perimeterx-js-core 0.5.1 → 0.6.0

package/lib/pxhd/PXHDUtils.js

@@ -1,39 +1,28 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PXHDUtils = void 0;
-var utils_1 = require("../utils");
-var http_1 = require("../http");
-var MinimalResponseUtils_1 = require("../http/utils/MinimalResponseUtils");
-var PXHDUtils;
+import { PXHD_COOKIE_NAME } from '../utils';
+import { MinimalResponseUtils, SET_COOKIE_HEADER_NAME } from '../http';
+export var PXHDUtils;
 (function (PXHDUtils) {
     PXHDUtils.PXHD_SAMESITE_VALUE = 'Lax';
     PXHDUtils.PXHD_PATH_VALUE = '/';
-    PXHDUtils.addPxhdToResponse = function (context, httpResponse) {
-        if (context === null || context === void 0 ? void 0 : context.pxhd) {
-            var setPxhdCookie = PXHDUtils.getPxhdCookieValue(context.pxhd);
-            return (0, MinimalResponseUtils_1.appendHeader)(httpResponse, http_1.SET_COOKIE_HEADER_NAME, setPxhdCookie);
-        }
-        return httpResponse;
-    };
-    PXHDUtils.addPxhdToOutgoingResponse = function (context, response) {
+    PXHDUtils.addPxhdToOutgoingResponse = (context, response) => {
         if (!(context === null || context === void 0 ? void 0 : context.pxhd)) {
             return;
         }
-        var setPxhdCookie = PXHDUtils.getPxhdCookieValue(context.pxhd);
-        response.headers.append(http_1.SET_COOKIE_HEADER_NAME, setPxhdCookie);
+        const setPxhdCookie = PXHDUtils.getPxhdCookieValue(context.pxhd);
+        response.headers.append(SET_COOKIE_HEADER_NAME, setPxhdCookie);
     };
-    PXHDUtils.addPxhdToMinimalResponse = function (context, response) {
+    PXHDUtils.addPxhdToMinimalResponse = (context, response) => {
         if (context === null || context === void 0 ? void 0 : context.pxhd) {
-            var setPxhdCookie = PXHDUtils.getPxhdCookieValue(context.pxhd);
-            return (0, MinimalResponseUtils_1.appendHeader)(response, http_1.SET_COOKIE_HEADER_NAME, setPxhdCookie);
+            const setPxhdCookie = PXHDUtils.getPxhdCookieValue(context.pxhd);
+            return MinimalResponseUtils.appendHeader(response, SET_COOKIE_HEADER_NAME, setPxhdCookie);
         }
         return response;
     };
-    PXHDUtils.getPxhdCookieValue = function (pxhd) {
-        var value = "".concat(utils_1.PXHD_COOKIE_NAME, "=").concat(pxhd.value);
-        var domain = pxhd.domain && "domain=".concat(pxhd.domain);
-        var path = "path=".concat(PXHDUtils.PXHD_PATH_VALUE);
-        var sameSite = "SameSite=".concat(PXHDUtils.PXHD_SAMESITE_VALUE);
+    PXHDUtils.getPxhdCookieValue = (pxhd) => {
+        const value = `${PXHD_COOKIE_NAME}=${pxhd.value}`;
+        const domain = pxhd.domain && `domain=${pxhd.domain}`;
+        const path = `path=${PXHDUtils.PXHD_PATH_VALUE}`;
+        const sameSite = `SameSite=${PXHDUtils.PXHD_SAMESITE_VALUE}`;
         return [value, domain, path, sameSite].filter(Boolean).join('; ');
     };
-})(PXHDUtils = exports.PXHDUtils || (exports.PXHDUtils = {}));
+})(PXHDUtils || (PXHDUtils = {}));

package/lib/pxhd/index.js

@@ -1,20 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PXHDUtils = void 0;
-var PXHDUtils_1 = require("./PXHDUtils");
-Object.defineProperty(exports, "PXHDUtils", { enumerable: true, get: function () { return PXHDUtils_1.PXHDUtils; } });
-__exportStar(require("./model"), exports);
+export { PXHDUtils } from './PXHDUtils';
+export * from './model';

