perimeterx-js-core 0.5.1 → 0.6.0

package/lib/http/interfaces/ReadOnlyHeaders.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.joinHeaderValues = exports.toReadOnlyHeaders = void 0;
-var toReadOnlyHeaders = function (headers) {
-    var readonlyHeaders = {};
-    headers.forEach(function (headerValue, headerName) {
-        var current = readonlyHeaders[headerName] || [];
-        readonlyHeaders[headerName] = current.concat([headerValue]);
-    });
-    return readonlyHeaders;
-};
-exports.toReadOnlyHeaders = toReadOnlyHeaders;
-var joinHeaderValues = function (headers) {
-    return Object.fromEntries(Object.entries(headers).map(function (_a) {
-        var name = _a[0], values = _a[1];
-        return [name, values.join(', ')];
-    }));
-};
-exports.joinHeaderValues = joinHeaderValues;

package/lib/risk_api/PostRiskApiClient.d.ts

@@ -1,43 +0,0 @@
-import { IContext } from '../context';
-import { IConfiguration } from '../config';
-import { RiskActivity } from './model/RiskActivity';
-import { IScoreRetriever } from '../utils';
-import { IRiskResponseHandler } from './risk_response_handler/IRiskResponseHandler';
-import { RiskResponseV2 } from './model/RiskResponseV2';
-import { RiskResponseV3 } from './model/RiskResponseV3';
-import { IHttpClient } from '../http';
-import { IIncomingResponse } from '../http';
-export declare class PostRiskApiClient<RiskResponseType extends RiskResponseV2 | RiskResponseV3> implements IScoreRetriever {
-    private readonly config;
-    private readonly httpClient;
-    private readonly s2sErrorHandler;
-    private readonly riskResponseHandler;
-    constructor(config: IConfiguration, httpClient: IHttpClient, riskResponseHandler: IRiskResponseHandler<RiskResponseType>);
-    shouldRetrieveScore(context: IContext): boolean;
-    private unsetScoreFields;
-    retrieveScore(context: IContext): Promise<boolean>;
-    /**
-     * Creates the RiskActivity payload
-     * @param context
-     * @returns RiskActivity
-     * @protected
-     */
-    protected createRiskActivity(context: IContext): RiskActivity;
-    /**
-     * Protected function in case expansions or alterations to the risk activity are needed for certain platforms.
-     * @param riskActivity
-     * @returns RiskActivity
-     * @protected
-     */
-    protected finalizeRiskActivity(riskActivity: RiskActivity): RiskActivity;
-    private addOptionalRiskFields;
-    private addOptionalRiskFieldsToRoot;
-    private addOptionalRiskFieldsToAdditional;
-    private addCustomParamsToAdditional;
-    private addCookieRiskFieldsToAdditional;
-    private formatRiskHeadersField;
-    protected sendRiskActivity(context: IContext, riskActivity: RiskActivity): Promise<IIncomingResponse>;
-    private getRiskUrl;
-    private getRiskHeaders;
-    private handleS2STimeout;
-}

