perimeterx-js-core 0.1.0

package/lib/risk_api/PostRiskApiClient.js

@@ -0,0 +1,232 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PostRiskApiClient = void 0;
+var risk_token_1 = require("../risk_token");
+var http_1 = require("../http");
+var utils_1 = require("../utils");
+var S2SCallReason_1 = require("./S2SCallReason");
+var S2SErrorHandler_1 = require("./S2SErrorHandler");
+var constants_1 = require("./constants");
+var PostRiskApiClient = /** @class */ (function () {
+    function PostRiskApiClient(config, httpClient, riskResponseHandler) {
+        this.config = config;
+        this.httpClient = httpClient;
+        this.riskResponseHandler = riskResponseHandler;
+        this.s2sErrorHandler = new S2SErrorHandler_1.S2SErrorHandler();
+    }
+    PostRiskApiClient.prototype.shouldRetrieveScore = function (context) {
+        if (context.riskApiData.s2sCallReason) {
+            if (context.riskApiData.s2sCallReason === S2SCallReason_1.S2SCallReason.NO_COOKIE && context.pxhd) {
+                context.riskApiData.s2sCallReason = S2SCallReason_1.S2SCallReason.NO_COOKIE_WITH_VID;
+            }
+            this.unsetScoreFields(context);
+            return true;
+        }
+        if (context.passReason) {
+            if (context.isSensitiveRequest && context.passReason === utils_1.PassReason.COOKIE) {
+                context.riskApiData.s2sCallReason = S2SCallReason_1.S2SCallReason.SENSITIVE_ROUTE;
+                this.unsetScoreFields(context);
+                return true;
+            }
+            return false;
+        }
+        if (context.blockReason) {
+            return false;
+        }
+        context.riskApiData.s2sCallReason = context.pxhd ? S2SCallReason_1.S2SCallReason.NO_COOKIE_WITH_VID : S2SCallReason_1.S2SCallReason.NO_COOKIE;
+        this.unsetScoreFields(context);
+        return true;
+    };
+    PostRiskApiClient.prototype.unsetScoreFields = function (context) {
+        context.passReason = undefined;
+        context.blockReason = undefined;
+        context.score = undefined;
+    };
+    PostRiskApiClient.prototype.retrieveScore = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var response, riskResponse, riskActivity, err_1;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _a.trys.push([0, 6, , 8]);
+                        riskActivity = this.createRiskActivity(context);
+                        return [4 /*yield*/, this.sendRiskActivity(context, riskActivity)];
+                    case 1:
+                        response = _a.sent();
+                        if (!((response === null || response === void 0 ? void 0 : response.status) !== 200)) return [3 /*break*/, 3];
+                        return [4 /*yield*/, this.s2sErrorHandler.handleS2SError(context, response, null, null)];
+                    case 2:
+                        _a.sent();
+                        return [2 /*return*/, false];
+                    case 3: return [4 /*yield*/, response.readBody()];
+                    case 4:
+                        riskResponse = (_a.sent());
+                        return [4 /*yield*/, this.riskResponseHandler.handleRiskResponse(context, response, riskResponse)];
+                    case 5:
+                        _a.sent();
+                        return [2 /*return*/, true];
+                    case 6:
+                        err_1 = _a.sent();
+                        this.config.logger.error("Caught error on Risk API: ".concat(err_1));
+                        return [4 /*yield*/, this.s2sErrorHandler.handleS2SError(context, response, riskResponse, err_1)];
+                    case 7:
+                        _a.sent();
+                        return [2 /*return*/, false];
+                    case 8: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    PostRiskApiClient.prototype.createRiskActivity = function (context) {
+        var riskActivity = {
+            request: {
+                ip: context.requestData.ip,
+                headers: this.formatRiskHeadersField(context.requestData.headers),
+                url: context.requestData.url.href,
+            },
+            additional: {
+                s2s_call_reason: context.riskApiData.s2sCallReason,
+                module_version: this.config.moduleVersion,
+                http_method: context.requestData.method,
+                http_version: context.requestData.httpVersion,
+                risk_mode: context.isMonitoredRequest ? utils_1.ModuleMode.MONITOR : utils_1.ModuleMode.ACTIVE_BLOCKING,
+                cookie_origin: context.tokenOrigin || risk_token_1.TokenOrigin.COOKIE,
+                request_cookie_names: context.requestData.requestCookieNames,
+                request_id: context.requestId,
+            },
+        };
