perimeterx-js-core 0.18.2 → 0.20.0

package/lib/esm/graphql/DefaultGraphQLParser.js

@@ -2,16 +2,17 @@ import { isRouteInPatterns } from '../utils';
 import { HttpMethod } from '../http';
 import { GraphQLOperationType } from './model';
 export class DefaultGraphQLParser {
-    graphqlRoutes;
-    sensitiveOperationTypes;
-    sensitiveOperationNames;
+    config;
+    maxCharactersInGraphqlKeyword;
+    maxGraphqlKeywordCount;
     constructor(config) {
-        this.graphqlRoutes = config.graphqlRoutes;
-        this.sensitiveOperationNames = config.sensitiveGraphqlOperationNames;
-        this.sensitiveOperationTypes = config.sensitiveGraphqlOperationTypes;
+        this.config = config;
+        this.maxCharactersInGraphqlKeyword = 100;
+        this.maxGraphqlKeywordCount = 500;
     }
     isGraphQLRequest({ requestData }) {
-        return (requestData.method === HttpMethod.POST && isRouteInPatterns(requestData.url.pathname, this.graphqlRoutes));
+        return (requestData.method === HttpMethod.POST &&
+            isRouteInPatterns(requestData.url.pathname, this.config.graphqlRoutes));
     }
     async parseGraphQLRequest(context) {
         try {
@@ -21,7 +22,7 @@ export class DefaultGraphQLParser {
                 context.logger.debug('unable to get graphql operations from request body');
                 return null;
             }
-            const data = this.parseGraphQLOperations(graphQLOperations);
+            const data = await this.parseGraphQLOperations(graphQLOperations, context);
             if (!data || data.length === 0) {
                 context.logger.debug('unable to parse graphql operations');
                 return null;
@@ -36,8 +37,9 @@ export class DefaultGraphQLParser {
     }
     async getGraphQLOperationsFromBody(request, context) {
         try {
-            let body = await request.json();
+            const body = await request.json();
             if (!body) {
+                context.logger.debug(`received empty graphql body when calling .json()`);
                 return null;
             }
             return Array.isArray(body) ? body : [body];
@@ -47,18 +49,21 @@ export class DefaultGraphQLParser {
             return null;
         }
     }
-    parseGraphQLOperations(operations) {
-        return operations.map((operation) => this.parseGraphQlOperation(operation)).filter((x) => x);
+    async parseGraphQLOperations(operations, context) {
+        const data = await Promise.all(operations.map((operation) => this.parseGraphQLOperation(operation, context)));
+        return data.filter(Boolean);
     }
-    parseGraphQlOperation(operation) {
+    parseGraphQLOperation(operation, context) {
         if (!operation.query || typeof operation.query !== 'string') {
+            context.logger.debug('no query found');
             return null;
         }
         const operationNameToTypeMap = this.getOperationNameToTypeMap(operation.query);
         if (!operationNameToTypeMap) {
+            context.logger.debug('operationNameToTypeMap returned null');
             return null;
         }
-        return this.getGraphQLData(operationNameToTypeMap, operation);
+        return this.getGraphQLData(operationNameToTypeMap, operation, context);
     }
     getOperationNameToTypeMap(query) {
         const operationTypesString = Object.values(GraphQLOperationType).join('|');
@@ -78,18 +83,21 @@ export class DefaultGraphQLParser {
         }
         return map;
     }
-    getGraphQLData(operationNameToTypeMap, operation) {
-        let name = operation.operationName ||
-            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined);
-        let type = operationNameToTypeMap[name];
-        if (!type && /^\s*{/.test(operation.query)) {
-            type = GraphQLOperationType.QUERY;
-        }
+    async getGraphQLData(operationNameToTypeMap, operation, context) {
+        const name = this.getOperationName(operationNameToTypeMap, operation);
+        const type = this.getOperationType(operation, name, operationNameToTypeMap);
         if (!type) {
             return null;
         }
-        const data = { name, type };
-        if (this.isSensitiveOperation(name, type)) {
+        const data = { type };