package/lib/risk_api/PostRiskApiClient.js

@@ -1,265 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PostRiskApiClient = void 0;
-var risk_token_1 = require("../risk_token");
-var http_1 = require("../http");
-var utils_1 = require("../utils");
-var S2SCallReason_1 = require("./S2SCallReason");
-var S2SErrorHandler_1 = require("./S2SErrorHandler");
-var constants_1 = require("./constants");
-var http_2 = require("../http");
-var http_3 = require("../http");
-var PostRiskApiClient = /** @class */ (function () {
-    function PostRiskApiClient(config, httpClient, riskResponseHandler) {
-        this.config = config;
-        this.httpClient = httpClient;
-        this.riskResponseHandler = riskResponseHandler;
-        this.s2sErrorHandler = new S2SErrorHandler_1.S2SErrorHandler();
-    }
-    PostRiskApiClient.prototype.shouldRetrieveScore = function (context) {
-        if (context.riskApiData.s2sCallReason) {
-            if (context.riskApiData.s2sCallReason === S2SCallReason_1.S2SCallReason.NO_COOKIE && context.pxhd) {
-                context.riskApiData.s2sCallReason = S2SCallReason_1.S2SCallReason.NO_COOKIE_WITH_VID;
-            }
-            this.unsetScoreFields(context);
-            return true;
-        }
-        if (context.passReason) {
-            if (context.isSensitiveRequest && context.passReason === utils_1.PassReason.COOKIE) {
-                context.riskApiData.s2sCallReason = S2SCallReason_1.S2SCallReason.SENSITIVE_ROUTE;
-                this.unsetScoreFields(context);
-                return true;
-            }
-            return false;
-        }
-        if (context.blockReason) {
-            return false;
-        }
-        context.riskApiData.s2sCallReason = context.pxhd ? S2SCallReason_1.S2SCallReason.NO_COOKIE_WITH_VID : S2SCallReason_1.S2SCallReason.NO_COOKIE;
-        this.unsetScoreFields(context);
-        return true;
-    };
-    PostRiskApiClient.prototype.unsetScoreFields = function (context) {
-        context.passReason = undefined;
-        context.blockReason = undefined;
-        context.score = undefined;
-    };
-    PostRiskApiClient.prototype.retrieveScore = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            var response, riskResponse, riskActivity, err_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 6, , 8]);
-                        riskActivity = this.createRiskActivity(context);
-                        return [4 /*yield*/, this.sendRiskActivity(context, riskActivity)];
-                    case 1:
-                        response = _a.sent();
-                        if (!((response === null || response === void 0 ? void 0 : response.status) !== 200)) return [3 /*break*/, 3];
-                        return [4 /*yield*/, this.s2sErrorHandler.handleS2SError(context, response, null, null)];
-                    case 2:
-                        _a.sent();
-                        return [2 /*return*/, false];
-                    case 3: return [4 /*yield*/, response.json()];
-                    case 4:
-                        riskResponse = (_a.sent());
-                        return [4 /*yield*/, this.riskResponseHandler.handleRiskResponse(context, response, riskResponse)];
-                    case 5:
-                        _a.sent();
-                        return [2 /*return*/, true];
-                    case 6:
-                        err_1 = _a.sent();
-                        if (err_1.name === utils_1.EnforcerErrorName.ENFORCER_TIMEOUT_ERROR) {
-                            this.handleS2STimeout(context);
-                            return [2 /*return*/, false];
-                        }
-                        this.config.logger.error("Caught error on Risk API: ".concat(err_1));
-                        return [4 /*yield*/, this.s2sErrorHandler.handleS2SError(context, response, riskResponse, err_1)];
-                    case 7:
-                        _a.sent();
-                        return [2 /*return*/, false];
-                    case 8: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Creates the RiskActivity payload
-     * @param context
-     * @returns RiskActivity
-     * @protected
-     */
-    PostRiskApiClient.prototype.createRiskActivity = function (context) {
-        var riskActivity = {
-            request: {
-                ip: context.requestData.ip,
-                headers: this.formatRiskHeadersField(context.requestData.headers),
-                url: context.requestData.url.href,
-            },
-            additional: {
-                s2s_call_reason: context.riskApiData.s2sCallReason,
-                module_version: this.config.moduleVersion,
-                http_method: context.requestData.method,
-                http_version: context.requestData.httpVersion,
-                risk_mode: context.isMonitoredRequest ? utils_1.ModuleMode.MONITOR : utils_1.ModuleMode.ACTIVE_BLOCKING,
-                cookie_origin: context.tokenOrigin || risk_token_1.TokenOrigin.COOKIE,
-                request_cookie_names: context.requestData.requestCookieNames,
-                request_id: context.requestId,
-            },
-        };
-        this.addOptionalRiskFields(riskActivity, context);
-        return this.finalizeRiskActivity(riskActivity);
-    };
-    /**
-     * Protected function in case expansions or alterations to the risk activity are needed for certain platforms.
