perimeterx-js-core 0.6.2 → 0.7.0

package/lib/action/ActionData.d.ts

@@ -1,5 +1,5 @@
 import { Action } from './Action';
-export declare type ActionData = {
+export type ActionData = {
     /**
      * The recommended action that should be taken by the enforcer.
      */

package/lib/action/Decision.d.ts

@@ -1,6 +1,6 @@
 import { Action } from './index';
 import { ProductName } from '../products';
-export declare type Decision = {
+export type Decision = {
     action?: Action;
     reasons?: Partial<Record<ProductName, string>>;
 };

package/lib/action/ProductAction.d.ts

@@ -1,5 +1,5 @@
 import { ActionData } from './ActionData';
 import { ProductName } from '../products';
-export declare type ProductAction = ActionData & {
+export type ProductAction = ActionData & {
     productName: ProductName;
 };

package/lib/activities/model/Activity.d.ts

@@ -1,6 +1,6 @@
 import { ActivityType } from '../ActivityType';
 import { ActivityDetails } from './ActivityDetails';
-export declare type Activity = {
+export type Activity = {
     type: ActivityType;
     timestamp: number;
     socket_ip: string;

package/lib/activities/model/ActivityDetails.d.ts

@@ -1,7 +1,7 @@
 import { GraphQLData } from '../../graphql';
 import { BlockAction } from '../../blocker';
-export declare type ActivityTypeDetails = PageRequestedActivityDetails | BlockActivityDetails | AdditionalS2SActivityDetails;
-export declare type ActivityDetails = ActivityTypeDetails & {
+export type ActivityTypeDetails = PageRequestedActivityDetails | BlockActivityDetails | AdditionalS2SActivityDetails;
+export type ActivityDetails = ActivityTypeDetails & {
     client_uuid: string;
     request_id: string;
     module_version: string;
@@ -26,20 +26,20 @@ export declare type ActivityDetails = ActivityTypeDetails & {
     app_user_id?: string;
     jwt_additional_fields?: Record<string, any>;
 };
-export declare type PageRequestedActivityDetails = {
+export type PageRequestedActivityDetails = {
     pass_reason: string;
     px_cookie?: string;
     error_message?: string;
     s2s_error_reason?: string;
     s2s_error_http_status?: number;
 };
-export declare type BlockActivityDetails = {
+export type BlockActivityDetails = {
     block_reason: string;
     block_action: BlockAction;
     block_score: number;
     simulated_block: boolean;
 };
-export declare type AdditionalS2SActivityDetails = {
+export type AdditionalS2SActivityDetails = {
     http_status_code: number;
     login_successful: boolean;
     raw_username?: string;

package/lib/activities/utils.js

@@ -8,7 +8,7 @@ export const createActivity = (activityType, config, context) => {
     return {
         type: activityType,
         px_app_id: config.appId,
-        url: context.requestData.url.href,
+        url: context.requestData.rawUrl,
         headers: activityType !== ActivityType.ADDITIONAL_S2S
             ? joinHeaderValues(removeSensitiveHeaders(context.requestData.headers, config.sensitiveHeaders))
             : undefined,

package/lib/additional_activity_handler/AdditionalActivityHandler.d.ts

@@ -1,3 +1,3 @@
 import { ConfigurationParams } from '../config';
 import { ReadonlyContext } from '../context';
-export declare type AdditionalActivityHandler = <Req, Res>(config: ConfigurationParams<Req, Res>, context: ReadonlyContext<Req, Res>, request: Req) => void | Promise<void>;
+export type AdditionalActivityHandler = <Req, Res>(config: ConfigurationParams<Req, Res>, context: ReadonlyContext<Req, Res>, request: Req) => void | Promise<void>;

package/lib/config/ConfigurationParams.d.ts

@@ -5,7 +5,7 @@ import { CredentialEndpointConfiguration, CredentialIntelligenceVersion, CustomL
 import { LoggerSeverity } from '../logger';
 import { ModuleMode } from '../utils';
 import { GraphQLOperationType } from '../graphql';
-export declare type ConfigurationParams<Req, Res> = {
+export type ConfigurationParams<Req, Res> = {
     px_app_id: string;
     px_auth_token: string;
     px_cookie_secret: string;

