perimeterx-js-core 0.18.2 → 0.20.0

package/lib/cjs/config/ConfigurationBuilderBase.js

@@ -54,21 +54,22 @@ var ConfigurationBuilderBase = /** @class */ (function () {
     }
     ConfigurationBuilderBase.prototype.build = function (params) {
         return __awaiter(this, void 0, void 0, function () {
-            var staticConfig, remoteConfigParams;
+            var config, remoteConfigParams;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        staticConfig = this.createConfiguration(params);
-                        if (!staticConfig.remoteConfigAuthToken) {
-                            return [2 /*return*/, staticConfig];
+                        config = this.createConfiguration(params);
+                        if (!config.remoteConfigAuthToken) {
+                            return [2 /*return*/, config];
                         }
-                        return [4 /*yield*/, this.getRemoteConfigParams(staticConfig)];
+                        return [4 /*yield*/, this.getRemoteConfigParams(config)];
                     case 1:
                         remoteConfigParams = _a.sent();
                         if (!remoteConfigParams) {
-                            return [2 /*return*/, staticConfig];
+                            return [2 /*return*/, config];
                         }
-                        return [2 /*return*/, this.createConfiguration(__assign(__assign({}, params), remoteConfigParams))];
+                        config.addRemoteConfig(remoteConfigParams);
+                        return [2 /*return*/, config];
                 }
             });
         });

package/lib/cjs/config/defaults/DefaultCommonConfigurationParams.js

@@ -19,7 +19,7 @@ exports.DEFAULT_COMMON_CONFIGURATION_PARAMS = {
     px_advanced_blocking_response_enabled: true,
     px_max_activity_batch_size: 0,
     px_batch_activities_timeout_ms: 1000,
-    px_bypass_monitor_header: '',
+    px_bypass_monitor_header: 'x-px-block',
     px_enforced_routes: [],
     px_first_party_enabled: true,
     px_custom_first_party_prefix: '',
@@ -97,6 +97,7 @@ exports.DEFAULT_COMMON_CONFIGURATION_PARAMS = {
     px_custom_logo: '',
     px_graphql_enabled: true,
     px_graphql_routes: ['/graphql'],
+    px_graphql_keywords: [],
     px_sensitive_graphql_operation_names: [],
     px_sensitive_graphql_operation_types: [],
     px_enrich_custom_parameters: null,
@@ -118,4 +119,5 @@ exports.DEFAULT_COMMON_CONFIGURATION_PARAMS = {
     px_custom_is_monitored_request: null,
     px_custom_is_enforced_request: null,
     px_custom_is_filtered_request: null,
+    px_extract_graphql_keywords: null,
 };

package/lib/cjs/config/defaults/DefaultStaticConfigurationParams.js

@@ -7,5 +7,4 @@ exports.DEFAULT_STATIC_CONFIGURATION_PARAMS = {
     px_cookie_secret: '',
     px_logger_auth_token: '',
     px_remote_config_auth_token: '',
-    px_remote_config_secret: '',
 };

package/lib/cjs/config/remote_config/DefaultRemoteConfigUpdater.js

@@ -46,7 +46,7 @@ var DefaultRemoteConfigUpdater = /** @class */ (function () {
         this.storageClient = options.storageClient;
         this.timestampHmacHeaderValidator =
             options.timestampHmacHeaderValidator ||
-                new utils_1.DefaultTimestampHmacHeaderValidator(config, config.remoteConfigSecret, options.base64Utils, options.hmacUtils);
+                new utils_1.DefaultTimestampHmacHeaderValidator(config, config.remoteConfigAuthToken, options.base64Utils, options.hmacUtils);
     }
     DefaultRemoteConfigUpdater.prototype.isUpdateRemoteConfigRequest = function (context) {
         return context.isRemoteConfigUpdateRequest;

package/lib/cjs/config/remote_config/RemoteConfigUtils.js

@@ -7,7 +7,7 @@ var constants_1 = require("./constants");
 var RemoteConfigUtils;
 (function (RemoteConfigUtils) {
     RemoteConfigUtils.isRemoteConfigUpdateRequest = function (request) {
-        return request.method === http_1.HttpMethod.PATCH &&
+        return request.method === http_1.HttpMethod.POST &&
             request.headers.get(utils_1.PUSH_DATA_FEATURE_HEADER_NAME) === constants_1.REMOTE_CONFIG_PUSH_DATA_FEATURE_NAME &&
             !!request.headers.get(utils_1.PUSH_DATA_HMAC_HEADER_NAME);
     };

