@prosopo/user-access-policy 3.5.31 → 3.6.0

package/dist/tests/redis/reader/redisRulesQuery.unit.test.js

@@ -0,0 +1,160 @@
+import { describe, expect, it } from "vitest";
+import { getRulesRedisQuery } from "#policy/redis/reader/redisRulesQuery.js";
+import { FilterScopeMatch, } from "#policy/rulesStorage.js";
+describe("getRulesRedisQuery", () => {
+    it("puts ismissing(x) for field x passed in as `undefined` when user scope match is exact", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toBe("( ( @numericIp:[100 100] | ( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[100 +inf] ) ) @ja4Hash:{ja4Hash} ismissing(@userAgentHash) )");
+    });
+    it("puts ismissing(x) for field x passed in as `undefined` when user scope match is exact and for missing fields when matchingFieldsOnly is set", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, true);
+        expect(query).toBe("( ( @numericIp:[100 100] | ( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[100 +inf] ) ) @ja4Hash:{ja4Hash} ismissing(@userAgentHash) ismissing(@userId) ismissing(@headersHash) ismissing(@headHash) ismissing(@coords) )");
+    });
+    it("puts ismissing(x) for multiple fields passed in as `undefined` when user scope match is exact", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+                headersHash: undefined,
+                userId: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toBe("( ( @numericIp:[100 100] | ( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[100 +inf] ) ) @ja4Hash:{ja4Hash} ismissing(@userAgentHash) ismissing(@headersHash) ismissing(@userId) )");
+    });
+    it("does not put ismissing(x) for multiple fields passed in as `undefined` when user scope match is greedy", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+                headersHash: undefined,
+                userId: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Greedy,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toBe("( ( @numericIp:[100 100] | ( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[100 +inf] ) ) | @ja4Hash:{ja4Hash} )");
+    });
+    it("puts ismissing(x) for multiple fields passed in as `undefined` when user scope match is exact 2", () => {
+        const filter = {
+            userScope: {
+                numericIp: undefined,
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+                headersHash: undefined,
+                userId: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toBe("( ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax) @ja4Hash:{ja4Hash} ismissing(@userAgentHash) ismissing(@headersHash) ismissing(@userId) )");
+    });
+    it("does not put ismissing(numericIpMaskMin) and does not put ismissing(numericIpMaskMax) when numericIp is passed in", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+                headersHash: undefined,
+                userId: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, true);
+        expect(query).toBe("( ( @numericIp:[100 100] | ( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[100 +inf] ) ) @ja4Hash:{ja4Hash} ismissing(@userAgentHash) ismissing(@headersHash) ismissing(@userId) ismissing(@headHash) ismissing(@coords) )");
+    });
+    it("does not put ismissing(numericIp) when numericIpMaskMin and numericIpMaskMax are passed in", () => {
+        const filter = {
+            userScope: {
+                numericIpMaskMin: BigInt(100),
+                numericIpMaskMax: BigInt(200),
+                ja4Hash: "ja4Hash",
+                userAgentHash: undefined,
+                headersHash: undefined,
+                userId: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, true);
+        expect(query).toBe("( @numericIpMaskMin:[-inf 100] @numericIpMaskMax:[200 +inf] @ja4Hash:{ja4Hash} ismissing(@userAgentHash) ismissing(@headersHash) ismissing(@userId) ismissing(@headHash) ismissing(@coords) )");
+    });
+    it("includes headHash in query when provided", () => {
+        const filter = {
+            userScope: {
+                headHash: "abc123def456",
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toBe("( @headHash:{abc123def456} )");
+    });
+    it("includes coords in query when provided with escaped special characters", () => {
+        const filter = {
+            userScope: {
+                coords: "[[[100,200]]]",
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toContain("@coords:{\\[\\[\\[100\\,200\\]\\]\\]}");
+    });
+    it("includes both headHash and coords when both provided", () => {
+        const filter = {
+            userScope: {
+                headHash: "abc123def456",
+                coords: "[[[100,200]]]",
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toContain("@headHash:{abc123def456}");
+        expect(query).toContain("@coords:{\\[\\[\\[100\\,200\\]\\]\\]}");
+    });
+    it("puts ismissing(headHash) and ismissing(coords) when not provided and matchingFieldsOnly is true", () => {
+        const filter = {
+            userScope: {
+                ja4Hash: "ja4Hash",
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, true);
+        expect(query).toContain("ismissing(@headHash)");
+        expect(query).toContain("ismissing(@coords)");
+    });
+    it("combines headHash with other fields correctly in exact match", () => {
+        const filter = {
+            userScope: {
+                numericIp: BigInt(100),
+                ja4Hash: "ja4Hash",
+                headHash: "abc123def456",
+                userAgentHash: undefined,
+            },
+            userScopeMatch: FilterScopeMatch.Exact,
+        };
+        const query = getRulesRedisQuery(filter, false);
+        expect(query).toContain("@numericIp:[100 100]");
+        expect(query).toContain("@ja4Hash:{ja4Hash}");
+        expect(query).toContain("@headHash:{abc123def456}");
+        expect(query).toContain("ismissing(@userAgentHash)");
+    });
+});
+//# sourceMappingURL=redisRulesQuery.unit.test.js.map

package/dist/tests/redis/reader/redisRulesQuery.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesQuery.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/redis/reader/redisRulesQuery.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAEN,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AAEjC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAChG,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;aACxB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,2IAA2I,CAC3I,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6IAA6I,EAAE,GAAG,EAAE;QACtJ,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;aACxB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,8NAA8N,CAC9N,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACxG,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;gBACxB,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,SAAS;aACjB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,sLAAsL,CACtL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QACjH,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;gBACxB,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,SAAS;aACjB;YACD,cAAc,EAAE,gBAAgB,CAAC,MAAM;SAClB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,mHAAmH,CACnH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QAC1G,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;gBACxB,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,SAAS;aACjB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,6KAA6K,CAC7K,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mHAAmH,EAAE,GAAG,EAAE;QAC5H,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;gBACxB,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,SAAS;aACjB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,8NAA8N,CAC9N,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACrG,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC;gBAC7B,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,SAAS;gBACxB,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,SAAS;aACjB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,+LAA+L,CAC/L,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,QAAQ,EAAE,cAAc;aACxB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QACjF,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,MAAM,EAAE,eAAe;aACvB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAGhD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,eAAe;aACvB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QAC1G,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,OAAO,EAAE,SAAS;aAClB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG;YACd,SAAS,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,cAAc;gBACxB,aAAa,EAAE,SAAS;aACxB;YACD,cAAc,EAAE,gBAAgB,CAAC,KAAK;SACjB,CAAC;QAEvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/redis/redisRulesStorage.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=redisRulesStorage.integration.test.d.ts.map

package/dist/tests/redis/redisRulesStorage.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesStorage.integration.test.d.ts","sourceRoot":"","sources":["../../../src/tests/redis/redisRulesStorage.integration.test.ts"],"names":[],"mappings":""}