package/lib/pxhd/model/PXHD.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/lib/pxhd/model/PXHDSource.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PXHDSource = void 0;
-var PXHDSource;
+export var PXHDSource;
 (function (PXHDSource) {
     PXHDSource["COOKIE"] = "cookie";
     PXHDSource["RISK"] = "risk";
-})(PXHDSource = exports.PXHDSource || (exports.PXHDSource = {}));
+})(PXHDSource || (PXHDSource = {}));

package/lib/pxhd/model/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./PXHD"), exports);
-__exportStar(require("./PXHDSource"), exports);
+export * from './PXHD';
+export * from './PXHDSource';

package/lib/risk_api/client/IRiskApiClient.d.ts

@@ -0,0 +1,4 @@
+import { ReadonlyContext, RiskApiData } from '../../context';
+export interface IRiskApiClient<Req, Res> {
+    executeRiskApi(context: ReadonlyContext<Req, Res>): Promise<RiskApiData>;
+}

package/lib/risk_api/client/IRiskApiClient.js

@@ -0,0 +1 @@
+export {};

package/lib/risk_api/client/PostRiskApiClientBase.d.ts

@@ -0,0 +1,44 @@
+import { ReadonlyContext, RiskApiData } from '../../context';
+import { IConfiguration } from '../../config';
+import { IHttpClient, IIncomingResponse } from '../../http';
+import { RiskActivity } from '../model';
+import { IRiskResponse } from '../risk_response';
+import { IRiskApiClient } from './IRiskApiClient';
+export declare abstract class PostRiskApiClientBase<Req, Res> implements IRiskApiClient<Req, Res> {
+    private readonly config;
+    private readonly httpClient;
+    protected constructor(config: IConfiguration<Req, Res>, httpClient: IHttpClient);
+    protected abstract createRiskResponse(response: IIncomingResponse): IRiskResponse;
+    /**
+     * Builds the Risk API activity, sends the request, and returns RiskApiData with the response.
+     * @param context
+     * @returns Promise<RiskApiData>
+     */
+    executeRiskApi(context: ReadonlyContext<Req, Res>): Promise<RiskApiData>;
+    /**
+     * Creates the RiskActivity payload
+     * @param context
+     * @returns RiskActivity
+     * @protected
+     */
+    protected createRiskActivity(context: ReadonlyContext<Req, Res>): RiskActivity;
+    /**
+     * Protected function in case expansions or alterations to the risk activity are needed for certain platforms.
+     * @param riskActivity
+     * @returns RiskActivity
+     * @protected
+     */
+    protected finalizeRiskActivity(riskActivity: RiskActivity): RiskActivity;
+    private addOptionalRiskFields;
+    private addOptionalRiskFieldsToRoot;
+    private addOptionalRiskFieldsToAdditional;
+    private addProductDataToAdditional;
+    private addCustomParamsToAdditional;
+    private addTokenDataToAdditional;
+    private formatRiskHeadersField;
+    protected sendRiskActivity(riskActivity: RiskActivity, riskApiData: RiskApiData): Promise<IIncomingResponse>;
+    private getRiskUrl;
+    private getRiskHeaders;
+    private handleS2STimeout;
+    private handleS2SError;
+}