-     * @param riskActivity
-     * @returns RiskActivity
-     * @protected
-     */
-    PostRiskApiClient.prototype.finalizeRiskActivity = function (riskActivity) {
-        return riskActivity;
-    };
-    PostRiskApiClient.prototype.addOptionalRiskFields = function (riskActivity, context) {
-        this.addOptionalRiskFieldsToRoot(riskActivity, context);
-        this.addOptionalRiskFieldsToAdditional(riskActivity, context);
-        this.addCookieRiskFieldsToAdditional(riskActivity, context);
-        this.addCustomParamsToAdditional(riskActivity, context);
-    };
-    PostRiskApiClient.prototype.addOptionalRiskFieldsToRoot = function (riskActivity, context) {
-        if (context.vid) {
-            riskActivity.vid = context.vid;
-        }
-        if (context.uuid) {
-            riskActivity.uuid = context.uuid;
-        }
-        if (context.pxhd) {
-            riskActivity.pxhd = context.pxhd.value;
-        }
-    };
-    PostRiskApiClient.prototype.addOptionalRiskFieldsToAdditional = function (riskActivity, context) {
-        (0, utils_1.transferExistingProperties)(context, riskActivity.additional, {
-            vidSource: 'enforcer_vid_source',
-            graphqlData: 'graphql_operations',
-        });
-        (0, utils_1.transferExistingProperties)(context.serverData, riskActivity.additional, {
-            region: 'server_info_region',
-            datacenter: 'server_info_datacenter',
-        });
-        (0, utils_1.transferExistingProperties)(context.mobileData, riskActivity.additional, {
-            originalToken: 'original_token',
-            originalTokenError: 'original_token_error',
-            decodedOriginalToken: 'px_decoded_original_token',
-        });
-        (0, utils_1.transferExistingProperties)(context.tlsData, riskActivity.additional, {
-            tlsProtocol: 'tls_protocol',
-            tlsServer: 'tls_server',
-            tlsCipher: 'tls_cipher',
-            tlsCiphersSha: 'tls_ciphers_sha',
-            tlsExtensionSha: 'tls_extension_sha',
-            tlsPreferredCiphers: 'tls_preferred_ciphers',
-            tlsJa3Fingerprint: 'tls_ja3_fingerprint',
-        });
-    };
-    PostRiskApiClient.prototype.addCustomParamsToAdditional = function (riskActivity, context) {
-        if (context.customParameters) {
-            Object.assign(riskActivity.additional, context.customParameters);
-        }
-    };
-    PostRiskApiClient.prototype.addCookieRiskFieldsToAdditional = function (riskActivity, _a) {
-        var riskToken = _a.riskToken;
-        if (riskToken) {
-            if (riskToken.isValid()) {
-                riskActivity.additional.px_cookie = riskToken.getPayloadString();
-                riskActivity.additional.px_cookie_hmac = riskToken.hmac;
-            }
-            else {
-                riskActivity.additional.px_orig_cookie = riskToken.getCookieString();
-            }
-        }
-    };
-    PostRiskApiClient.prototype.formatRiskHeadersField = function (headers) {
-        var headersWithoutSensitive = (0, utils_1.removeSensitiveHeaders)(headers, this.config.sensitiveHeaders);
-        return Object.entries(headersWithoutSensitive).flatMap(function (_a) {
-            var key = _a[0], values = _a[1];
-            return values.map(function (value) { return ({
-                name: key,
-                value: value,
-            }); });
-        });
-    };
-    PostRiskApiClient.prototype.sendRiskActivity = function (context, riskActivity) {
-        return __awaiter(this, void 0, void 0, function () {
-            var url, headers, body, method, riskRequest, startTime, response, endTime;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        url = this.getRiskUrl();
-                        headers = this.getRiskHeaders();
-                        body = JSON.stringify(riskActivity);
-                        method = http_2.HttpMethod.POST;
-                        riskRequest = new http_3.OutgoingRequestImpl({ url: url, method: method, headers: headers, body: body });
-                        this.config.logger.debug("sending risk api to ".concat(url));
-                        startTime = Date.now();
-                        return [4 /*yield*/, this.httpClient.send(riskRequest, { timeoutMs: this.config.s2sTimeout })];
-                    case 1:
-                        response = _a.sent();
-                        endTime = Date.now();
-                        context.riskApiData.madeApiCall = true;
-                        context.riskApiData.riskRtt = endTime - startTime;
-                        return [2 /*return*/, response];
-                }
-            });
-        });
-    };
-    PostRiskApiClient.prototype.getRiskUrl = function () {
-        return "".concat(this.config.backendScoreApiUrl).concat(constants_1.RISK_API_ENDPOINT);
-    };
-    PostRiskApiClient.prototype.getRiskHeaders = function () {
-        var _a;
-        return _a = {},
-            _a[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.APPLICATION_JSON],
-            _a[http_1.AUTHORIZATION_HEADER_NAME] = [(0, utils_1.getAuthorizationHeader)(this.config.authToken)],
-            _a;
-    };
-    PostRiskApiClient.prototype.handleS2STimeout = function (context) {
-        context.passReason = utils_1.PassReason.S2S_TIMEOUT;
-    };
-    return PostRiskApiClient;
-}());
-exports.PostRiskApiClient = PostRiskApiClient;