+        if (name) {
+            data.name = name;
+        }
+        const keywords = await this.getQueryKeywords(operation.query, context);
+        if (keywords) {
+            data.keywords = this.cleanKeywords(keywords);
+        }
+        if (this.isSensitiveOperation(name, type, keywords)) {
             data.sensitive = true;
         }
         if (operation.variables && typeof operation.variables === 'object') {
@@ -97,9 +105,76 @@ export class DefaultGraphQLParser {
         }
         return data;
     }
-    isSensitiveOperation(operationName, operationType) {
-        return (this.sensitiveOperationTypes.some((type) => type === operationType) ||
-            this.sensitiveOperationNames.some((name) => name === operationName));
+    getOperationType(operation, operationName, operationNameToTypeMap) {
+        if (operationName && operationNameToTypeMap[operationName]) {
+            return operationNameToTypeMap[operationName];
+        }
+        if (this.isGraphqlQueryShorthand(operation.query)) {
+            return GraphQLOperationType.QUERY;
+        }
+        const match = operation.query.match(new RegExp(`^\\s*(${Object.values(GraphQLOperationType).join('|')})(?:\\s|{)`));
+        if (match?.[1] && !operationName) {
+            return match[1];
+        }
+        return null;
+    }
+    isGraphqlQueryShorthand(query) {
+        return /^\s*{/.test(query);
+    }
+    getOperationName(operationNameToTypeMap, operation) {
+        return (operation.operationName ||
+            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined));
+    }
+    async getQueryKeywords(query, context) {
+        if (this.config.extractGraphQLKeywords && typeof this.config.extractGraphQLKeywords === 'function') {
+            const keywords = await this.getQueryKeywordsFromCustomFunction(query, context);
+            if (Array.isArray(keywords)) {
+                return keywords;
+            }
+        }
+        if (this.config.graphqlKeywords?.length > 0) {
+            return this.getQueryKeywordsFromArray(query, context);
+        }
+        return null;
+    }
+    cleanKeywords(keywords) {
+        return keywords
+            .slice(0, this.maxGraphqlKeywordCount)
+            .map((kw) => kw.trim().substring(0, this.maxCharactersInGraphqlKeyword));
+    }
+    async getQueryKeywordsFromCustomFunction(query, context) {
+        try {
+            return this.config.extractGraphQLKeywords(query);
+        }
+        catch (e) {
+            context.logger.debug(`unable to extract graphql keywords via custom function: ${e}`);
+            return null;
+        }
+    }
+    getQueryKeywordsFromArray(query, context) {
+        let keywords = [];
+        try {
+            this.config.graphqlKeywords.forEach((keyword) => {
+                const pattern = this.toGlobalRegExp(keyword);
+                let matchGroup = query.match(pattern);
+                if (!matchGroup) {
+                    return;
+                }
+                keywords = keywords.concat(matchGroup);
+            });
+        }
+        catch (e) {
+            context.logger.debug(`unable to extract graphql keywords via array: ${e}`);
+            return null;
+        }
+        return keywords;
+    }
+    isSensitiveOperation(operationName, operationType, keywords) {
+        return (this.config.sensitiveGraphqlOperationTypes.some((type) => type === operationType) ||
+            this.config.sensitiveGraphqlOperationNames.some((name) => {
+                const pattern = this.toGlobalRegExp(name);
+                return pattern.test(operationName) || keywords?.some((kw) => pattern.test(kw));
+            }));
     }
     extractGraphQLVariableNames(variables) {
         const processVariables = (variablesObj, prefix) => Object.entries(variablesObj).reduce((total, [key, value]) => {
@@ -113,4 +188,13 @@ export class DefaultGraphQLParser {
         }, []);
         return processVariables(variables, '');
     }
+    toGlobalRegExp(pattern) {
+        if (typeof pattern === 'string') {
+            return new RegExp(pattern, 'g');
+        }
+        if (pattern.global) {
+            return pattern;
+        }
+        return new RegExp(pattern, pattern.flags + 'g');
+    }
 }