package/lib/cjs/context/DefaultContext.js

@@ -119,7 +119,10 @@ var DefaultContext = /** @class */ (function () {
         return request.headers.get(utils_1.X_PX_AUTHORIZATION_HEADER_NAME) ? risk_token_1.TokenOrigin.HEADER : risk_token_1.TokenOrigin.COOKIE;
     };
     DefaultContext.prototype.setCookiesOnContext = function () {
-        this.vid = this.requestData.cookies[utils_1.PXVID_COOKIE_NAME];
+        var vidValue = this.requestData.cookies[utils_1.PXVID_COOKIE_NAME];
+        if ((0, utils_1.isValidUuid)(vidValue)) {
+            this.vid = vidValue;
+        }
         var pxhdCookie = this.requestData.cookies[utils_1.PXHD_COOKIE_NAME];
         if (pxhdCookie) {
             this.pxhd = {

package/lib/cjs/custom_parameters/CustomParametersUtils.js

@@ -50,7 +50,7 @@ var CustomParametersUtils;
                     _a.label = 1;
                 case 1:
                     _a.trys.push([1, 3, , 4]);
-                    return [4 /*yield*/, config.enrichCustomParameters(config.toParams(), context.requestData.request.getUnderlyingRequest())];
+                    return [4 /*yield*/, config.enrichCustomParameters(config.getActiveConfig(), context.requestData.request.getUnderlyingRequest())];
                 case 2:
                     parameters = _a.sent();
                     return [2 /*return*/, CustomParametersUtils.normalizeCustomParams(parameters)];