package/lib/risk_api/client/PostRiskApiClientBase.js

@@ -0,0 +1,235 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { ProductName } from '../../products';
+import { AUTHORIZATION_HEADER_NAME, CONTENT_TYPE_HEADER_NAME, ContentType, HttpMethod, OutgoingRequestImpl, } from '../../http';
+import { EnforcerErrorName, getAuthorizationHeader, ModuleMode, removeSensitiveHeaders, transferExistingProperties, } from '../../utils';
+import { RISK_API_ENDPOINT } from '../constants';
+import { RiskApiCallResult, RiskStatus, S2SErrorReason } from '../model';
+import { TokenParseResult } from '../../risk_token';
+export class PostRiskApiClientBase {
+    constructor(config, httpClient) {
+        this.config = config;
+        this.httpClient = httpClient;
+    }
+    /**
+     * Builds the Risk API activity, sends the request, and returns RiskApiData with the response.
+     * @param context
+     * @returns Promise<RiskApiData>
+     */
+    executeRiskApi(context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let response, riskResponse;
+            const riskApiData = { riskApiCallResult: RiskApiCallResult.NONE };
+            try {
+                const riskActivity = this.createRiskActivity(context);
+                response = yield this.sendRiskActivity(riskActivity, riskApiData);
+                if ((response === null || response === void 0 ? void 0 : response.status) !== 200) {
+                    return yield this.handleS2SError(riskApiData, response);
+                }
+                riskResponse = this.createRiskResponse(response);
+                riskApiData.riskResponse = riskResponse;
+                if (!(yield riskResponse.validate())) {
+                    return yield this.handleS2SError(riskApiData, response);
+                }
+                this.config.logger.debug(`received risk response, score: ${riskResponse.score}, rtt: ${riskApiData.riskRtt}`);
+                return riskApiData;
+            }
+            catch (err) {
+                if (err.name === EnforcerErrorName.ENFORCER_TIMEOUT_ERROR) {
+                    return this.handleS2STimeout(riskApiData);
+                }
+                this.config.logger.error(`caught error in risk api: ${err} - ${JSON.stringify(context.requestData.url)}`);
+                return yield this.handleS2SError(riskApiData, response, err);
+            }
+        });
+    }
+    /**
+     * Creates the RiskActivity payload
+     * @param context
+     * @returns RiskActivity
+     * @protected
+     */
+    createRiskActivity(context) {
+        var _a, _b, _c;
+        const riskActivity = {
+            request: {
+                ip: context.requestData.ip,
+                headers: this.formatRiskHeadersField(context.requestData.headers),
+                url: context.requestData.url.href,
+            },
+            additional: {
+                s2s_call_reason: ((_a = context.reasons) === null || _a === void 0 ? void 0 : _a[ProductName.BOT_DEFENDER]) ||
+                    ((_b = context.reasons) === null || _b === void 0 ? void 0 : _b[ProductName.CREDENTIAL_INTELLIGENCE]),
+                module_version: this.config.moduleVersion,
+                http_method: context.requestData.method,
+                http_version: context.requestData.httpVersion,
+                risk_mode: ((_c = context.productData.bd) === null || _c === void 0 ? void 0 : _c.isMonitoredRequest) ? ModuleMode.MONITOR : ModuleMode.ACTIVE_BLOCKING,
+                cookie_origin: context.tokenOrigin,
+                request_cookie_names: context.requestData.requestCookieNames.concat(),
+                request_id: context.requestId,
+            },
+        };
+        this.addOptionalRiskFields(riskActivity, context);
+        return this.finalizeRiskActivity(riskActivity);
+    }
+    /**
+     * Protected function in case expansions or alterations to the risk activity are needed for certain platforms.
+     * @param riskActivity
+     * @returns RiskActivity
+     * @protected
+     */
+    finalizeRiskActivity(riskActivity) {
+        return riskActivity;
+    }
+    addOptionalRiskFields(riskActivity, context) {
+        this.addOptionalRiskFieldsToRoot(riskActivity, context);
+        this.addOptionalRiskFieldsToAdditional(riskActivity, context);
+        this.addProductDataToAdditional(riskActivity, context.productData);
+        this.addTokenDataToAdditional(riskActivity, context.tokenData);
+        this.addCustomParamsToAdditional(riskActivity, context);
+    }
+    addOptionalRiskFieldsToRoot(riskActivity, context) {
+        var _a;
+        transferExistingProperties(context, riskActivity, {
+            vid: 'vid',
+            uuid: 'uuid',
+        });
+        if ((_a = context.pxhd) === null || _a === void 0 ? void 0 : _a.value) {
+            riskActivity.pxhd = context.pxhd.value;
+        }
+    }
+    addOptionalRiskFieldsToAdditional(riskActivity, context) {
+        transferExistingProperties(context, riskActivity.additional, {
+            vidSource: 'enforcer_vid_source',
+            graphqlData: 'graphql_operations',
+        });
+        transferExistingProperties(context.serverData, riskActivity.additional, {
+            region: 'server_info_region',
+            datacenter: 'server_info_datacenter',
+        });
+        transferExistingProperties(context.tlsData, riskActivity.additional, {
+            tlsProtocol: 'tls_protocol',
+            tlsServer: 'tls_server',
+            tlsCipher: 'tls_cipher',
