA8B;IACnD,KAAK,EAAE,oBAAoB;CAC3B,CAAC,CAAC"}

package/dist/api/captcha/interactiveCaptchaChallenge.d.ts

@@ -0,0 +1,42 @@
+import { type ApiResponse, type CaptchaType, type CompositeIpAddress, type IPInfoResponse, type PoWChallengeId, type RequestHeaders } from "@prosopo/types";
+import type { ClientRecord, ProjectedSession } from "@prosopo/types-database";
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../express.js";
+import type { CaptchaManager } from "../../tasks/captchaManager.js";
+import { Tasks } from "../../tasks/index.js";
+import { type RequestTimeTrafficVerdict } from "./trafficFilterRequestTime.js";
+export interface ChallengeIssueContext {
+    tasks: Tasks;
+    user: string;
+    dapp: string;
+    origin: string;
+    clientSettings: ClientRecord;
+    sessionRecord: ProjectedSession | undefined;
+    trafficVerdict: RequestTimeTrafficVerdict;
+    provenance: {
+        ipAddress: CompositeIpAddress;
+        headers: RequestHeaders;
+        ja4: string;
+        sessionId?: string;
+        ipInfo?: IPInfoResponse;
+    };
+}
+type ChallengeResponse = ApiResponse & {
+    challenge: PoWChallengeId;
+};
+export interface IssuedChallenge<TResponse> {
+    response: TResponse;
+    logData: Readonly<Record<string, number>>;
+}
+export interface InteractiveChallengeSpec<TResponse extends ChallengeResponse> {
+    captchaType: CaptchaType.puzzle | CaptchaType.iconOrder | CaptchaType.audio;
+    label: string;
+    manager: (tasks: Tasks) => CaptchaManager;
+    maintenanceResponse: (user: string, dapp: string) => Promise<TResponse>;
+    issue: (context: ChallengeIssueContext) => Promise<IssuedChallenge<TResponse>>;
+}
+export declare const interactiveChallengeHandler: <TResponse extends ChallengeResponse>(env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage, spec: InteractiveChallengeSpec<TResponse>) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+export {};
+//# sourceMappingURL=interactiveCaptchaChallenge.d.ts.map

package/dist/api/captcha/interactiveCaptchaChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaChallenge.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EAGvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAW7C,OAAO,EACN,KAAK,yBAAyB,EAE9B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,YAAY,CAAC;IAC7B,aAAa,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,cAAc,EAAE,yBAAyB,CAAC;IAE1C,UAAU,EAAE;QACX,SAAS,EAAE,kBAAkB,CAAC;QAC9B,OAAO,EAAE,cAAc,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,cAAc,CAAC;KACxB,CAAC;CACF;AAED,KAAK,iBAAiB,GAAG,WAAW,GAAG;IAAE,SAAS,EAAE,cAAc,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,eAAe,CAAC,SAAS;IACzC,QAAQ,EAAE,SAAS,CAAC;IAEpB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB,CAAC,SAAS,SAAS,iBAAiB;IAC5E,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC;IAE5E,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,cAAc,CAAC;IAC1C,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAExE,KAAK,EAAE,CACN,OAAO,EAAE,qBAAqB,KAC1B,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;CACzC;AAMD,eAAO,MAAM,2BAA2B,GACtC,SAAS,SAAS,iBAAiB,OAC9B,mBAAmB,0BACA,kBAAkB,QACpC,wBAAwB,CAAC,SAAS,CAAC,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY,uDAoOlB,CAAC"}