package/lib/context/DefaultContext.d.ts

@@ -9,9 +9,11 @@ import { ICookieParser, IRequestIdGenerator, VidSource } from '../utils';
 import { IContext, RequestData, RiskApiData, ServerData, TlsData, TokenData } from './interfaces';
 import { ProductData, ProductName } from '../products';
 import { Action } from '../action';
-export declare type DefaultContextOptions = {
+import { IURLParser } from '../utils/url_parser';
+export type DefaultContextOptions = {
     cookieParser?: ICookieParser;
     requestIdGenerator: IRequestIdGenerator;
+    urlParser?: IURLParser;
 };
 export declare class DefaultContext<Req, Res> implements IContext<Req, Res> {
     readonly requestId: string;
@@ -35,6 +37,7 @@ export declare class DefaultContext<Req, Res> implements IContext<Req, Res> {
     customParameters?: CustomParameters;
     response?: IOutgoingResponse<Res>;
     protected readonly config: IConfiguration<Req, Res>;
+    protected readonly urlParser: IURLParser;
     constructor(config: IConfiguration<Req, Res>, request: IIncomingRequest<Req>, options: DefaultContextOptions);
     get isMobile(): boolean;
     protected createRequestData(config: IConfiguration<Req, Res>, request: IIncomingRequest<Req>, cookieParser?: ICookieParser): RequestData<Req>;

package/lib/context/DefaultContext.js

@@ -3,10 +3,12 @@ import { PXHDSource } from '../pxhd';
 import { TokenOrigin, TokenParseResult } from '../risk_token';
 import { RiskApiCallResult } from '../risk_api';
 import { COOKIE_HEADER_NAME, toReadonlyHeaders, USER_AGENT_HEADER_NAME, } from '../http';
-import { StringSplitCookieParser, getDecodedUrl, PXHD_COOKIE_NAME, PXVID_COOKIE_NAME, X_PX_AUTHORIZATION_HEADER_NAME, } from '../utils';
+import { StringSplitCookieParser, PXHD_COOKIE_NAME, PXVID_COOKIE_NAME, X_PX_AUTHORIZATION_HEADER_NAME, } from '../utils';
+import { DefaultUrlParser } from '../utils/url_parser';
 export class DefaultContext {
     constructor(config, request, options) {
         this.config = config;
+        this.urlParser = options.urlParser || new DefaultUrlParser();
         this.tokenData = {
             tokenParseResult: TokenParseResult.NONE,
         };
@@ -29,7 +31,8 @@ export class DefaultContext {
         return this.tokenOrigin === TokenOrigin.HEADER;
     }
     createRequestData(config, request, cookieParser = new StringSplitCookieParser()) {
-        const url = getDecodedUrl(request.url);
+        const rawUrl = request.url;
+        const url = this.urlParser.parse(rawUrl);
         const method = request.method;
         const headers = request.headers;
         const cookies = DefaultContext.getCookies(cookieParser, request.headers.get(COOKIE_HEADER_NAME), request.headers.get(config.customCookieHeader));
@@ -37,7 +40,7 @@ export class DefaultContext {
         const readOnlyHeaders = toReadonlyHeaders(headers);
         const userAgent = this.extractUserAgentFromHeader(config, readOnlyHeaders);
         const ip = this.extractIpFromHeader(config, readOnlyHeaders) || request.clientIP;
-        return { url, method, headers: readOnlyHeaders, cookies, ip, userAgent, requestCookieNames, request };
+        return { url, rawUrl, method, headers: readOnlyHeaders, cookies, ip, userAgent, requestCookieNames, request };
     }
     static getCookies(cookieParser, ...cookieHeaderValues) {
         const cookies = {};

package/lib/context/interfaces/MobileData.d.ts

@@ -1,5 +1,5 @@
 import { IToken, MobileError, TokenParseResult } from '../../risk_token';
-export declare type MobileData<Req, Res> = {
+export type MobileData<Req, Res> = {
     /**
      * The mobile error sent on the X-PX-Authorization header for mobile requests.
      */