package/lib/esm/graphql/ExtractGraphQLKeywordsFunction.js

@@ -0,0 +1 @@
+export {};

package/lib/esm/graphql/index.js

@@ -1,3 +1,4 @@
 export * from './model';
 export * from './IGraphQLParser';
 export * from './DefaultGraphQLParser';
+export * from './ExtractGraphQLKeywordsFunction';

package/lib/esm/telemetry/DefaultTelemetry.js

@@ -1,6 +1,6 @@
 import { AUTHORIZATION_HEADER_NAME, CONTENT_TYPE_HEADER_NAME, ContentType, HttpMethod, OutgoingRequestImpl, } from '../http';
 import { ActivityType } from '../activities';
-import { getAuthorizationHeader, removeSensitiveFields, transferExistingProperties, DefaultTimestampHmacHeaderValidator, } from '../utils';
+import { getAuthorizationHeader, removeSensitiveFields, transferExistingProperties, DefaultTimestampHmacHeaderValidator, telemetryConfigReplacer, } from '../utils';
 import { TELEMETRY_ENDPOINT, TELEMETRY_HEADER_NAME, TELEMETRY_UPDATE_REASON } from './constants';
 export class DefaultTelemetry {
     config;
@@ -49,16 +49,26 @@ export class DefaultTelemetry {
             [AUTHORIZATION_HEADER_NAME]: [getAuthorizationHeader(this.config.authToken)],
         };
         const activity = this.createTelemetryActivity(context);
-        return new OutgoingRequestImpl({ url: url, method: method, headers: headers, body: JSON.stringify(activity) });
+        context.logger.debug(`created telemetry activity config - ${JSON.stringify(activity.details.enforcer_configs, telemetryConfigReplacer)}`);
+        return new OutgoingRequestImpl({
+            url: url,
+            method: method,
+            headers: headers,
+            body: JSON.stringify(activity, telemetryConfigReplacer),
+        });
     }
     createTelemetryActivity(context) {
         const SENSITIVE_CONFIG_FIELDS = [
             'px_auth_token',
             'px_cookie_secret',
             'px_logger_auth_token',
+            'px_remote_config_auth_token',
         ];
-        let config = this.config.toParams();
-        config = removeSensitiveFields(config, SENSITIVE_CONFIG_FIELDS);
+        const telemetryConfig = {
+            active_config: removeSensitiveFields(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
+            static_config: removeSensitiveFields(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
+            remote_config: removeSensitiveFields(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
+        };
         const activity = {
             type: ActivityType.ENFORCER_TELEMETRY,
             timestamp: Date.now(),
@@ -66,7 +76,7 @@ export class DefaultTelemetry {
             details: {
                 update_reason: TELEMETRY_UPDATE_REASON,
                 module_version: this.config.moduleVersion,
-                enforcer_configs: config,
+                enforcer_configs: telemetryConfig,
             },
         };
         transferExistingProperties(context.serverData, activity.details, {

package/lib/esm/utils/constants.js

@@ -10,4 +10,4 @@ export const PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 export const URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.18.2';
+export const CORE_MODULE_VERSION = 'JS Core 0.20.0';

package/lib/esm/utils/utils.js

@@ -115,3 +115,26 @@ export const algoToCryptoString = (algo) => {
             return 'sha256';
     }
 };
+// Hash based on https://stackoverflow.com/questions/7616461/generate-a-hash-from-string-in-javascript
+const toHash = (string) => {
+    let hash = 0;
+    if (string.length === 0) {
+        return hash.toString();
+    }
+    for (let i = 0; i < string.length; i++) {
+        const char = string.charCodeAt(i);
+        hash = (hash << 5) - hash + char;
+        hash = hash & hash;
+    }
+    return hash.toString();
+};
+export const telemetryConfigReplacer = (key, value) => {
+    if (value instanceof RegExp) {
+        return '_REGEXP ' + value.toString();
+    }
+    if (value instanceof Function) {
+        return '_FUNCTION_HASH' + toHash(value.toString()); // NOTE: Do not log functions
+    }
+    else
+        return value;
+};