package/lib/cjs/graphql/DefaultGraphQLParser.js

@@ -42,13 +42,14 @@ var http_1 = require("../http");
 var model_1 = require("./model");
 var DefaultGraphQLParser = /** @class */ (function () {
     function DefaultGraphQLParser(config) {
-        this.graphqlRoutes = config.graphqlRoutes;
-        this.sensitiveOperationNames = config.sensitiveGraphqlOperationNames;
-        this.sensitiveOperationTypes = config.sensitiveGraphqlOperationTypes;
+        this.config = config;
+        this.maxCharactersInGraphqlKeyword = 100;
+        this.maxGraphqlKeywordCount = 500;
     }
     DefaultGraphQLParser.prototype.isGraphQLRequest = function (_a) {
         var requestData = _a.requestData;
-        return (requestData.method === http_1.HttpMethod.POST && (0, utils_1.isRouteInPatterns)(requestData.url.pathname, this.graphqlRoutes));
+        return (requestData.method === http_1.HttpMethod.POST &&
+            (0, utils_1.isRouteInPatterns)(requestData.url.pathname, this.config.graphqlRoutes));
     };
     DefaultGraphQLParser.prototype.parseGraphQLRequest = function (context) {
         return __awaiter(this, void 0, void 0, function () {
@@ -56,7 +57,7 @@ var DefaultGraphQLParser = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
+                        _a.trys.push([0, 3, , 4]);
                         requestData = context.requestData;
                         return [4 /*yield*/, this.getGraphQLOperationsFromBody(requestData.request, context)];
                     case 1:
@@ -65,18 +66,20 @@ var DefaultGraphQLParser = /** @class */ (function () {
                             context.logger.debug('unable to get graphql operations from request body');
                             return [2 /*return*/, null];
                         }
-                        data = this.parseGraphQLOperations(graphQLOperations);
+                        return [4 /*yield*/, this.parseGraphQLOperations(graphQLOperations, context)];
+                    case 2:
+                        data = _a.sent();
                         if (!data || data.length === 0) {
                             context.logger.debug('unable to parse graphql operations');
                             return [2 /*return*/, null];
                         }
                         context.logger.debug("".concat(data.length, " graphql operation").concat(data.length === 1 ? '' : 's', " parsed successfully"));
                         return [2 /*return*/, data];
-                    case 2:
+                    case 3:
                         e_1 = _a.sent();
                         context.logger.debug("unable to parse graphql request: ".concat(e_1));
                         return [2 /*return*/, null];
-                    case 3: return [2 /*return*/];
+                    case 4: return [2 /*return*/];
                 }
             });
         });
@@ -92,6 +95,7 @@ var DefaultGraphQLParser = /** @class */ (function () {
                     case 1:
                         body = _a.sent();
                         if (!body) {
+                            context.logger.debug("received empty graphql body when calling .json()");
                             return [2 /*return*/, null];
                         }
                         return [2 /*return*/, Array.isArray(body) ? body : [body]];
@@ -104,19 +108,31 @@ var DefaultGraphQLParser = /** @class */ (function () {
             });
         });
     };
-    DefaultGraphQLParser.prototype.parseGraphQLOperations = function (operations) {
-        var _this = this;
-        return operations.map(function (operation) { return _this.parseGraphQlOperation(operation); }).filter(function (x) { return x; });
+    DefaultGraphQLParser.prototype.parseGraphQLOperations = function (operations, context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var data;
+            var _this = this;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, Promise.all(operations.map(function (operation) { return _this.parseGraphQLOperation(operation, context); }))];
+                    case 1:
+                        data = _a.sent();
+                        return [2 /*return*/, data.filter(Boolean)];
+                }
+            });
+        });
     };
-    DefaultGraphQLParser.prototype.parseGraphQlOperation = function (operation) {
+    DefaultGraphQLParser.prototype.parseGraphQLOperation = function (operation, context) {
         if (!operation.query || typeof operation.query !== 'string') {
+            context.logger.debug('no query found');
             return null;
         }
         var operationNameToTypeMap = this.getOperationNameToTypeMap(operation.query);
         if (!operationNameToTypeMap) {
+            context.logger.debug('operationNameToTypeMap returned null');
             return null;
         }
-        return this.getGraphQLData(operationNameToTypeMap, operation);
+        return this.getGraphQLData(operationNameToTypeMap, operation, context);
     };
     DefaultGraphQLParser.prototype.getOperationNameToTypeMap = function (query) {
         var operationTypesString = Object.values(model_1.GraphQLOperationType).join('|');
@@ -136,28 +152,128 @@ var DefaultGraphQLParser = /** @class */ (function () {
         }
         return map;
     };
-    DefaultGraphQLParser.prototype.getGraphQLData = function (operationNameToTypeMap, operation) {
-        var name = operation.operationName ||
-            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined);
-        var type = operationNameToTypeMap[name];
-        if (!type && /^\s*{/.test(operation.query)) {
-            type = model_1.GraphQLOperationType.QUERY;
+    DefaultGraphQLParser.prototype.getGraphQLData = function (operationNameToTypeMap, operation, context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var name, type, data, keywords;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        name = this.getOperationName(operationNameToTypeMap, operation);
+                        type = this.getOperationType(operation, name, operationNameToTypeMap);
+                        if (!type) {
+                            return [2 /*return*/, null];
+                        }
+                        data = { type: type };
+                        if (name) {
+                            data.name = name;
+                        }
+                        return [4 /*yield*/, this.getQueryKeywords(operation.query, context)];