package/lib/context/interfaces/ReadonlyContext.d.ts

@@ -1,3 +1,3 @@
 import { DeepReadonly } from 'ts-essentials';
 import { IContext } from './IContext';
-export declare type ReadonlyContext<Req, Res> = DeepReadonly<IContext<Req, Res>>;
+export type ReadonlyContext<Req, Res> = DeepReadonly<IContext<Req, Res>>;

package/lib/context/interfaces/RequestData.d.ts

@@ -1,9 +1,14 @@
 import { HttpMethod, IIncomingRequest, IURL, ReadonlyHeaders } from '../../http';
-export declare type RequestData<Req> = {
+export type RequestData<Req> = {
     /**
      * The request URL.
      */
     url: IURL;
+    /**
+     * The native url fetched from the environment.
+     * It should contain "..", duplicate slashes and un-decoded ascii characters (%XX) if possible.
+     */
+    rawUrl: string;
     /**
      * The request method, capitalized.
      */

package/lib/context/interfaces/RiskApiData.d.ts

@@ -1,5 +1,5 @@
 import { IRiskResponse, S2SErrorReason, RiskApiCallResult } from '../../risk_api';
-export declare type RiskApiData = {
+export type RiskApiData = {
     /**
      * The result of the risk API call.
      */

package/lib/context/interfaces/ServerData.d.ts

@@ -1,4 +1,4 @@
-export declare type ServerData = {
+export type ServerData = {
     /**
      * The operating system platform.
      */

package/lib/context/interfaces/TlsData.d.ts

@@ -1,4 +1,4 @@
-export declare type TlsData = {
+export type TlsData = {
     /**
      * The TLS version used for the HTTPS request (e.g., 1.2, 1.3).
      */

package/lib/context/interfaces/TokenData.d.ts

@@ -1,6 +1,6 @@
 import { IToken, TokenParseResult } from '../../risk_token';
 import { MobileData } from './MobileData';
-export declare type TokenData<Req, Res> = {
+export type TokenData<Req, Res> = {
     /**
      * The result of token parsing.
      */

package/lib/cors/CustomBlockResponseHeadersHandler.d.ts

@@ -1,2 +1,2 @@
 import { ReadonlyHeaders } from '../http';
-export declare type CustomBlockResponseHeadersHandler<Req> = (request: Req) => ReadonlyHeaders | Promise<ReadonlyHeaders>;
+export type CustomBlockResponseHeadersHandler<Req> = (request: Req) => ReadonlyHeaders | Promise<ReadonlyHeaders>;

package/lib/cors/CustomPreflightHandler.d.ts

@@ -1,2 +1,2 @@
 import { IMinimalResponse } from '../http';
-export declare type CustomPreflightHandler<Req> = (request: Req) => IMinimalResponse | Promise<IMinimalResponse>;
+export type CustomPreflightHandler<Req> = (request: Req) => IMinimalResponse | Promise<IMinimalResponse>;

package/lib/custom_parameters/CustomParameters.d.ts

@@ -1,4 +1,4 @@
-export declare type CustomParameters = {
+export type CustomParameters = {
     custom_param1?: any;
     custom_param2?: any;
     custom_param3?: any;

package/lib/custom_parameters/CustomParametersFunction.d.ts

@@ -1,3 +1,3 @@
 import { ConfigurationParams } from '../config';
 import { CustomParameters } from './CustomParameters';
-export declare type CustomParametersFunction<Req, Res> = (config: ConfigurationParams<Req, Res>, request: Req) => CustomParameters | Promise<CustomParameters>;
+export type CustomParametersFunction<Req, Res> = (config: ConfigurationParams<Req, Res>, request: Req) => CustomParameters | Promise<CustomParameters>;

package/lib/enforcer/options/EnforcerBaseOptions.d.ts

@@ -8,7 +8,7 @@ import { IRiskApiClient } from '../../risk_api';
 import { IActivityClient } from '../../activities';
 import { Products } from '../../products';
 import { IGraphQLParser } from '../../graphql';
-export declare type EnforcerBaseOptions<Req, Res> = {
+export type EnforcerBaseOptions<Req, Res> = {
     httpClient: IHttpClient;
     base64Utils: IBase64Utils;
     hmacUtils: IHmacUtils;