package/lib/types/activities/utils.d.ts

@@ -268,7 +268,8 @@ export declare const createAsyncActivity: <Req, Res>(activityType: ActivityType,
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -494,7 +495,8 @@ export declare const createAsyncActivity: <Req, Res>(activityType: ActivityType,
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -651,7 +653,8 @@ export declare const createAsyncActivity: <Req, Res>(activityType: ActivityType,
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -934,7 +937,8 @@ export declare const createActivityDetails: <Req, Res>(activityType: ActivityTyp
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -1160,7 +1164,8 @@ export declare const createActivityDetails: <Req, Res>(activityType: ActivityTyp
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -1317,7 +1322,8 @@ export declare const createActivityDetails: <Req, Res>(activityType: ActivityTyp
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -1600,7 +1606,8 @@ export declare const createAsyncActivityCommonDetails: <Req, Res>(context: {
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -1826,7 +1833,8 @@ export declare const createAsyncActivityCommonDetails: <Req, Res>(context: {
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -1983,7 +1991,8 @@ export declare const createAsyncActivityCommonDetails: <Req, Res>(context: {
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -2266,7 +2275,8 @@ export declare const createCommonActivityDetails: <Req, Res>(config: IConfigurat
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -2492,7 +2502,8 @@ export declare const createCommonActivityDetails: <Req, Res>(config: IConfigurat
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -2649,7 +2660,8 @@ export declare const createCommonActivityDetails: <Req, Res>(config: IConfigurat
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -2932,7 +2944,8 @@ export declare const addRootContextDataToDetails: <Req, Res>(details: CommonActi
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -3158,7 +3171,8 @@ export declare const addRootContextDataToDetails: <Req, Res>(details: CommonActi
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -3315,7 +3329,8 @@ export declare const addRootContextDataToDetails: <Req, Res>(details: CommonActi
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -3656,7 +3671,8 @@ export declare const addRiskApiDataToAsyncActivityCommonDetails: <Req, Res>(deta
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -3882,7 +3898,8 @@ export declare const addRiskApiDataToAsyncActivityCommonDetails: <Req, Res>(deta
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -4039,7 +4056,8 @@ export declare const addRiskApiDataToAsyncActivityCommonDetails: <Req, Res>(deta
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -4322,7 +4340,8 @@ export declare const addResponseDataToAsyncActivityCommonDetails: <Req, Res>(det
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -4548,7 +4567,8 @@ export declare const addResponseDataToAsyncActivityCommonDetails: <Req, Res>(det
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -4705,7 +4725,8 @@ export declare const addResponseDataToAsyncActivityCommonDetails: <Req, Res>(det
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -4988,7 +5009,8 @@ export declare const createPageRequestedActivityDetails: <Req, Res>(context: {
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -5214,7 +5236,8 @@ export declare const createPageRequestedActivityDetails: <Req, Res>(context: {
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -5371,7 +5394,8 @@ export declare const createPageRequestedActivityDetails: <Req, Res>(context: {
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -5654,7 +5678,8 @@ export declare const createBlockActivityDetails: <Req, Res>(context: {
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -5880,7 +5905,8 @@ export declare const createBlockActivityDetails: <Req, Res>(context: {
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -6037,7 +6063,8 @@ export declare const createBlockActivityDetails: <Req, Res>(context: {
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];
@@ -6320,7 +6347,8 @@ export declare const createAdditionalS2SActivityDetails: <Req, Res>({ ciSendRawU
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -6546,7 +6574,8 @@ export declare const createAdditionalS2SActivityDetails: <Req, Res>({ ciSendRawU
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -6703,7 +6732,8 @@ export declare const createAdditionalS2SActivityDetails: <Req, Res>({ ciSendRawU
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];