+            tlsCiphersSha: 'tls_ciphers_sha',
+            tlsExtensionSha: 'tls_extension_sha',
+            tlsPreferredCiphers: 'tls_preferred_ciphers',
+            tlsJa3Fingerprint: 'tls_ja3_fingerprint',
+        });
+    }
+    addProductDataToAdditional(riskActivity, productData) {
+        transferExistingProperties(productData.ad, riskActivity.additional, {
+            appUserId: 'app_user_id',
+            additionalFields: 'jwt_additional_fields',
+            crossTabSession: 'cross_tab_session',
+        });
+        transferExistingProperties(productData.ci, riskActivity.additional, {
+            hashedUsername: 'user',
+            hashedPassword: 'pass',
+            ciVersion: 'ci_version',
+            ssoStep: 'sso_step',
+        });
+    }
+    addCustomParamsToAdditional(riskActivity, context) {
+        if (context.customParameters) {
+            Object.assign(riskActivity.additional, context.customParameters);
+        }
+    }
+    addTokenDataToAdditional(riskActivity, { token, mobileData }) {
+        if (token) {
+            if (token.isValid()) {
+                riskActivity.additional.px_cookie = token.getPayloadString();
+                riskActivity.additional.px_cookie_hmac = token.hmac;
+            }
+            else {
+                riskActivity.additional.px_orig_cookie = token.getTokenString();
+            }
+        }
+        if (mobileData) {
+            transferExistingProperties(mobileData, riskActivity.additional, {
+                originalToken: 'original_token',
+                decodedOriginalToken: 'px_decoded_original_token',
+            });
+            if (mobileData.originalTokenParseResult === TokenParseResult.DECRYPTION_FAILED) {
+                riskActivity.additional.original_token_error = 'cookie_decryption_failed';
+            }
+            else if (mobileData.originalTokenParseResult === TokenParseResult.VALIDATION_FAILED) {
+                riskActivity.additional.original_token_error = 'cookie_validation_failed';
+            }
+        }
+    }
+    formatRiskHeadersField(headers) {
+        const headersWithoutSensitive = removeSensitiveHeaders(headers, this.config.sensitiveHeaders);
+        return Object.entries(headersWithoutSensitive).flatMap(([key, values]) => values.map((value) => ({
+            name: key,
+            value: value,
+        })));
+    }
+    sendRiskActivity(riskActivity, riskApiData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const url = this.getRiskUrl();
+            const headers = this.getRiskHeaders();
+            const body = JSON.stringify(riskActivity);
+            const method = HttpMethod.POST;
+            const riskRequest = new OutgoingRequestImpl({ url, method, headers, body });
+            this.config.logger.debug(`sending risk api to ${url}`);
+            const startTime = Date.now();
+            const response = yield this.httpClient.send(riskRequest, { timeoutMs: this.config.s2sTimeout });
+            const endTime = Date.now();
+            riskApiData.riskApiCallResult = RiskApiCallResult.SUCCESSFUL;
+            riskApiData.riskRtt = endTime - startTime;
+            return response;
+        });
+    }
+    getRiskUrl() {
+        return `${this.config.backendScoreApiUrl}${RISK_API_ENDPOINT}`;
+    }
+    getRiskHeaders() {
+        return {
+            [CONTENT_TYPE_HEADER_NAME]: [ContentType.APPLICATION_JSON],
+            [AUTHORIZATION_HEADER_NAME]: [getAuthorizationHeader(this.config.authToken)],
+        };
+    }
+    handleS2STimeout(riskApiData) {
+        riskApiData.riskApiCallResult = RiskApiCallResult.TIMEOUT;
+        return riskApiData;
+    }
+    handleS2SError(riskApiData, response, error) {
+        var _a, _b, _c;
+        return __awaiter(this, void 0, void 0, function* () {
+            riskApiData.riskApiCallResult = RiskApiCallResult.ERROR;
+            riskApiData.errorReason = S2SErrorReason.UNKNOWN_ERROR;
+            if (response || riskApiData.riskResponse) {
+                riskApiData.errorHttpStatus = response.status;
+                riskApiData.errorMessage = ((_a = riskApiData.riskResponse) === null || _a === void 0 ? void 0 : _a.message) || `response body: ${yield response.text()}`;
+                if (response.status === 200) {
+                    if (((_b = riskApiData.riskResponse) === null || _b === void 0 ? void 0 : _b.status) === RiskStatus.FAILURE) {
+                        riskApiData.errorReason = S2SErrorReason.REQUEST_FAILED_ON_SERVER;
+                    }
+                    else if (!(yield ((_c = riskApiData.riskResponse) === null || _c === void 0 ? void 0 : _c.validate()))) {
+                        riskApiData.errorReason = S2SErrorReason.INVALID_RESPONSE;
+                    }
+                }
+                else if (response.status >= 400 && response.status < 500) {
+                    riskApiData.errorReason = S2SErrorReason.BAD_REQUEST;
+                }
+                else if (response.status >= 500 && response.status < 600) {
+                    riskApiData.errorReason = S2SErrorReason.SERVER_ERROR;
+                }
+            }
+            if (error) {
+                const errorMessage = `${error}`;
+                const existingMessage = riskApiData.errorMessage;
+                riskApiData.errorMessage = existingMessage ? `${existingMessage}, ${errorMessage}` : errorMessage;
+            }
+            return riskApiData;
+        });
+    }
+}