package/lib/enforcer/options/EnforcerOptionsType.d.ts

@@ -1,4 +1,4 @@
 import { TokenVersion } from '../../risk_token';
 import { EnforcerV2Options } from './EnforcerV2Options';
 import { EnforcerV3Options } from './EnforcerV3Options';
-export declare type EnforcerOptionsType<TokenV extends TokenVersion, Req, Res> = TokenV extends TokenVersion.V2 ? EnforcerV2Options<Req, Res> : TokenV extends TokenVersion.V3 ? EnforcerV3Options<Req, Res> : never;
+export type EnforcerOptionsType<TokenV extends TokenVersion, Req, Res> = TokenV extends TokenVersion.V2 ? EnforcerV2Options<Req, Res> : TokenV extends TokenVersion.V3 ? EnforcerV3Options<Req, Res> : never;

package/lib/enforcer/options/EnforcerV2Options.d.ts

@@ -1,5 +1,5 @@
 import { TokenVersion } from '../../risk_token';
 import { EnforcerBaseOptions } from './EnforcerBaseOptions';
-export declare type EnforcerV2Options<Req, Res> = {
+export type EnforcerV2Options<Req, Res> = {
     tokenVersion: TokenVersion.V2;
 } & EnforcerBaseOptions<Req, Res>;

package/lib/enforcer/options/EnforcerV3Options.d.ts

@@ -1,7 +1,7 @@
 import { TokenVersion } from '../../risk_token';
 import { ICipherUtils } from '../../utils';
 import { EnforcerBaseOptions } from './EnforcerBaseOptions';
-export declare type EnforcerV3Options<Req, Res> = {
+export type EnforcerV3Options<Req, Res> = {
     tokenVersion: TokenVersion.V3;
     cipherUtils: ICipherUtils;
 } & EnforcerBaseOptions<Req, Res>;

package/lib/first_party/FirstPartyData.d.ts

@@ -1,5 +1,5 @@
 import { IMinimalResponse, IOutgoingRequest } from '../http';
-export declare type FirstPartyData = {
+export type FirstPartyData = {
     request?: IOutgoingRequest;
     defaultResponse: IMinimalResponse;
 };

package/lib/graphql/model/GraphQLData.d.ts

@@ -1,5 +1,5 @@
 import { GraphQLOperationType } from './GraphQLOperationType';
-export declare type GraphQLData = {
+export type GraphQLData = {
     type: GraphQLOperationType;
     name?: string;
     sensitive?: boolean;

package/lib/graphql/model/GraphQLOperation.d.ts

@@ -1,4 +1,4 @@
-export declare type GraphQLOperation = {
+export type GraphQLOperation = {
     query: string;
     operationName?: string;
     variables?: Record<string, unknown>;

package/lib/http/impl/FormDataImpl.js

@@ -29,8 +29,8 @@ export class FormDataImpl {
         if (typeof value === 'string') {
             this.data[name] = [value];
         }
-        else {
-            this.data[name] = [Object.assign(Object.assign({}, value), { name: filename !== null && filename !== void 0 ? filename : '', lastModified: Date.now(), webkitRelativePath: '' })];
+        else if (File) {
+            this.data[name] = [new File([value], filename)];
         }
     }
 }

package/lib/http/impl/MinimalResponseImpl.d.ts

@@ -1,6 +1,6 @@
 import { IMinimalResponse } from '../interfaces';
 import { ReadonlyHeaders } from '../interfaces';
-export declare type MinimalResponseOptions = {
+export type MinimalResponseOptions = {
     status?: number;
     headers?: ReadonlyHeaders;
     body: any;

package/lib/http/impl/OutgoingRequestImpl.d.ts

@@ -1,5 +1,5 @@
 import { ReadonlyHeaders, HttpMethod, IOutgoingRequest } from '..';
-export declare type OutGoingRequestImplOptions = {
+export type OutGoingRequestImplOptions = {
     url: string;
     method?: HttpMethod | string;
     headers?: ReadonlyHeaders;

