perimeterx-js-core 0.30.0 → 0.30.1

package/lib/cjs/enforcer/utils.js

@@ -66,9 +66,7 @@ var createEnforcerProducts = function (config, products, base64Utils, hashUtils,
     var _a;
     var botDefender = (products === null || products === void 0 ? void 0 : products.bd) || new products_1.BotDefender(config, { base64Utils: base64Utils, ipRangeChecker: ipRangeChecker, urlUtils: urlUtils });
     var accountDefender = (products === null || products === void 0 ? void 0 : products.ad) || new products_1.AccountDefender(config, { base64Utils: base64Utils });
-    var credentialIntelligence = config.ciEnabled
-        ? (products === null || products === void 0 ? void 0 : products.ci) || new products_1.CredentialIntelligence(config, { hashUtils: hashUtils, urlUtils: urlUtils })
-        : undefined;
+    var credentialIntelligence = (products === null || products === void 0 ? void 0 : products.ci) || new products_1.CredentialIntelligence(config, { hashUtils: hashUtils, urlUtils: urlUtils });
     var hypeSaleChallenge = (products === null || products === void 0 ? void 0 : products.hsc) || new products_1.HypeSaleChallenge(config, { base64Utils: base64Utils });
     return _a = {},
         _a[products_1.ProductName.BOT_DEFENDER] = botDefender,

package/lib/cjs/products/credential_intelligence/CredentialIntelligence.js

@@ -55,7 +55,9 @@ var constants_1 = require("./constants.js");
 var CredentialIntelligence = /** @class */ (function () {
     function CredentialIntelligence(config, options) {
         this.config = config;
-        this.endpointManager = new endpoint_1.CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(config, options));
+        this.options = options;
+        this.remoteConfigVersion = config.remoteConfigVersion;
+        this.endpointManager = new endpoint_1.CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(this.config, this.options));
     }
     CredentialIntelligence.prototype.enrichContextFromRequest = function (context) {
         return __awaiter(this, void 0, void 0, function () {
@@ -63,6 +65,12 @@ var CredentialIntelligence = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
+                        if (!this.config.ciEnabled) {
+                            return [2 /*return*/, null];
+                        }
+                        if (this.shouldRefreshCredentialIntelligenceEndpoints()) {
+                            this.refreshCredentialIntelligenceEndpoints();
+                        }
                         endpointIndex = this.endpointManager.getEndpointIndex(context);
                         if (endpointIndex === -1) {
                             return [2 /*return*/, null];
@@ -159,14 +167,30 @@ var CredentialIntelligence = /** @class */ (function () {
         request.headers.set(constants_1.ADDITIONAL_S2S_URL_HEADER_NAME, "".concat(this.config.backendCollectorUrl).concat(activities_1.ACTIVITIES_ENDPOINT));
     };
     CredentialIntelligence.prototype.initializeCredentialIntelligenceEndpoints = function (config, options) {
-        return config.ciEndpoints.map(function (endpointConfig) {
+        var _this = this;
+        return config.ciEndpoints
+            .map(function (endpointConfig) {
             var _a;
-            var matcher = endpoint_1.CredentialIntelligenceEndpointMatcherFactory.create(endpointConfig);
-            var extractor = endpoint_1.CredentialExtractorFactory.create(endpointConfig, options.urlUtils);
-            var protocol = endpoint_1.CredentialIntelligenceHashProtocolFactory.create(((_a = endpointConfig.protocol) !== null && _a !== void 0 ? _a : config.ciDefaultVersion), options.hashUtils);
-            var loginSuccessfulParser = endpoint_1.LoginSuccessfulParserFactory.create(config, endpointConfig);
-            return new endpoint_1.CredentialEndpoint(matcher, extractor, protocol, loginSuccessfulParser);
-        });
+            try {
+                var matcher = endpoint_1.CredentialIntelligenceEndpointMatcherFactory.create(endpointConfig);
+                var extractor = endpoint_1.CredentialExtractorFactory.create(endpointConfig, options.urlUtils);
+                var protocol = endpoint_1.CredentialIntelligenceHashProtocolFactory.create(((_a = endpointConfig.protocol) !== null && _a !== void 0 ? _a : config.ciDefaultVersion), options.hashUtils);
+                var loginSuccessfulParser = endpoint_1.LoginSuccessfulParserFactory.create(config, endpointConfig);
+                return new endpoint_1.CredentialEndpoint(matcher, extractor, protocol, loginSuccessfulParser);
+            }
+            catch (error) {
+                _this.config.logger.error("caught error initializing credential intelligence endpoint: ".concat(error));
+                return null;
+            }
+        })
+            .filter(function (endpoint) { return endpoint !== null; });
+    };
+    CredentialIntelligence.prototype.shouldRefreshCredentialIntelligenceEndpoints = function () {
+        return this.remoteConfigVersion !== this.config.remoteConfigVersion;
+    };
+    CredentialIntelligence.prototype.refreshCredentialIntelligenceEndpoints = function () {
+        this.remoteConfigVersion = this.config.remoteConfigVersion;
+        this.endpointManager = new endpoint_1.CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(this.config, this.options));
     };
     return CredentialIntelligence;
 }());