package/lib/risk_api/client/PostRiskApiClientV2.d.ts

@@ -0,0 +1,8 @@
+import { IConfiguration } from '../../config';
+import { IHttpClient, IIncomingResponse } from '../../http';
+import { IRiskResponse } from '../risk_response';
+import { PostRiskApiClientBase } from './PostRiskApiClientBase';
+export declare class PostRiskApiClientV2<Req, Res> extends PostRiskApiClientBase<Req, Res> {
+    constructor(config: IConfiguration<Req, Res>, httpClient: IHttpClient);
+    protected createRiskResponse(response: IIncomingResponse): IRiskResponse;
+}

package/lib/risk_api/client/PostRiskApiClientV2.js

@@ -0,0 +1,10 @@
+import { DefaultRiskResponseV2 } from '../risk_response';
+import { PostRiskApiClientBase } from './PostRiskApiClientBase';
+export class PostRiskApiClientV2 extends PostRiskApiClientBase {
+    constructor(config, httpClient) {
+        super(config, httpClient);
+    }
+    createRiskResponse(response) {
+        return new DefaultRiskResponseV2(response);
+    }
+}

package/lib/risk_api/client/PostRiskApiClientV3.d.ts

@@ -0,0 +1,8 @@
+import { PostRiskApiClientBase } from './PostRiskApiClientBase';
+import { IHttpClient, IIncomingResponse } from '../../http';
+import { IRiskResponse } from '../risk_response';
+import { IConfiguration } from '../../config';
+export declare class PostRiskApiClientV3<Req, Res> extends PostRiskApiClientBase<Req, Res> {
+    constructor(config: IConfiguration<Req, Res>, httpClient: IHttpClient);
+    protected createRiskResponse(response: IIncomingResponse): IRiskResponse;
+}

package/lib/risk_api/client/PostRiskApiClientV3.js

@@ -0,0 +1,10 @@
+import { PostRiskApiClientBase } from './PostRiskApiClientBase';
+import { DefaultRiskResponseV3 } from '../risk_response';
+export class PostRiskApiClientV3 extends PostRiskApiClientBase {
+    constructor(config, httpClient) {
+        super(config, httpClient);
+    }
+    createRiskResponse(response) {
+        return new DefaultRiskResponseV3(response);
+    }
+}

package/lib/risk_api/client/index.d.ts

@@ -0,0 +1,4 @@
+export * from './IRiskApiClient';
+export * from './PostRiskApiClientBase';
+export * from './PostRiskApiClientV2';
+export * from './PostRiskApiClientV3';

package/lib/risk_api/client/index.js

@@ -0,0 +1,4 @@
+export * from './IRiskApiClient';
+export * from './PostRiskApiClientBase';
+export * from './PostRiskApiClientV2';
+export * from './PostRiskApiClientV3';

package/lib/risk_api/constants.js

@@ -1,4 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RISK_API_ENDPOINT = void 0;
-exports.RISK_API_ENDPOINT = '/api/v3/risk';
+export const RISK_API_ENDPOINT = '/api/v3/risk';