package/lib/risk_api/S2SCallReason.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.S2SCallReason = void 0;
-var S2SCallReason;
-(function (S2SCallReason) {
-    S2SCallReason["COOKIE_EXPIRED"] = "cookie_expired";
-    S2SCallReason["COOKIE_DECRYPTION_FAILED"] = "cookie_decryption_failed";
-    S2SCallReason["COOKIE_VALIDATION_FAILED"] = "cookie_validation_failed";
-    S2SCallReason["NO_COOKIE_WITH_VID"] = "no_cookie_w_vid";
-    S2SCallReason["NO_COOKIE"] = "no_cookie";
-    S2SCallReason["SENSITIVE_ROUTE"] = "sensitive_route";
-    S2SCallReason["MOBILE_ERROR_NO_COOKIE"] = "mobile_error_1";
-    S2SCallReason["MOBILE_ERROR_CONNECTION_ERROR"] = "mobile_error_2";
-    S2SCallReason["MOBILE_ERROR_CERTIFICATE_PINNING_ERROR"] = "mobile_error_3";
-    S2SCallReason["MOBILE_ERROR_BYPASS"] = "mobile_error_4";
-})(S2SCallReason = exports.S2SCallReason || (exports.S2SCallReason = {}));

package/lib/risk_api/S2SErrorHandler.d.ts

@@ -1,9 +0,0 @@
-import { IContext } from '../context';
-import { RiskResponseV2 } from './model/RiskResponseV2';
-import { RiskResponseV3 } from './model/RiskResponseV3';
-import { IIncomingResponse } from '../http';
-export declare class S2SErrorHandler {
-    handleS2SError(context: IContext, response?: IIncomingResponse, responseBody?: RiskResponseV2 | RiskResponseV3, error?: Error): Promise<void>;
-    private enrichS2SErrorWithResponse;
-    private enrichS2SErrorWithError;
-}

package/lib/risk_api/S2SErrorHandler.js

@@ -1,121 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.S2SErrorHandler = void 0;
-var utils_1 = require("../utils");
-var S2SErrorReason_1 = require("./S2SErrorReason");
-var RiskStatus_1 = require("./model/RiskStatus");
-var S2SErrorHandler = /** @class */ (function () {
-    function S2SErrorHandler() {
-    }
-    S2SErrorHandler.prototype.handleS2SError = function (context, response, responseBody, error) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        context.passReason = utils_1.PassReason.S2S_ERROR;
-                        context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.UNKNOWN_ERROR;
-                        if (!(response || responseBody)) return [3 /*break*/, 2];
-                        return [4 /*yield*/, this.enrichS2SErrorWithResponse(context, response, responseBody)];
-                    case 1:
-                        _a.sent();
-                        _a.label = 2;
-                    case 2:
-                        if (error) {
-                            this.enrichS2SErrorWithError(context, error);
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    S2SErrorHandler.prototype.enrichS2SErrorWithResponse = function (context, response, responseBody) {
-        return __awaiter(this, void 0, void 0, function () {
-            var message, _a, _b, e_1;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0:
-                        _c.trys.push([0, 4, , 5]);
-                        _a = "response body: ".concat;
-                        if (!responseBody) return [3 /*break*/, 1];
-                        _b = JSON.stringify(responseBody);
-                        return [3 /*break*/, 3];
-                    case 1: return [4 /*yield*/, response.text()];
-                    case 2:
-                        _b = _c.sent();
-                        _c.label = 3;
-                    case 3:
-                        message = _a.apply("response body: ", [_b]);
-                        return [3 /*break*/, 5];
-                    case 4:
-                        e_1 = _c.sent();
-                        message = "error: ".concat(e_1, ", response body: ").concat(responseBody ? JSON.stringify(responseBody) : 'empty');
-                        return [3 /*break*/, 5];
-                    case 5:
-                        context.riskApiData.errorMessage = message;
-                        context.riskApiData.s2sErrorHttpStatus = response.status;
-                        if (response.status >= 400 && response.status < 500) {
-                            context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.BAD_REQUEST;
-                        }
-                        else if (response.status >= 500 && response.status < 600) {
-                            context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.SERVER_ERROR;
-                        }
-                        else if (response.status === 200) {
-                            if ((responseBody === null || responseBody === void 0 ? void 0 : responseBody.status) === RiskStatus_1.RiskStatus.FAILURE) {
-                                context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.REQUEST_FAILED_ON_SERVER;
-                            }
-                            else {
-                                context.riskApiData.s2sErrorReason = S2SErrorReason_1.S2SErrorReason.INVALID_RESPONSE;
-                            }
-                        }
-                        if (responseBody === null || responseBody === void 0 ? void 0 : responseBody.uuid) {
-                            context.uuid = responseBody.uuid;
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    S2SErrorHandler.prototype.enrichS2SErrorWithError = function (context, error) {
-        var errorMessage = "".concat(error);
-        var existingMessage = context.riskApiData.errorMessage;
-        context.riskApiData.errorMessage = existingMessage ? "".concat(existingMessage, ", ").concat(errorMessage) : errorMessage;
-    };
-    return S2SErrorHandler;
-}());
-exports.S2SErrorHandler = S2SErrorHandler;