package/lib/http/interfaces/IHttpClient.d.ts

@@ -1,7 +1,7 @@
 import { AsyncOrSync } from 'ts-essentials';
 import { IOutgoingRequest } from './IOutgoingRequest';
 import { IIncomingResponse } from './IIncomingResponse';
-export declare type HttpSendOptions = {
+export type HttpSendOptions = {
     timeoutMs?: number;
 };
 export interface IHttpClient {

package/lib/http/interfaces/ReadonlyHeaders.d.ts

@@ -1,6 +1,6 @@
 import { DeepReadonly } from 'ts-essentials';
 import { IHeaders } from './IHeaders';
-export declare type ReadonlyHeaders = DeepReadonly<Record<string, string[]>>;
+export type ReadonlyHeaders = DeepReadonly<Record<string, string[]>>;
 export declare const toReadonlyHeaders: (headers: IHeaders) => ReadonlyHeaders;
 export declare const toMutableHeaders: (headers: ReadonlyHeaders) => Record<string, string[]>;
 export declare const joinHeaderValues: (headers: ReadonlyHeaders) => Record<string, string>;

package/lib/phase/PhaseResult.d.ts

@@ -1,5 +1,5 @@
 import { IMinimalResponse } from '../http';
-export declare type PhaseResult = {
+export type PhaseResult = {
     done: boolean;
     response?: IMinimalResponse;
 };

package/lib/products/account_defender/AccountDefender.d.ts

@@ -5,7 +5,7 @@ import { IBase64Utils } from '../../utils';
 import { IAccountDefender } from './IAccountDefender';
 import { AccountDefenderData } from './AccountDefenderData';
 import { JwtData } from './JwtData';
-export declare type AccountDefenderOptions = {
+export type AccountDefenderOptions = {
     base64Utils: IBase64Utils;
 };
 export declare class AccountDefender<Req, Res> implements IAccountDefender<Req, Res> {

package/lib/products/account_defender/AccountDefenderData.d.ts

@@ -1,5 +1,5 @@
 import { ActionData } from '../../action';
-export declare type AccountDefenderData = Partial<ActionData> & {
+export type AccountDefenderData = Partial<ActionData> & {
     appUserId?: string;
     additionalFields?: Record<string, any>;
     crossTabSession?: string;

package/lib/products/account_defender/JwtData.d.ts

@@ -1,4 +1,4 @@
-export declare type JwtData = {
+export type JwtData = {
     appUserId?: string;
     additionalFields?: Record<string, any>;
 };

package/lib/products/bot_defender/BotDefender.d.ts

@@ -11,7 +11,7 @@ import { IBase64Utils, IIpRangeChecker } from '../../utils';
 import { IBotDefender } from '../';
 import { BotDefenderData } from './BotDefenderData';
 import { BotDefenderS2SCallReason } from './reasons';
-export declare type BotDefenderOptions<Req, Res> = {
+export type BotDefenderOptions<Req, Res> = {
     base64Utils: IBase64Utils;
     firstParty?: IFirstParty<Req, Res>;
     blocker?: IConditionalBlocker<Req, Res>;

package/lib/products/bot_defender/BotDefenderData.d.ts

@@ -1,5 +1,5 @@
 import { ActionData } from '../../action';
-export declare type BotDefenderData = ActionData & {
+export type BotDefenderData = ActionData & {
     /**
      * Whether the request should go through the enforcement flow in monitor mode.
      * This depends on various configurations including the module mode, monitored routes, enforced

package/lib/products/bot_defender/block/model/BlockData.d.ts

@@ -1,5 +1,5 @@
 import { BlockAction } from '../../../../blocker/BlockAction';
-export declare type BlockData = {
+export type BlockData = {
     appId: string;
     hostUrl: string;
     jsClientSrc: string;

package/lib/products/bot_defender/block/model/JsonBlockPayload.d.ts

@@ -1,4 +1,4 @@
-export declare type JsonBlockPayload = {
+export type JsonBlockPayload = {
     appId: string;
     jsClientSrc: string;
     firstPartyEnabled: boolean;