package/lib/cjs/utils/constants.js

@@ -15,4 +15,4 @@ exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 exports.REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.30.0';
+exports.CORE_MODULE_VERSION = 'JS Core 0.30.1';

package/lib/esm/enforcer/utils.js

@@ -68,9 +68,7 @@ export const createEnforcerInitializationBlock = (config, options) => {
 export const createEnforcerProducts = (config, products, base64Utils, hashUtils, urlUtils, ipRangeChecker) => {
     const botDefender = products?.bd || new BotDefender(config, { base64Utils, ipRangeChecker, urlUtils });
     const accountDefender = products?.ad || new AccountDefender(config, { base64Utils });
-    const credentialIntelligence = config.ciEnabled
-        ? products?.ci || new CredentialIntelligence(config, { hashUtils, urlUtils })
-        : undefined;
+    const credentialIntelligence = products?.ci || new CredentialIntelligence(config, { hashUtils, urlUtils });
     const hypeSaleChallenge = products?.hsc || new HypeSaleChallenge(config, { base64Utils });
     return {
         [ProductName.BOT_DEFENDER]: botDefender,

package/lib/esm/products/credential_intelligence/CredentialIntelligence.js

@@ -4,12 +4,22 @@ import { CredentialEndpoint, CredentialEndpointManager, CredentialExtractorFacto
 import { ADDITIONAL_S2S_ACTIVITY_HEADER_NAME, ADDITIONAL_S2S_URL_HEADER_NAME, COMPROMISED_CREDENTIALS_HEADER_VALUE, } from './constants.js';
 export class CredentialIntelligence {
     config;
+    options;
+    remoteConfigVersion;
     endpointManager;
     constructor(config, options) {
         this.config = config;
-        this.endpointManager = new CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(config, options));
+        this.options = options;
+        this.remoteConfigVersion = config.remoteConfigVersion;
+        this.endpointManager = new CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(this.config, this.options));
     }
     async enrichContextFromRequest(context) {
+        if (!this.config.ciEnabled) {
+            return null;
+        }
+        if (this.shouldRefreshCredentialIntelligenceEndpoints()) {
+            this.refreshCredentialIntelligenceEndpoints();
+        }
         const endpointIndex = this.endpointManager.getEndpointIndex(context);
         if (endpointIndex === -1) {
             return null;
@@ -66,12 +76,27 @@ export class CredentialIntelligence {
         request.headers.set(ADDITIONAL_S2S_URL_HEADER_NAME, `${this.config.backendCollectorUrl}${ACTIVITIES_ENDPOINT}`);
     }
     initializeCredentialIntelligenceEndpoints(config, options) {
-        return config.ciEndpoints.map((endpointConfig) => {
-            const matcher = CredentialIntelligenceEndpointMatcherFactory.create(endpointConfig);
-            const extractor = CredentialExtractorFactory.create(endpointConfig, options.urlUtils);
-            const protocol = CredentialIntelligenceHashProtocolFactory.create((endpointConfig.protocol ?? config.ciDefaultVersion), options.hashUtils);
-            const loginSuccessfulParser = LoginSuccessfulParserFactory.create(config, endpointConfig);
-            return new CredentialEndpoint(matcher, extractor, protocol, loginSuccessfulParser);
-        });
+        return config.ciEndpoints
+            .map((endpointConfig) => {
+            try {
+                const matcher = CredentialIntelligenceEndpointMatcherFactory.create(endpointConfig);
+                const extractor = CredentialExtractorFactory.create(endpointConfig, options.urlUtils);
+                const protocol = CredentialIntelligenceHashProtocolFactory.create((endpointConfig.protocol ?? config.ciDefaultVersion), options.hashUtils);
+                const loginSuccessfulParser = LoginSuccessfulParserFactory.create(config, endpointConfig);
+                return new CredentialEndpoint(matcher, extractor, protocol, loginSuccessfulParser);
+            }
+            catch (error) {
+                this.config.logger.error(`caught error initializing credential intelligence endpoint: ${error}`);
+                return null;
+            }
+        })
+            .filter((endpoint) => endpoint !== null);
+    }
+    shouldRefreshCredentialIntelligenceEndpoints() {
+        return this.remoteConfigVersion !== this.config.remoteConfigVersion;
+    }
+    refreshCredentialIntelligenceEndpoints() {
+        this.remoteConfigVersion = this.config.remoteConfigVersion;
+        this.endpointManager = new CredentialEndpointManager(this.initializeCredentialIntelligenceEndpoints(this.config, this.options));
     }
 }