package/lib/risk_api/model/RiskResponseV2.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/model/RiskResponseV3.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/risk_response_handler/IRiskResponseHandler.d.ts

@@ -1,5 +0,0 @@
-import { IContext } from '../../context';
-import { IIncomingResponse } from '../../http';
-export interface IRiskResponseHandler<RiskResponseType> {
-    handleRiskResponse(context: IContext, response: IIncomingResponse, riskResponse: RiskResponseType): Promise<void>;
-}

package/lib/risk_api/risk_response_handler/IRiskResponseHandler.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/lib/risk_api/risk_response_handler/RiskResponseHandlerBase.d.ts

@@ -1,16 +0,0 @@
-import { IConfiguration } from '../../config';
-import { IContext } from '../../context';
-import { IRiskResponseHandler } from './IRiskResponseHandler';
-import { RiskResponseV2 } from '../model/RiskResponseV2';
-import { RiskResponseV3 } from '../model/RiskResponseV3';
-import { IIncomingResponse } from '../../http';
-export declare abstract class RiskResponseHandlerBase<RiskResponseType extends RiskResponseV2 | RiskResponseV3> implements IRiskResponseHandler<RiskResponseType> {
-    protected readonly config: IConfiguration;
-    protected abstract isRiskResponseValid(riskResponse: RiskResponseType): boolean;
-    protected abstract extractScoreFromRiskResponse(riskResponse: RiskResponseType): number;
-    protected abstract setRiskResponseContextFields(context: IContext, riskResponse: RiskResponseType): void;
-    protected constructor(config: IConfiguration);
-    handleRiskResponse(context: IContext, response: IIncomingResponse, riskResponse: RiskResponseType): Promise<void>;
-    protected handleValidRiskResponse(context: IContext, riskResponse: RiskResponseType): void;
-    protected shouldBlock(score: number): boolean;
-}