+        this.addOptionalRiskFields(riskActivity, context);
+        return riskActivity;
+    };
+    PostRiskApiClient.prototype.addOptionalRiskFields = function (riskActivity, context) {
+        this.addOptionalRiskFieldsToRoot(riskActivity, context);
+        this.addOptionalRiskFieldsToAdditional(riskActivity, context);
+        this.addCookieRiskFieldsToAdditional(riskActivity, context);
+        this.addCustomParamsToAdditional(riskActivity, context);
+    };
+    PostRiskApiClient.prototype.addOptionalRiskFieldsToRoot = function (riskActivity, context) {
+        (0, utils_1.transferExistingProperties)(context, riskActivity, {
+            vid: 'vid',
+            uuid: 'uuid',
+            pxhd: 'pxhd',
+        });
+    };
+    PostRiskApiClient.prototype.addOptionalRiskFieldsToAdditional = function (riskActivity, context) {
+        (0, utils_1.transferExistingProperties)(context, riskActivity.additional, {
+            vidSource: 'enforcer_vid_source',
+        });
+        (0, utils_1.transferExistingProperties)(context.serverData, riskActivity.additional, {
+            region: 'server_info_region',
+        });
+        (0, utils_1.transferExistingProperties)(context.mobileData, riskActivity.additional, {
+            originalToken: 'original_token',
+            originalTokenError: 'original_token_error',
+            decodedOriginalToken: 'px_decoded_original_token',
+        });
+        (0, utils_1.transferExistingProperties)(context.tlsData, riskActivity.additional, {
+            tlsProtocol: 'tls_protocol',
+            tlsServer: 'tls_server',
+            tlsCipher: 'tls_cipher',
+            tlsCiphersSha: 'tls_ciphers_sha',
+            tlsExtensionSha: 'tls_extension_sha',
+            tlsPreferredCiphers: 'tls_preferred_ciphers',
+            tlsJa3Fingerprint: 'tls_ja3_fingerprint',
+        });
+    };
+    PostRiskApiClient.prototype.addCustomParamsToAdditional = function (riskActivity, context) {
+        if (context.customParameters) {
+            Object.assign(riskActivity.additional, context.customParameters);
+        }
+    };
+    PostRiskApiClient.prototype.addCookieRiskFieldsToAdditional = function (riskActivity, _a) {
+        var riskToken = _a.riskToken;
+        if (riskToken) {
+            riskActivity.additional.px_orig_cookie = riskToken.getCookieString();
+            if (riskToken.isValid()) {
+                riskActivity.additional.px_cookie = riskToken.getPayloadString();
+                riskActivity.additional.px_cookie_hmac = riskToken.hmac;
+            }
+        }
+    };
+    PostRiskApiClient.prototype.formatRiskHeadersField = function (headers) {
+        var headerEntries = [];
+        (0, utils_1.removeSensitiveHeaders)(headers, this.config.sensitiveHeaders).forEach(function (values, name) {
+            values.forEach(function (value) {
+                headerEntries.push({ name: name, value: value });
+            });
+        });
+        return headerEntries;
+    };
+    PostRiskApiClient.prototype.sendRiskActivity = function (context, riskActivity) {
+        return __awaiter(this, void 0, void 0, function () {
+            var url, headers, body, method, riskRequest, startTime, response, endTime;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        url = this.getRiskUrl();
+                        headers = this.getRiskHeaders();
+                        body = JSON.stringify(riskActivity);
+                        method = http_1.HttpMethod.POST;
+                        riskRequest = new http_1.DefaultHttpRequest(url, { headers: headers, method: method, body: body });
+                        this.config.logger.debug("sending risk api to ".concat(url));
+                        startTime = Date.now();
+                        return [4 /*yield*/, this.httpClient.send(riskRequest)];
+                    case 1:
+                        response = _a.sent();
+                        endTime = Date.now();
+                        context.riskApiData.madeApiCall = true;
+                        context.riskApiData.riskRtt = endTime - startTime;
+                        return [2 /*return*/, response];
+                }
+            });
+        });
+    };
+    PostRiskApiClient.prototype.getRiskUrl = function () {
+        return "".concat(this.config.backendScoreApiUrl).concat(constants_1.RISK_API_ENDPOINT);
+    };
+    PostRiskApiClient.prototype.getRiskHeaders = function () {
+        var _a;
+        return new http_1.HttpHeaders((_a = {},
+            _a[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.APPLICATION_JSON],
+            _a[http_1.AUTHORIZATION_HEADER_NAME] = [(0, utils_1.getAuthorizationHeader)(this.config.authToken)],
+            _a));
+    };
+    return PostRiskApiClient;
+}());
+exports.PostRiskApiClient = PostRiskApiClient;