package/lib/products/bot_defender/block/model/MobileBlockPayload.d.ts

@@ -1,4 +1,4 @@
-export declare type MobileBlockPayload = {
+export type MobileBlockPayload = {
     action: string;
     uuid: string;
     vid: string;

package/lib/products/bot_defender/block/utils.js

@@ -13,18 +13,19 @@ export const renderHtml = (htmlTemplate, blockData) => {
 };
 export const createBlockData = (config, context) => {
     var _a, _b;
-    const captchaParams = `/captcha.js?a=${context.blockAction}&u=${context.uuid}&v=${context.vid || ''}&m=${context.isMobile ? '1' : '0'}`;
+    const captchaScriptSuffix = '/captcha.js';
+    const captchaParams = `?a=${context.blockAction}&u=${context.uuid}&v=${context.vid || ''}&m=${context.isMobile ? '1' : '0'}`;
     let jsClientSrc = `${config.backendClientUrl}/${config.appId}/main.min.js`;
-    let blockScript = `${config.backendCaptchaUrl}/${config.appId}${captchaParams}`;
+    let blockScript = `${config.backendCaptchaUrl}/${config.appId}${captchaScriptSuffix}${captchaParams}`;
     let hostUrl = config.backendCollectorUrl;
     if (config.firstPartyEnabled && !context.isMobile) {
         jsClientSrc = getMostCustomizedFirstPartyPath(config, FirstPartySuffix.SENSOR);
-        blockScript = `${getMostCustomizedFirstPartyPath(config, FirstPartySuffix.CAPTCHA)}${captchaParams}`;
+        blockScript = `${getMostCustomizedFirstPartyPath(config, FirstPartySuffix.CAPTCHA)}${config.customFirstPartyCaptchaEndpoint ? captchaParams : `${captchaScriptSuffix}${captchaParams}`}`;
         hostUrl = getMostCustomizedFirstPartyPath(config, FirstPartySuffix.XHR);
     }
     const cssRef = config.cssRef ? `<link rel="stylesheet" type="text/css" href="${config.cssRef}" />` : '';
     const jsRef = config.jsRef ? `<script src="${config.jsRef}"></script>` : '';
-    const altBlockScript = `${config.altBackendCaptchaUrl}/${config.appId}${captchaParams}`;
+    const altBlockScript = `${config.altBackendCaptchaUrl}/${config.appId}${captchaScriptSuffix}${captchaParams}`;
     return {
         appId: config.appId,
         vid: context.vid || ((_b = (_a = context.requestData) === null || _a === void 0 ? void 0 : _a.cookies) === null || _b === void 0 ? void 0 : _b[PXVID_COOKIE_NAME]) || '',

package/lib/products/bot_defender/reasons/BotDefenderReasonType.d.ts

@@ -2,4 +2,4 @@ import { Action } from '../../../action';
 import { BotDefenderBlockReason } from './BotDefenderBlockReason';
 import { BotDefenderPassReason } from './BotDefenderPassReason';
 import { BotDefenderS2SCallReason } from './BotDefenderS2SCallReason';
-export declare type BotDefenderReasonType<A extends Action> = A extends Action.BLOCK ? BotDefenderBlockReason : A extends Action.SIMULATED_BLOCK ? BotDefenderBlockReason : A extends Action.PASS_REQUEST ? BotDefenderPassReason : A extends Action.TRIGGER_RISK_API ? BotDefenderS2SCallReason : never;
+export type BotDefenderReasonType<A extends Action> = A extends Action.BLOCK ? BotDefenderBlockReason : A extends Action.SIMULATED_BLOCK ? BotDefenderBlockReason : A extends Action.PASS_REQUEST ? BotDefenderPassReason : A extends Action.TRIGGER_RISK_API ? BotDefenderS2SCallReason : never;

package/lib/products/credential_intelligence/endpoint/CredentialEndpointConfiguration.d.ts