package/lib/esm/utils/constants.js

@@ -12,4 +12,4 @@ export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 export const URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 export const REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.30.0';
+export const CORE_MODULE_VERSION = 'JS Core 0.30.1';

package/lib/types/products/credential_intelligence/CredentialIntelligence.d.ts

@@ -11,7 +11,9 @@ export type CredentialIntelligenceOptions = {
 };
 export declare class CredentialIntelligence<Req, Res, Added, Removed> implements ICredentialIntelligence<Req, Res> {
     protected readonly config: IConfiguration<Req, Res, Added, Removed>;
-    protected readonly endpointManager: CredentialEndpointManager<Req, Res>;
+    protected readonly options: CredentialIntelligenceOptions;
+    protected remoteConfigVersion: number;
+    protected endpointManager: CredentialEndpointManager<Req, Res>;
     constructor(config: IConfiguration<Req, Res, Added, Removed>, options: CredentialIntelligenceOptions);
     enrichContextFromRequest(context: ReadonlyContext<Req, Res>): Promise<CredentialIntelligenceData | null>;
     enrichContextFromRiskApi(context: ReadonlyContext<Req, Res>): Promise<Partial<CredentialIntelligenceData> | null>;
@@ -23,4 +25,6 @@ export declare class CredentialIntelligence<Req, Res, Added, Removed> implements
     protected shouldSetAdditionalS2SActivityHeaders(): boolean;
     protected setAdditionalS2SActivityHeaders(request: IIncomingRequest<Req>, context: ReadonlyContext<Req, Res>): void;
     protected initializeCredentialIntelligenceEndpoints(config: IConfiguration<Req, Res, Added, Removed>, options: CredentialIntelligenceOptions): ICredentialEndpoint<Req, Res>[];
+    protected shouldRefreshCredentialIntelligenceEndpoints(): boolean;
+    protected refreshCredentialIntelligenceEndpoints(): void;
 }

package/lib/types/utils/constants.d.ts

@@ -12,4 +12,4 @@ export declare const PUSH_DATA_FEATURE_HEADER_NAME = "x-px-feature";
 export declare const EMAIL_ADDRESS_REGEX: RegExp;
 export declare const URL_REGEX: RegExp;
 export declare const REGEX_STRUCTURE: RegExp;
-export declare const CORE_MODULE_VERSION = "JS Core 0.30.0";
+export declare const CORE_MODULE_VERSION = "JS Core 0.30.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perimeterx-js-core",
-  "version": "0.30.0",
+  "version": "0.30.1",
   "description": "",
   "type": "module",
   "typesVersions": {