package/lib/risk_api/index.d.ts

@@ -1,13 +1,4 @@
-export { RiskStatus } from './model/RiskStatus';
-export { RiskResponseV3 } from './model/RiskResponseV3';
-export { RiskResponseV2 } from './model/RiskResponseV2';
-export { RiskActivity } from './model/RiskActivity';
-export { IRiskResponseHandler } from './risk_response_handler/IRiskResponseHandler';
-export { RiskResponseHandlerBase } from './risk_response_handler/RiskResponseHandlerBase';
-export { RiskResponseV2Handler } from './risk_response_handler/RiskResponseV2Handler';
-export { RiskResponseV3Handler } from './risk_response_handler/RiskResponseV3Handler';
-export { S2SErrorHandler } from './S2SErrorHandler';
-export { PostRiskApiClient } from './PostRiskApiClient';
-export { S2SCallReason } from './S2SCallReason';
-export { S2SErrorReason } from './S2SErrorReason';
+export * from './model';
+export * from './risk_response';
+export * from './client';
 export * from './constants';

package/lib/risk_api/index.js

@@ -1,34 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.S2SErrorReason = exports.S2SCallReason = exports.PostRiskApiClient = exports.S2SErrorHandler = exports.RiskResponseV3Handler = exports.RiskResponseV2Handler = exports.RiskResponseHandlerBase = exports.RiskStatus = void 0;
-var RiskStatus_1 = require("./model/RiskStatus");
-Object.defineProperty(exports, "RiskStatus", { enumerable: true, get: function () { return RiskStatus_1.RiskStatus; } });
-var RiskResponseHandlerBase_1 = require("./risk_response_handler/RiskResponseHandlerBase");
-Object.defineProperty(exports, "RiskResponseHandlerBase", { enumerable: true, get: function () { return RiskResponseHandlerBase_1.RiskResponseHandlerBase; } });
-var RiskResponseV2Handler_1 = require("./risk_response_handler/RiskResponseV2Handler");
-Object.defineProperty(exports, "RiskResponseV2Handler", { enumerable: true, get: function () { return RiskResponseV2Handler_1.RiskResponseV2Handler; } });
-var RiskResponseV3Handler_1 = require("./risk_response_handler/RiskResponseV3Handler");
-Object.defineProperty(exports, "RiskResponseV3Handler", { enumerable: true, get: function () { return RiskResponseV3Handler_1.RiskResponseV3Handler; } });
-var S2SErrorHandler_1 = require("./S2SErrorHandler");
-Object.defineProperty(exports, "S2SErrorHandler", { enumerable: true, get: function () { return S2SErrorHandler_1.S2SErrorHandler; } });
-var PostRiskApiClient_1 = require("./PostRiskApiClient");
-Object.defineProperty(exports, "PostRiskApiClient", { enumerable: true, get: function () { return PostRiskApiClient_1.PostRiskApiClient; } });
-var S2SCallReason_1 = require("./S2SCallReason");
-Object.defineProperty(exports, "S2SCallReason", { enumerable: true, get: function () { return S2SCallReason_1.S2SCallReason; } });
-var S2SErrorReason_1 = require("./S2SErrorReason");
-Object.defineProperty(exports, "S2SErrorReason", { enumerable: true, get: function () { return S2SErrorReason_1.S2SErrorReason; } });
-__exportStar(require("./constants"), exports);
+export * from './model';
+export * from './risk_response';
+export * from './client';
+export * from './constants';

package/lib/risk_api/model/RiskActivity.d.ts

@@ -2,7 +2,7 @@ import { ModuleMode, VidSource } from '../../utils';
 import { TokenOrigin } from '../../risk_token';
 import { CustomParameters } from '../../custom_parameters';
 import { GraphQLData } from '../../graphql/';
-import { S2SCallReason } from '../S2SCallReason';
+import { CredentialIntelligenceVersion, SsoStep } from '../../products';
 export declare type HeaderEntry = {
     name: string;
     value: string;
@@ -15,7 +15,7 @@ export declare type RiskRequestData = {
 export declare type RiskAdditionalData = {
     request_id: string;
     module_version: string;
-    s2s_call_reason: S2SCallReason;
+    s2s_call_reason: string;
     risk_mode: ModuleMode;
     http_method: string;
     http_version?: string;
@@ -42,6 +42,10 @@ export declare type RiskAdditionalData = {
     app_user_id?: string;
     jwt_additional_fields?: string[];
     graphql_operations?: GraphQLData[];
+    user?: string;
+    pass?: string;
+    ci_version?: CredentialIntelligenceVersion;
+    sso_step?: SsoStep;
 } & CustomParameters;
 export declare type RiskActivity = {
     vid?: string;