package/lib/risk_api/S2SCallReason.d.ts

@@ -0,0 +1,12 @@
+export declare enum S2SCallReason {
+    COOKIE_EXPIRED = "cookie_expired",
+    COOKIE_DECRYPTION_FAILED = "cookie_decryption_failed",
+    COOKIE_VALIDATION_FAILED = "cookie_validation_failed",
+    NO_COOKIE_WITH_VID = "no_cookie_w_vid",
+    NO_COOKIE = "no_cookie",
+    SENSITIVE_ROUTE = "sensitive_route",
+    MOBILE_ERROR_NO_COOKIE = "mobile_error_1",
+    MOBILE_ERROR_CONNECTION_ERROR = "mobile_error_2",
+    MOBILE_ERROR_CERTIFICATE_PINNING_ERROR = "mobile_error_3",
+    MOBILE_ERROR_BYPASS = "mobile_error_4"
+}

package/lib/risk_api/S2SCallReason.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S2SCallReason = void 0;
+var S2SCallReason;
+(function (S2SCallReason) {
+    S2SCallReason["COOKIE_EXPIRED"] = "cookie_expired";
+    S2SCallReason["COOKIE_DECRYPTION_FAILED"] = "cookie_decryption_failed";
+    S2SCallReason["COOKIE_VALIDATION_FAILED"] = "cookie_validation_failed";
+    S2SCallReason["NO_COOKIE_WITH_VID"] = "no_cookie_w_vid";
+    S2SCallReason["NO_COOKIE"] = "no_cookie";
+    S2SCallReason["SENSITIVE_ROUTE"] = "sensitive_route";
+    S2SCallReason["MOBILE_ERROR_NO_COOKIE"] = "mobile_error_1";
+    S2SCallReason["MOBILE_ERROR_CONNECTION_ERROR"] = "mobile_error_2";
+    S2SCallReason["MOBILE_ERROR_CERTIFICATE_PINNING_ERROR"] = "mobile_error_3";
+    S2SCallReason["MOBILE_ERROR_BYPASS"] = "mobile_error_4";
+})(S2SCallReason = exports.S2SCallReason || (exports.S2SCallReason = {}));

package/lib/risk_api/S2SErrorHandler.d.ts

@@ -0,0 +1,9 @@
+import { IContext } from '../context';
+import { IHttpResponse } from '../http';
+import { RiskResponseV2 } from './model/RiskResponseV2';
+import { RiskResponseV3 } from './model/RiskResponseV3';
+export declare class S2SErrorHandler {
+    handleS2SError(context: IContext, response?: IHttpResponse, responseBody?: RiskResponseV2 | RiskResponseV3, exception?: Error): Promise<void>;
+    private enrichS2SErrorWithResponse;
+    private enrichS2SErrorWithException;
+}