package/dist/api/captcha/interactiveCaptchaChallenge.js

@@ -0,0 +1,154 @@
+import { getCompositeIpAddress } from "../../compositeIpAddress.js";
+import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
+import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
+import { validateAddr, validateSiteKey } from "../validateAddress.js";
+import { Tasks } from "../../tasks/tasks.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
+import { isReservedTestSiteKey } from "../testSiteKey.js";
+import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
+import { summariseRequestBody } from "../requestBodySummary.js";
+import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
+import { ProsopoApiError } from "@prosopo/common";
+import { GetPuzzleCaptchaChallengeRequestBody, SimdReadingsStage } from "@prosopo/types";
+import { flatten } from "@prosopo/util";
+//#region src/api/captcha/interactiveCaptchaChallenge.ts
+var capitalise = (text) => text.charAt(0).toUpperCase() + text.slice(1);
+/** Request handling shared by the challenge endpoints of the interactive types. */
+var interactiveChallengeHandler = (env, userAccessRulesStorage, spec) => async (req, res, next) => {
+	const { captchaType, label } = spec;
+	let parsed;
+	try {
+		parsed = GetPuzzleCaptchaChallengeRequestBody.parse(req.body);
+	} catch (err) {
+		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	const { user, dapp, sessionId, simdReadings } = parsed;
+	validateSiteKey(dapp);
+	validateAddr(user);
+	if (getMaintenanceMode()) {
+		req.logger.info(() => ({
+			msg: `Maintenance mode active - returning dummy ${label} challenge`,
+			data: {
+				dapp,
+				user,
+				sessionId
+			}
+		}));
+		return res.json(await spec.maintenanceResponse(user, dapp));
+	}
+	if (isReservedTestSiteKey(dapp)) {
+		req.logger.warn(() => ({
+			msg: `Reserved TEST site key - returning dummy ${label} challenge`,
+			data: {
+				dapp,
+				user,
+				sessionId
+			}
+		}));
+		return res.json(await spec.maintenanceResponse(user, dapp));
+	}
+	const tasks = new Tasks(env, req.logger);
+	const manager = spec.manager(tasks);
+	try {
+		const clientSettings = await tasks.db.getClientRecord(dapp);
+		if (!clientSettings) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const normalizedIp = normalizeRequestIp(req.ip, req.logger);
+		if (!normalizedIp) req.logger.warn(() => ({ msg: "Request missing IP; geoblocking will be skipped" }));
+		const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
+		const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
+		const sessionRecord = sessionId ? await tasks.db.getSessionRecordBySessionId(sessionId) : void 0;
+		const userScope = getRequestUserScope(flatten(req.headers), req.ja4, normalizedIp, user, sessionRecord?.decryptedHeadHash, void 0, countryCode, asn);
+		const userAccessPolicy = (await manager.getPrioritisedAccessPolicies(userAccessRulesStorage, dapp, userScope, normalizeHeadersForMatching(req.headers))).find((p) => !p.deferToVerify);
+		const { valid, reason, sessionId: validSessionId } = await manager.isValidRequest(clientSettings, captchaType, env, sessionId, userAccessPolicy, normalizedIp);
+		if (!valid) return next(new ProsopoApiError(reason || "API.BAD_REQUEST", {
+			context: {
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const origin = req.headers.origin;
+		if (!origin) return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				error: "Origin header not found",
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const trafficVerdict = applyTrafficFilterAtRequestTime(req.ipInfo, clientSettings.settings?.trafficFilter, req.logger);
+		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, SimdReadingsStage.challenge).catch((updateErr) => {
+			req.logger.warn(() => ({
+				err: updateErr,
+				msg: `Failed to patch session with SIMD readings on ${label} challenge`
+			}));
+		});
+		const { response, logData } = await spec.issue({
+			tasks,
+			user,
+			dapp,
+			origin,
+			clientSettings,
+			sessionRecord,
+			trafficVerdict,
+			provenance: {
+				ipAddress: getCompositeIpAddress(normalizedIp),
+				headers: flatten(req.headers),
+				ja4: req.ja4,
+				sessionId: validSessionId,
+				ipInfo: req.ipInfo
+			}
+		});
+		req.logger.info(() => ({
+			msg: `${capitalise(label)} captcha challenge issued`,
+			data: {
+				captchaType,
+				challenge: response.challenge,
+				...logData,
+				user,
+				dapp,
+				session: sessionId
+			}
+		}));
+		res.locals.padBytes = trafficVerdict.padBytes;
+		recordCaptchaIssued(captchaType);
+		return res.json(response);
+	} catch (err) {
+		recordCaptchaIssueError(captchaType);
+		req.logger.error(() => ({
+			err,
+			body: summariseRequestBody(req),
+			msg: `Error in ${label} captcha challenge request`
+		}));
+		return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 500,
+				siteKey: req.body.dapp,
+				user: req.body.user,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+};
+//#endregion
+export { interactiveChallengeHandler };

package/dist/api/captcha/interactiveCaptchaChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAIN,oCAAoC,EAKpC,iBAAiB,GACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EACN,mBAAmB,EACnB,2BAA2B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAEN,+BAA+B,GAC/B,MAAM,+BAA+B,CAAC;AAyCvC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAG9C,MAAM,CAAC,MAAM,2BAA2B,GACvC,CACC,GAAwB,EACxB,sBAA0C,EAC1C,IAAyC,EACxC,EAAE,CACJ,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACpC,IAAI,MAAsD,CAAC;IAE3D,IAAI,CAAC;QACJ,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAKnB,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,6CAA6C,KAAK,YAAY;YACnE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAMD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4CAA4C,KAAK,YAAY;YAClE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEpC,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAId,MAAM,aAAa,GAAG,SAAS;YAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,aAAa,EAAE,iBAAiB,EAChC,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAGF,MAAM,gBAAgB,GAAG,CACxB,MAAM,OAAO,CAAC,4BAA4B,CACzC,sBAAsB,EACtB,IAAI,EACJ,SAAS,EACT,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CACxC,CACD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAEhC,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,GACzB,GAAG,MAAM,OAAO,CAAC,cAAc,CAC/B,cAAc,EACd,WAAW,EACX,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAMD,MAAM,cAAc,GAAG,+BAA+B,CACrD,GAAG,CAAC,MAAM,EACV,cAAc,CAAC,QAAQ,EAAE,aAAa,EACtC,GAAG,CAAC,MAAM,CACV,CAAC;QAEF,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,iDAAiD,KAAK,YAAY;iBACvE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAC9C,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,cAAc;YACd,aAAa;YACb,cAAc;YACd,UAAU,EAAE;gBACX,SAAS,EAAE,qBAAqB,CAAC,YAAY,CAAC;gBAC9C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC7B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,SAAS,EAAE,cAAc;gBAIzB,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB;SACD,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,2BAA2B;YACpD,IAAI,EAAE;gBACL,WAAW;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,GAAG,OAAO;gBACV,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QAC9C,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,YAAY,KAAK,4BAA4B;SAClD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}