@@ -2,7 +2,7 @@ import { HttpMethod } from '../../../http';
 import { CustomExtractionCallback } from '../model';
 import { PathType, SentThrough, CredentialIntelligenceVersion } from './index';
 import { CustomLoginSuccessfulCallback, LoginSuccessfulReportingMethod } from './login_successful';
-export declare type CredentialEndpointConfiguration<Req, Res> = {
+export type CredentialEndpointConfiguration<Req, Res> = {
     /**
      * The URI of the request that contains the credentials.
      */

package/lib/products/credential_intelligence/endpoint/login_successful/CustomLoginSuccessfulCallback.d.ts

@@ -1 +1 @@
-export declare type CustomLoginSuccessfulCallback<Res> = (response: Res) => boolean | Promise<boolean>;
+export type CustomLoginSuccessfulCallback<Res> = (response: Res) => boolean | Promise<boolean>;

package/lib/products/credential_intelligence/model/CredentialData.d.ts

@@ -1,5 +1,5 @@
 import { CredentialIntelligenceVersion, SsoStep } from '../endpoint';
-export declare type CredentialData = {
+export type CredentialData = {
     ciVersion?: CredentialIntelligenceVersion;
     hashedUsername?: string;
     hashedPassword?: string;

package/lib/products/credential_intelligence/model/CredentialIntelligenceData.d.ts

@@ -1,6 +1,6 @@
 import { ActionData } from '../../../action';
 import { CredentialData } from './CredentialData';
-export declare type CredentialIntelligenceData = ActionData & CredentialData & {
+export type CredentialIntelligenceData = ActionData & CredentialData & {
     endpointIndex?: number;
     isLoginSuccessful?: boolean;
     isCompromised?: boolean;

package/lib/products/credential_intelligence/model/Credentials.d.ts

@@ -1,4 +1,4 @@
-export declare type Credentials = {
+export type Credentials = {
     user?: string;
     pass?: string;
 };

package/lib/products/credential_intelligence/model/CustomExtractionCallback.d.ts

@@ -1,2 +1,2 @@
 import { Credentials } from './Credentials';
-export declare type CustomExtractionCallback<Req> = (request: Req) => Credentials | Promise<Credentials>;
+export type CustomExtractionCallback<Req> = (request: Req) => Credentials | Promise<Credentials>;

package/lib/products/interfaces/ProductData.d.ts

@@ -1,5 +1,5 @@
 import { ProductName } from '../utils';
 import { ProductDataType } from './ProductDataType';
-export declare type ProductData = {
+export type ProductData = {
     [Name in ProductName]?: ProductDataType<Name>;
 };

package/lib/products/interfaces/ProductDataType.d.ts

@@ -2,4 +2,4 @@ import { ProductName } from '../utils';
 import { BotDefenderData } from '../bot_defender';
 import { CredentialIntelligenceData } from '../credential_intelligence';
 import { AccountDefenderData } from '../account_defender';
-export declare type ProductDataType<Name extends ProductName> = Name extends ProductName.BOT_DEFENDER ? BotDefenderData : Name extends ProductName.CREDENTIAL_INTELLIGENCE ? CredentialIntelligenceData : Name extends ProductName.CODE_DEFENDER ? never : Name extends ProductName.ACCOUNT_DEFENDER ? AccountDefenderData : Name extends ProductName.HYPE_SALE_CHALLENGE ? never : never;
+export type ProductDataType<Name extends ProductName> = Name extends ProductName.BOT_DEFENDER ? BotDefenderData : Name extends ProductName.CREDENTIAL_INTELLIGENCE ? CredentialIntelligenceData : Name extends ProductName.CODE_DEFENDER ? never : Name extends ProductName.ACCOUNT_DEFENDER ? AccountDefenderData : Name extends ProductName.HYPE_SALE_CHALLENGE ? never : never;