package/lib/risk_api/S2SErrorHandler.js

@@ -0,0 +1,121 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S2SErrorHandler = void 0;
+var utils_1 = require("../utils");
+var S2SErrorReason_1 = require("./S2SErrorReason");
+var RiskStatus_1 = require("./model/RiskStatus");
+var S2SErrorHandler = /** @class */ (function () {
+    function S2SErrorHandler() {
+    }
+    S2SErrorHandler.prototype.handleS2SError = function (context, response, responseBody, exception) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        context.passReason = utils_1.PassReason.S2S_ERROR;
+                        context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.UNKNOWN_ERROR;
+                        if (!(response || responseBody)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.enrichS2SErrorWithResponse(context, response, responseBody)];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2:
+                        if (exception) {
+                            this.enrichS2SErrorWithException(context, exception);
+                        }
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    S2SErrorHandler.prototype.enrichS2SErrorWithResponse = function (context, response, responseBody) {
+        return __awaiter(this, void 0, void 0, function () {
+            var message, _a, _b, e_1;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0:
+                        _c.trys.push([0, 4, , 5]);
+                        _a = "response body: ".concat;
+                        if (!responseBody) return [3 /*break*/, 1];
+                        _b = JSON.stringify(responseBody);
+                        return [3 /*break*/, 3];
+                    case 1: return [4 /*yield*/, response.readBody()];
+                    case 2:
+                        _b = _c.sent();
+                        _c.label = 3;
+                    case 3:
+                        message = _a.apply("response body: ", [_b]);
+                        return [3 /*break*/, 5];
+                    case 4:
+                        e_1 = _c.sent();
+                        message = "error: ".concat(e_1, ", response body: ").concat(responseBody ? JSON.stringify(responseBody) : 'empty');
+                        return [3 /*break*/, 5];
+                    case 5:
+                        context.riskApiData.errorMessage = message;
+                        context.riskApiData.s2sErrorHttpStatus = response.status;
+                        if (response.status >= 400 && response.status < 500) {
+                            context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.BAD_REQUEST;
+                        }
+                        else if (response.status >= 500 && response.status < 600) {
+                            context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.SERVER_ERROR;
+                        }
+                        else if (response.status === 200) {
+                            if ((responseBody === null || responseBody === void 0 ? void 0 : responseBody.status) === RiskStatus_1.RiskStatus.FAILURE) {
+                                context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.REQUEST_FAILED_ON_SERVER;
+                            }
+                            else {
+                                context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.INVALID_RESPONSE;
+                            }
+                        }
+                        if (responseBody === null || responseBody === void 0 ? void 0 : responseBody.uuid) {
+                            context.uuid = responseBody.uuid;
+                        }
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    S2SErrorHandler.prototype.enrichS2SErrorWithException = function (context, exception) {
+        var errorMessage = "encountered error ".concat(exception);
+        var existingMessage = context.riskApiData.errorMessage;
+        context.riskApiData.errorMessage = existingMessage ? "".concat(existingMessage, ", ").concat(errorMessage) : errorMessage;
+    };
+    return S2SErrorHandler;
+}());
+exports.S2SErrorHandler = S2SErrorHandler;

package/lib/risk_api/S2SErrorReason.d.ts

@@ -0,0 +1,8 @@
+export declare enum S2SErrorReason {
+    UNABLE_TO_SEND_REQUEST = "unable_to_send_request",
+    BAD_REQUEST = "bad_request",
+    SERVER_ERROR = "server_error",
+    INVALID_RESPONSE = "invalid_response",
+    REQUEST_FAILED_ON_SERVER = "request_failed_on_server",
+    UNKNOWN_ERROR = "unknown_error"
+}

package/lib/risk_api/S2SErrorReason.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S2SErrorReason = void 0;
+var S2SErrorReason;
+(function (S2SErrorReason) {
+    S2SErrorReason["UNABLE_TO_SEND_REQUEST"] = "unable_to_send_request";
+    S2SErrorReason["BAD_REQUEST"] = "bad_request";
+    S2SErrorReason["SERVER_ERROR"] = "server_error";
+    S2SErrorReason["INVALID_RESPONSE"] = "invalid_response";
+    S2SErrorReason["REQUEST_FAILED_ON_SERVER"] = "request_failed_on_server";
+    S2SErrorReason["UNKNOWN_ERROR"] = "unknown_error";
+})(S2SErrorReason = exports.S2SErrorReason || (exports.S2SErrorReason = {}));

package/lib/risk_api/constants.d.ts

@@ -0,0 +1 @@
+export declare const RISK_API_ENDPOINT = "/api/v3/risk";

package/lib/risk_api/constants.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RISK_API_ENDPOINT = void 0;
+exports.RISK_API_ENDPOINT = '/api/v3/risk';