package/lib/types/blocker/utils.d.ts

@@ -264,7 +264,8 @@ export declare const createBlockData: <Req, Res>(config: IConfiguration<Req, Res
                     readonly is_hype_sale?: boolean;
                 };
                 readonly graphqlData?: readonly {
-                    readonly type: import("..").GraphQLOperationType;
+                    readonly type?: import("..").GraphQLOperationType;
+                    readonly keywords?: readonly string[];
                     readonly name?: string;
                     readonly sensitive?: boolean;
                     readonly variables?: readonly string[];
@@ -490,7 +491,8 @@ export declare const createBlockData: <Req, Res>(config: IConfiguration<Req, Res
                         readonly is_hype_sale?: boolean;
                     };
                     readonly graphqlData?: readonly {
-                        readonly type: import("..").GraphQLOperationType;
+                        readonly type?: import("..").GraphQLOperationType;
+                        readonly keywords?: readonly string[];
                         readonly name?: string;
                         readonly sensitive?: boolean;
                         readonly variables?: readonly string[];
@@ -647,7 +649,8 @@ export declare const createBlockData: <Req, Res>(config: IConfiguration<Req, Res
         readonly is_hype_sale?: boolean;
     };
     readonly graphqlData?: readonly {
-        readonly type: import("..").GraphQLOperationType;
+        readonly type?: import("..").GraphQLOperationType;
+        readonly keywords?: readonly string[];
         readonly name?: string;
         readonly sensitive?: boolean;
         readonly variables?: readonly string[];

package/lib/types/config/ConfigurationBase.d.ts

@@ -7,8 +7,12 @@ import { CustomBlockResponseHeadersHandler, CustomPreflightHandler } from '../co
 import { ModuleMode } from '../utils';
 import { CredentialEndpointConfiguration, CredentialIntelligenceVersion, CustomLoginSuccessfulCallback, LoginSuccessfulReportingMethod } from '../products';
 import { CustomRequestFunction } from './CustomRequestFunction';
+import { ExtractGraphQLKeywordsFunction } from '../graphql/ExtractGraphQLKeywordsFunction';
 export declare abstract class ConfigurationBase<Req, Res, ParamsType extends ConfigurationParams<Req, Res> = ConfigurationParams<Req, Res>> implements IConfiguration<Req, Res, ParamsType> {
-    protected readonly configParams: ParamsType;
+    protected activeConfigParams: ParamsType;
+    protected readonly staticConfigParams: ParamsType;
+    protected remoteConfigParams: ParamsType;
+    protected readonly defaultConfigParams: ParamsType;
     protected internalLogger: ILogger;
     protected abstract getModuleVersion(): string;
     protected constructor(params: ParamsType, defaultParams?: Partial<ParamsType>);
@@ -18,7 +22,10 @@ export declare abstract class ConfigurationBase<Req, Res, ParamsType extends Con
     protected isValidConfigValue(params: ParamsType, defaultParams: ParamsType, key: keyof ParamsType): boolean;
     protected getDefaultConfigurationValue<K extends keyof ParamsType, V extends ParamsType[K]>(params: ParamsType, defaultParams: ParamsType, key: K): V;
     protected createInternalLogger(loggerSeverity: LoggerSeverity): ILogger;
-    toParams(): ParamsType;
+    addRemoteConfig(remoteConfigParams: ParamsType): void;
+    getActiveConfig(): ParamsType;
+    getStaticConfig(): ParamsType;
+    getRemoteConfig(): ParamsType;
     get moduleVersion(): string;
     get logger(): ILogger;
     get appId(): string;
@@ -67,7 +74,9 @@ export declare abstract class ConfigurationBase<Req, Res, ParamsType extends Con
     get activityBatchTimeoutMs(): number;
     get graphqlEnabled(): boolean;
     get graphqlRoutes(): Array<string | RegExp>;
-    get sensitiveGraphqlOperationNames(): string[];
+    get graphqlKeywords(): Array<string | RegExp>;
+    get extractGraphQLKeywords(): ExtractGraphQLKeywordsFunction<Req>;
+    get sensitiveGraphqlOperationNames(): Array<string | RegExp>;
     get sensitiveGraphqlOperationTypes(): string[];
     get enrichCustomParameters(): CustomParametersFunction<Req, Res>;
     get additionalActivityHandler(): AdditionalActivityHandler<Req, Res>;
@@ -97,7 +106,6 @@ export declare abstract class ConfigurationBase<Req, Res, ParamsType extends Con
     get ciDefaultLoginSuccessfulHeaderValue(): string;
     get ciDefaultLoginSuccessfulCustomCallback(): CustomLoginSuccessfulCallback<Res>;
     get remoteConfigAuthToken(): string;
-    get remoteConfigSecret(): string;
     get remoteConfigVersion(): number;
     get remoteConfigId(): string;
     get remoteConfigRetryIntervalMs(): number;