+                    case 1:
+                        keywords = _a.sent();
+                        if (keywords) {
+                            data.keywords = this.cleanKeywords(keywords);
+                        }
+                        if (this.isSensitiveOperation(name, type, keywords)) {
+                            data.sensitive = true;
+                        }
+                        if (operation.variables && typeof operation.variables === 'object') {
+                            data.variables = this.extractGraphQLVariableNames(operation.variables);
+                        }
+                        return [2 /*return*/, data];
+                }
+            });
+        });
+    };
+    DefaultGraphQLParser.prototype.getOperationType = function (operation, operationName, operationNameToTypeMap) {
+        if (operationName && operationNameToTypeMap[operationName]) {
+            return operationNameToTypeMap[operationName];
         }
-        if (!type) {
-            return null;
+        if (this.isGraphqlQueryShorthand(operation.query)) {
+            return model_1.GraphQLOperationType.QUERY;
         }
-        var data = { name: name, type: type };
-        if (this.isSensitiveOperation(name, type)) {
-            data.sensitive = true;
+        var match = operation.query.match(new RegExp("^\\s*(".concat(Object.values(model_1.GraphQLOperationType).join('|'), ")(?:\\s|{)")));
+        if ((match === null || match === void 0 ? void 0 : match[1]) && !operationName) {
+            return match[1];
         }
-        if (operation.variables && typeof operation.variables === 'object') {
-            data.variables = this.extractGraphQLVariableNames(operation.variables);
+        return null;
+    };
+    DefaultGraphQLParser.prototype.isGraphqlQueryShorthand = function (query) {
+        return /^\s*{/.test(query);
+    };
+    DefaultGraphQLParser.prototype.getOperationName = function (operationNameToTypeMap, operation) {
+        return (operation.operationName ||
+            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined));
+    };
+    DefaultGraphQLParser.prototype.getQueryKeywords = function (query, context) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var keywords;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        if (!(this.config.extractGraphQLKeywords && typeof this.config.extractGraphQLKeywords === 'function')) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.getQueryKeywordsFromCustomFunction(query, context)];
+                    case 1:
+                        keywords = _b.sent();
+                        if (Array.isArray(keywords)) {
+                            return [2 /*return*/, keywords];
+                        }
+                        _b.label = 2;
+                    case 2:
+                        if (((_a = this.config.graphqlKeywords) === null || _a === void 0 ? void 0 : _a.length) > 0) {
+                            return [2 /*return*/, this.getQueryKeywordsFromArray(query, context)];
+                        }
+                        return [2 /*return*/, null];
+                }
+            });
+        });
+    };
+    DefaultGraphQLParser.prototype.cleanKeywords = function (keywords) {
+        var _this = this;
+        return keywords
+            .slice(0, this.maxGraphqlKeywordCount)
+            .map(function (kw) { return kw.trim().substring(0, _this.maxCharactersInGraphqlKeyword); });
+    };
+    DefaultGraphQLParser.prototype.getQueryKeywordsFromCustomFunction = function (query, context) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                try {
+                    return [2 /*return*/, this.config.extractGraphQLKeywords(query)];
+                }
+                catch (e) {
+                    context.logger.debug("unable to extract graphql keywords via custom function: ".concat(e));
+                    return [2 /*return*/, null];
+                }
+                return [2 /*return*/];
+            });
+        });
+    };
+    DefaultGraphQLParser.prototype.getQueryKeywordsFromArray = function (query, context) {
+        var _this = this;
+        var keywords = [];
+        try {
+            this.config.graphqlKeywords.forEach(function (keyword) {
+                var pattern = _this.toGlobalRegExp(keyword);
+                var matchGroup = query.match(pattern);
+                if (!matchGroup) {
+                    return;
+                }
+                keywords = keywords.concat(matchGroup);
+            });
+        }
+        catch (e) {
+            context.logger.debug("unable to extract graphql keywords via array: ".concat(e));
+            return null;
         }
-        return data;
+        return keywords;
     };
-    DefaultGraphQLParser.prototype.isSensitiveOperation = function (operationName, operationType) {
-        return (this.sensitiveOperationTypes.some(function (type) { return type === operationType; }) ||
-            this.sensitiveOperationNames.some(function (name) { return name === operationName; }));
+    DefaultGraphQLParser.prototype.isSensitiveOperation = function (operationName, operationType, keywords) {
+        var _this = this;
+        return (this.config.sensitiveGraphqlOperationTypes.some(function (type) { return type === operationType; }) ||
+            this.config.sensitiveGraphqlOperationNames.some(function (name) {
+                var pattern = _this.toGlobalRegExp(name);
+                return pattern.test(operationName) || (keywords === null || keywords === void 0 ? void 0 : keywords.some(function (kw) { return pattern.test(kw); }));
+            }));
     };
     DefaultGraphQLParser.prototype.extractGraphQLVariableNames = function (variables) {
         var processVariables = function (variablesObj, prefix) {
@@ -174,6 +290,15 @@ var DefaultGraphQLParser = /** @class */ (function () {
         };
         return processVariables(variables, '');
     };
+    DefaultGraphQLParser.prototype.toGlobalRegExp = function (pattern) {
+        if (typeof pattern === 'string') {
+            return new RegExp(pattern, 'g');
+        }
+        if (pattern.global) {
+            return pattern;
+        }
+        return new RegExp(pattern, pattern.flags + 'g');
+    };
     return DefaultGraphQLParser;
 }());
 exports.DefaultGraphQLParser = DefaultGraphQLParser;