package/lib/risk_api/index.d.ts

@@ -0,0 +1,13 @@
+export { RiskStatus } from './model/RiskStatus';
+export { RiskResponseV3 } from './model/RiskResponseV3';
+export { RiskResponseV2 } from './model/RiskResponseV2';
+export { RiskActivity } from './model/RiskActivity';
+export { IRiskResponseHandler } from './risk_response_handler/IRiskResponseHandler';
+export { RiskResponseHandlerBase } from './risk_response_handler/RiskResponseHandlerBase';
+export { RiskResponseV2Handler } from './risk_response_handler/RiskResponseV2Handler';
+export { RiskResponseV3Handler } from './risk_response_handler/RiskResponseV3Handler';
+export { S2SErrorHandler } from './S2SErrorHandler';
+export { PostRiskApiClient } from './PostRiskApiClient';
+export { S2SCallReason } from './S2SCallReason';
+export { S2SErrorReason } from './S2SErrorReason';
+export * from './constants';

package/lib/risk_api/index.js

@@ -0,0 +1,34 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S2SErrorReason = exports.S2SCallReason = exports.PostRiskApiClient = exports.S2SErrorHandler = exports.RiskResponseV3Handler = exports.RiskResponseV2Handler = exports.RiskResponseHandlerBase = exports.RiskStatus = void 0;
+var RiskStatus_1 = require("./model/RiskStatus");
+Object.defineProperty(exports, "RiskStatus", { enumerable: true, get: function () { return RiskStatus_1.RiskStatus; } });
+var RiskResponseHandlerBase_1 = require("./risk_response_handler/RiskResponseHandlerBase");
+Object.defineProperty(exports, "RiskResponseHandlerBase", { enumerable: true, get: function () { return RiskResponseHandlerBase_1.RiskResponseHandlerBase; } });
+var RiskResponseV2Handler_1 = require("./risk_response_handler/RiskResponseV2Handler");
+Object.defineProperty(exports, "RiskResponseV2Handler", { enumerable: true, get: function () { return RiskResponseV2Handler_1.RiskResponseV2Handler; } });
+var RiskResponseV3Handler_1 = require("./risk_response_handler/RiskResponseV3Handler");
+Object.defineProperty(exports, "RiskResponseV3Handler", { enumerable: true, get: function () { return RiskResponseV3Handler_1.RiskResponseV3Handler; } });
+var S2SErrorHandler_1 = require("./S2SErrorHandler");
+Object.defineProperty(exports, "S2SErrorHandler", { enumerable: true, get: function () { return S2SErrorHandler_1.S2SErrorHandler; } });
+var PostRiskApiClient_1 = require("./PostRiskApiClient");
+Object.defineProperty(exports, "PostRiskApiClient", { enumerable: true, get: function () { return PostRiskApiClient_1.PostRiskApiClient; } });
+var S2SCallReason_1 = require("./S2SCallReason");
+Object.defineProperty(exports, "S2SCallReason", { enumerable: true, get: function () { return S2SCallReason_1.S2SCallReason; } });
+var S2SErrorReason_1 = require("./S2SErrorReason");
+Object.defineProperty(exports, "S2SErrorReason", { enumerable: true, get: function () { return S2SErrorReason_1.S2SErrorReason; } });
+__exportStar(require("./constants"), exports);

package/lib/risk_api/model/RiskActivity.d.ts

@@ -0,0 +1,50 @@
+import { S2SCallReason } from '../S2SCallReason';
+import { ModuleMode } from '../../utils/ModuleMode';
+import { VidSource } from '../../utils/VidSource';
+import { TokenOrigin } from '../../risk_token/TokenOrigin';
+import { CustomParameters } from '../../custom_parameters/CustomParameters';
+export declare type HeaderEntry = {
+    name: string;
+    value: string;
+};
+export declare type RiskRequestData = {
+    ip: string;
+    url: string;
+    headers: HeaderEntry[];
+};
+export declare type RiskAdditionalData = {
+    request_id: string;
+    module_version: string;
+    s2s_call_reason: S2SCallReason;
+    risk_mode: ModuleMode;
+    http_method: string;
+    http_version?: string;
+    px_orig_cookie?: string;
+    px_cookie?: string;
+    px_cookie_hmac?: string;
+    tls_protocol?: string;
+    tls_server?: string;
+    tls_cipher?: string;
+    tls_ciphers_sha?: string;
+    tls_extension_sha?: string;
+    tls_preferred_ciphers?: string;
+    tls_ja3_fingerprint?: string;
+    enforcer_vid_source?: VidSource;
+    original_uuid?: string;
+    original_token_error?: string;
+    original_token?: string;
+    px_decoded_original_token?: string;
+    cookie_origin?: TokenOrigin;
+    request_cookie_names?: string[];
+    server_info_region?: string;
+    cross_tab_session?: string;
+    app_user_id?: string;
+    jwt_additional_fields?: string[];
+} & CustomParameters;
+export declare type RiskActivity = {
+    vid?: string;
+    uuid?: string;
+    pxhd?: string;
+    request: RiskRequestData;
+    additional: RiskAdditionalData;
+};