package/lib/risk_api/risk_response_handler/RiskResponseHandlerBase.js

@@ -1,73 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RiskResponseHandlerBase = void 0;
-var block_handler_1 = require("../../block_handler");
-var utils_1 = require("../../utils");
-var RiskResponseHandlerBase = /** @class */ (function () {
-    function RiskResponseHandlerBase(config) {
-        this.config = config;
-    }
-    RiskResponseHandlerBase.prototype.handleRiskResponse = function (context, response, riskResponse) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                if (!this.isRiskResponseValid(riskResponse)) {
-                    throw new utils_1.EnforcerError('invalid risk response');
-                }
-                this.config.logger.debug("received risk response, rtt: ".concat(context.riskApiData.riskRtt));
-                this.handleValidRiskResponse(context, riskResponse);
-                return [2 /*return*/];
-            });
-        });
-    };
-    RiskResponseHandlerBase.prototype.handleValidRiskResponse = function (context, riskResponse) {
-        var score = this.extractScoreFromRiskResponse(riskResponse);
-        this.setRiskResponseContextFields(context, riskResponse);
-        if (this.shouldBlock(score)) {
-            context.blockReason = block_handler_1.BlockReason.S2S_HIGH_SCORE;
-        }
-        else {
-            context.passReason = utils_1.PassReason.S2S;
-        }
-    };
-    RiskResponseHandlerBase.prototype.shouldBlock = function (score) {
-        return score >= this.config.blockingScore;
-    };
-    return RiskResponseHandlerBase;
-}());
-exports.RiskResponseHandlerBase = RiskResponseHandlerBase;

package/lib/risk_api/risk_response_handler/RiskResponseV2Handler.d.ts

@@ -1,10 +0,0 @@
-import { IConfiguration } from '../../config';
-import { IContext } from '../../context';
-import { RiskResponseHandlerBase } from './RiskResponseHandlerBase';
-import { RiskResponseV2 } from '../model/RiskResponseV2';
-export declare class RiskResponseV2Handler extends RiskResponseHandlerBase<RiskResponseV2> {
-    constructor(config: IConfiguration);
-    protected isRiskResponseValid(riskResponse: RiskResponseV2): boolean;
-    protected extractScoreFromRiskResponse(riskResponse: RiskResponseV2): number;
-    protected setRiskResponseContextFields(context: IContext, riskResponse: RiskResponseV2): void;
-}

package/lib/risk_api/risk_response_handler/RiskResponseV2Handler.js

@@ -1,55 +0,0 @@
-"use strict";
-var __extends = (this && this.__extends) || (function () {
-    var extendStatics = function (d, b) {
-        extendStatics = Object.setPrototypeOf ||
-            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
-        return extendStatics(d, b);
-    };
-    return function (d, b) {
-        if (typeof b !== "function" && b !== null)
-            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-        extendStatics(d, b);
-        function __() { this.constructor = d; }
-        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RiskResponseV2Handler = void 0;
-var RiskStatus_1 = require("../model/RiskStatus");
-var RiskResponseHandlerBase_1 = require("./RiskResponseHandlerBase");
-var PXHDSource_1 = require("../../pxhd/model/PXHDSource");
-var RiskResponseV2Handler = /** @class */ (function (_super) {
-    __extends(RiskResponseV2Handler, _super);
-    function RiskResponseV2Handler(config) {
-        return _super.call(this, config) || this;
-    }
-    RiskResponseV2Handler.prototype.isRiskResponseValid = function (riskResponse) {
-        return (riskResponse === null || riskResponse === void 0 ? void 0 : riskResponse.status) === RiskStatus_1.RiskStatus.SUCCESS && !!(riskResponse === null || riskResponse === void 0 ? void 0 : riskResponse.cookie_cfg_block_result);
-    };
-    RiskResponseV2Handler.prototype.extractScoreFromRiskResponse = function (riskResponse) {
-        return riskResponse.cookie_cfg_block_result === '1' ? 100 : 0;
-    };
-    RiskResponseV2Handler.prototype.setRiskResponseContextFields = function (context, riskResponse) {
-        context.score = this.extractScoreFromRiskResponse(riskResponse);
-        if (riskResponse.uuid) {
-            context.uuid = riskResponse.uuid;
-        }
-        if (riskResponse.pxhd) {
-            context.pxhd = {
-                value: riskResponse.pxhd,
-                domain: riskResponse.pxhdDomain,
-                source: PXHDSource_1.PXHDSource.RISK,
-            };
-        }
-        if (riskResponse.action) {
-            context.blockAction = riskResponse.action;
-        }
-        if (riskResponse.data_enrichment) {
-            context.pxdeVerified = true;
-            context.pxde = riskResponse.data_enrichment;
-        }
-    };
-    return RiskResponseV2Handler;
-}(RiskResponseHandlerBase_1.RiskResponseHandlerBase));
-exports.RiskResponseV2Handler = RiskResponseV2Handler;