package/lib/cjs/graphql/ExtractGraphQLKeywordsFunction.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/graphql/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./model"), exports);
 __exportStar(require("./IGraphQLParser"), exports);
 __exportStar(require("./DefaultGraphQLParser"), exports);
+__exportStar(require("./ExtractGraphQLKeywordsFunction"), exports);

package/lib/cjs/telemetry/DefaultTelemetry.js

@@ -127,16 +127,26 @@ var DefaultTelemetry = /** @class */ (function () {
             _a[http_1.AUTHORIZATION_HEADER_NAME] = [(0, utils_1.getAuthorizationHeader)(this.config.authToken)],
             _a);
         var activity = this.createTelemetryActivity(context);
-        return new http_1.OutgoingRequestImpl({ url: url, method: method, headers: headers, body: JSON.stringify(activity) });
+        context.logger.debug("created telemetry activity config - ".concat(JSON.stringify(activity.details.enforcer_configs, utils_1.telemetryConfigReplacer)));
+        return new http_1.OutgoingRequestImpl({
+            url: url,
+            method: method,
+            headers: headers,
+            body: JSON.stringify(activity, utils_1.telemetryConfigReplacer),
+        });
     };
     DefaultTelemetry.prototype.createTelemetryActivity = function (context) {
         var SENSITIVE_CONFIG_FIELDS = [
             'px_auth_token',
             'px_cookie_secret',
             'px_logger_auth_token',
+            'px_remote_config_auth_token',
         ];
-        var config = this.config.toParams();
-        config = (0, utils_1.removeSensitiveFields)(config, SENSITIVE_CONFIG_FIELDS);
+        var telemetryConfig = {
+            active_config: (0, utils_1.removeSensitiveFields)(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
+            static_config: (0, utils_1.removeSensitiveFields)(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
+            remote_config: (0, utils_1.removeSensitiveFields)(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
+        };
         var activity = {
             type: activities_1.ActivityType.ENFORCER_TELEMETRY,
             timestamp: Date.now(),
@@ -144,7 +154,7 @@ var DefaultTelemetry = /** @class */ (function () {
             details: {
                 update_reason: constants_1.TELEMETRY_UPDATE_REASON,
                 module_version: this.config.moduleVersion,
-                enforcer_configs: config,
+                enforcer_configs: telemetryConfig,
             },
         };
         (0, utils_1.transferExistingProperties)(context.serverData, activity.details, {

package/lib/cjs/utils/constants.js

@@ -13,4 +13,4 @@ exports.PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.18.2';
+exports.CORE_MODULE_VERSION = 'JS Core 0.20.0';

package/lib/cjs/utils/utils.js

@@ -36,7 +36,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isRouteMatch = exports.isRouteInPatterns = exports.removeSensitiveHeaders = exports.removeSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
+exports.telemetryConfigReplacer = exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isRouteMatch = exports.isRouteInPatterns = exports.removeSensitiveHeaders = exports.removeSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
 var http_1 = require("../http");
 var error_1 = require("./error");
 var constants_1 = require("./constants");
@@ -184,3 +184,27 @@ var algoToCryptoString = function (algo) {
     }
 };
 exports.algoToCryptoString = algoToCryptoString;
+// Hash based on https://stackoverflow.com/questions/7616461/generate-a-hash-from-string-in-javascript
+var toHash = function (string) {
+    var hash = 0;
+    if (string.length === 0) {
+        return hash.toString();
+    }
+    for (var i = 0; i < string.length; i++) {
+        var char = string.charCodeAt(i);
+        hash = (hash << 5) - hash + char;
+        hash = hash & hash;
+    }
+    return hash.toString();
+};
+var telemetryConfigReplacer = function (key, value) {
+    if (value instanceof RegExp) {
+        return '_REGEXP ' + value.toString();
+    }
+    if (value instanceof Function) {
+        return '_FUNCTION_HASH' + toHash(value.toString()); // NOTE: Do not log functions
+    }
+    else
+        return value;
+};
+exports.telemetryConfigReplacer = telemetryConfigReplacer;

package/lib/esm/additional_activity_handler/AdditionalActivityHandlerUtils.js

@@ -4,7 +4,7 @@ export var AdditionalActivityHandlerUtils;
         if (config.additionalActivityHandler && typeof config.additionalActivityHandler === 'function') {
             try {
                 context.logger.debug('calling additional activity handler');
-                await config.additionalActivityHandler(config.toParams(), context, context.requestData.request.getUnderlyingRequest());
+                await config.additionalActivityHandler(config.getActiveConfig(), context, context.requestData.request.getUnderlyingRequest());
             }
             catch (e) {
                 context.logger.error(`caught additional activity handler error - ${e}`);

package/lib/esm/blocker/utils.js

@@ -1,4 +1,3 @@
-import { PXVID_COOKIE_NAME } from '../utils';
 import { FirstPartySuffix, getMostCustomizedFirstPartyPath } from '../products';
 export const renderHtml = (htmlTemplate, blockData) => {
     if (!blockData) {
@@ -30,7 +29,7 @@ export const createBlockData = (config, context, base64Utils) => {
     const jsTemplateScriptSrc = `https://captcha.px-cdn.net/${config.appId}/checkpoint.js`;
     return {
         appId: config.appId,
-        vid: context.vid || context.requestData?.cookies?.[PXVID_COOKIE_NAME] || '',
+        vid: context.vid || '',
         uuid: context.uuid || '',
         isMobile: context.isMobile,
         customLogo: config.customLogo || '',