package/lib/risk_api/model/RiskActivity.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/model/RiskResponseV2.d.ts

@@ -0,0 +1,10 @@
+import { RiskStatus } from './RiskStatus';
+import { PXDE } from '../../pxde';
+export declare type RiskResponseV2 = {
+    status: RiskStatus;
+    cookie_cfg_block_result?: '0' | '1';
+    uuid?: string;
+    pxhd?: string;
+    message?: string;
+    data_enrichment?: PXDE;
+};

package/lib/risk_api/model/RiskResponseV2.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/model/RiskResponseV3.d.ts

@@ -0,0 +1,12 @@
+import { RiskStatus } from './RiskStatus';
+import { BlockAction } from '../../block_handler';
+import { PXDE } from '../../pxde';
+export declare type RiskResponseV3 = {
+    status: RiskStatus;
+    score?: number;
+    action?: BlockAction;
+    uuid?: string;
+    pxhd?: string;
+    message?: string;
+    data_enrichment?: PXDE;
+};

package/lib/risk_api/model/RiskResponseV3.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/model/RiskStatus.d.ts

@@ -0,0 +1,4 @@
+export declare enum RiskStatus {
+    FAILURE = -1,
+    SUCCESS = 0
+}

package/lib/risk_api/model/RiskStatus.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RiskStatus = void 0;
+var RiskStatus;
+(function (RiskStatus) {
+    RiskStatus[RiskStatus["FAILURE"] = -1] = "FAILURE";
+    RiskStatus[RiskStatus["SUCCESS"] = 0] = "SUCCESS";
+})(RiskStatus = exports.RiskStatus || (exports.RiskStatus = {}));

package/lib/risk_api/risk_response_handler/IRiskResponseHandler.d.ts

@@ -0,0 +1,5 @@
+import { IContext } from '../../context';
+import { IHttpResponse } from '../../http';
+export interface IRiskResponseHandler<RiskResponseType> {
+    handleRiskResponse(context: IContext, response: IHttpResponse, riskResponse: RiskResponseType): Promise<void>;
+}

package/lib/risk_api/risk_response_handler/IRiskResponseHandler.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/risk_response_handler/RiskResponseHandlerBase.d.ts

@@ -0,0 +1,16 @@
+import { IConfiguration } from '../../config';
+import { IContext } from '../../context';
+import { IHttpResponse } from '../../http';
+import { IRiskResponseHandler } from './IRiskResponseHandler';
+import { RiskResponseV2 } from '../model/RiskResponseV2';
+import { RiskResponseV3 } from '../model/RiskResponseV3';
+export declare abstract class RiskResponseHandlerBase<RiskResponseType extends RiskResponseV2 | RiskResponseV3> implements IRiskResponseHandler<RiskResponseType> {
+    protected readonly config: IConfiguration;
+    protected abstract isRiskResponseValid(riskResponse: RiskResponseType): boolean;
+    protected abstract extractScoreFromRiskResponse(riskResponse: RiskResponseType): number;
+    protected abstract setRiskResponseContextFields(context: IContext, riskResponse: RiskResponseType): void;
+    protected constructor(config: IConfiguration);
+    handleRiskResponse(context: IContext, response: IHttpResponse, riskResponse: RiskResponseType): Promise<void>;
+    protected handleValidRiskResponse(context: IContext, riskResponse: RiskResponseType): void;
+    protected shouldBlock(score: number): boolean;
+}