package/lib/risk_api/model/RiskActivity.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/lib/risk_api/model/RiskApiCallResult.d.ts

@@ -0,0 +1,6 @@
+export declare enum RiskApiCallResult {
+    NONE = -1,
+    SUCCESSFUL = 0,
+    ERROR = 1,
+    TIMEOUT = 2
+}

package/lib/risk_api/model/RiskApiCallResult.js

@@ -0,0 +1,7 @@
+export var RiskApiCallResult;
+(function (RiskApiCallResult) {
+    RiskApiCallResult[RiskApiCallResult["NONE"] = -1] = "NONE";
+    RiskApiCallResult[RiskApiCallResult["SUCCESSFUL"] = 0] = "SUCCESSFUL";
+    RiskApiCallResult[RiskApiCallResult["ERROR"] = 1] = "ERROR";
+    RiskApiCallResult[RiskApiCallResult["TIMEOUT"] = 2] = "TIMEOUT";
+})(RiskApiCallResult || (RiskApiCallResult = {}));

package/lib/risk_api/model/RiskStatus.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RiskStatus = void 0;
-var RiskStatus;
+export var RiskStatus;
 (function (RiskStatus) {
     RiskStatus[RiskStatus["FAILURE"] = -1] = "FAILURE";
     RiskStatus[RiskStatus["SUCCESS"] = 0] = "SUCCESS";
-})(RiskStatus = exports.RiskStatus || (exports.RiskStatus = {}));
+})(RiskStatus || (RiskStatus = {}));

package/lib/risk_api/{S2SErrorReason.js → model/S2SErrorReason.js}

@@ -1,7 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.S2SErrorReason = void 0;
-var S2SErrorReason;
+export var S2SErrorReason;
 (function (S2SErrorReason) {
     S2SErrorReason["UNABLE_TO_SEND_REQUEST"] = "unable_to_send_request";
     S2SErrorReason["BAD_REQUEST"] = "bad_request";
@@ -9,4 +6,4 @@ var S2SErrorReason;
     S2SErrorReason["INVALID_RESPONSE"] = "invalid_response";
     S2SErrorReason["REQUEST_FAILED_ON_SERVER"] = "request_failed_on_server";
     S2SErrorReason["UNKNOWN_ERROR"] = "unknown_error";
-})(S2SErrorReason = exports.S2SErrorReason || (exports.S2SErrorReason = {}));
+})(S2SErrorReason || (S2SErrorReason = {}));

package/lib/risk_api/model/index.d.ts

@@ -0,0 +1,4 @@
+export * from './RiskActivity';
+export * from './RiskStatus';
+export * from './RiskApiCallResult';
+export * from './S2SErrorReason';

package/lib/risk_api/model/index.js

@@ -0,0 +1,4 @@
+export * from './RiskActivity';
+export * from './RiskStatus';
+export * from './RiskApiCallResult';
+export * from './S2SErrorReason';

package/lib/risk_api/risk_response/IRiskResponse.d.ts

@@ -0,0 +1,15 @@
+import { AsyncOrSync } from 'ts-essentials';
+import { BlockAction } from '../../blocker';
+import { PXDE } from '../../pxde';
+import { RiskStatus } from '../model';
+export interface IRiskResponse {
+    readonly status: RiskStatus;
+    readonly score: number;
+    readonly action: BlockAction;
+    readonly uuid: string;
+    readonly pxhd?: string;
+    readonly pxhdDomain?: string;
+    readonly message?: string;
+    readonly dataEnrichment?: PXDE;
+    validate(): AsyncOrSync<boolean>;
+}

package/lib/risk_api/risk_response/IRiskResponse.js

@@ -0,0 +1 @@
+export {};