package/lib/products/interfaces/ProductType.d.ts

@@ -2,4 +2,4 @@ import { ProductName } from '../utils';
 import { IBotDefender } from '../bot_defender';
 import { ICredentialIntelligence } from '../credential_intelligence';
 import { IAccountDefender } from '../account_defender';
-export declare type ProductType<Name extends ProductName, Req, Res> = Name extends ProductName.BOT_DEFENDER ? IBotDefender<Req, Res> : Name extends ProductName.CREDENTIAL_INTELLIGENCE ? ICredentialIntelligence<Req, Res> : Name extends ProductName.ACCOUNT_DEFENDER ? IAccountDefender<Req, Res> : never;
+export type ProductType<Name extends ProductName, Req, Res> = Name extends ProductName.BOT_DEFENDER ? IBotDefender<Req, Res> : Name extends ProductName.CREDENTIAL_INTELLIGENCE ? ICredentialIntelligence<Req, Res> : Name extends ProductName.ACCOUNT_DEFENDER ? IAccountDefender<Req, Res> : never;

package/lib/products/interfaces/Products.d.ts

@@ -1,5 +1,5 @@
 import { ProductName } from '../utils';
 import { ProductType } from './ProductType';
-export declare type Products<Req, Res> = {
+export type Products<Req, Res> = {
     [Name in ProductName]?: ProductType<Name, Req, Res>;
 };

package/lib/pxde/model/PXDE.d.ts

@@ -1,4 +1,4 @@
-export declare type PXDE = {
+export type PXDE = {
     timestamp: number;
     f_kb: number;
     f_type?: string;

package/lib/pxde/model/PxdeData.d.ts

@@ -1,5 +1,5 @@
 import { PXDE } from './PXDE';
-export declare type PxdeData = {
+export type PxdeData = {
     pxde: PXDE;
     pxdeVerified: boolean;
 };

package/lib/pxhd/model/PXHD.d.ts

@@ -1,5 +1,5 @@
 import { PXHDSource } from './PXHDSource';
-export declare type PXHD = {
+export type PXHD = {
     value: string;
     domain?: string;
     source: PXHDSource;

package/lib/risk_api/client/PostRiskApiClientBase.js

@@ -62,7 +62,7 @@ export class PostRiskApiClientBase {
             request: {
                 ip: context.requestData.ip,
                 headers: this.formatRiskHeadersField(context.requestData.headers),
-                url: context.requestData.url.href,
+                url: context.requestData.rawUrl,
             },
             additional: {
                 s2s_call_reason: ((_a = context.reasons) === null || _a === void 0 ? void 0 : _a[ProductName.BOT_DEFENDER]) ||

package/lib/risk_api/model/RiskActivity.d.ts

@@ -3,16 +3,16 @@ import { TokenOrigin } from '../../risk_token';
 import { CustomParameters } from '../../custom_parameters';
 import { GraphQLData } from '../../graphql/';
 import { CredentialIntelligenceVersion, SsoStep } from '../../products';
-export declare type HeaderEntry = {
+export type HeaderEntry = {
     name: string;
     value: string;
 };
-export declare type RiskRequestData = {
+export type RiskRequestData = {
     ip: string;
     url: string;
     headers: HeaderEntry[];
 };
-export declare type RiskAdditionalData = {
+export type RiskAdditionalData = {
     request_id: string;
     module_version: string;
     s2s_call_reason: string;
@@ -47,7 +47,7 @@ export declare type RiskAdditionalData = {
     ci_version?: CredentialIntelligenceVersion;
     sso_step?: SsoStep;
 } & CustomParameters;
-export declare type RiskActivity = {
+export type RiskActivity = {
     vid?: string;
     uuid?: string;
     pxhd?: string;

package/lib/risk_api/risk_response/RiskResponsePayloadType.d.ts

@@ -1,4 +1,4 @@
 import { TokenVersion } from '../../risk_token';
 import { RiskResponseV3Payload } from './v3';
 import { RiskResponseV2Payload } from './v2';
-export declare type RiskResponsePayloadType<TokenV extends TokenVersion> = TokenV extends TokenVersion.V3 ? RiskResponseV3Payload : TokenV extends TokenVersion.V2 ? RiskResponseV2Payload : never;
+export type RiskResponsePayloadType<TokenV extends TokenVersion> = TokenV extends TokenVersion.V3 ? RiskResponseV3Payload : TokenV extends TokenVersion.V2 ? RiskResponseV2Payload : never;

package/lib/risk_api/risk_response/v2/RiskResponseV2Payload.d.ts

@@ -1,7 +1,7 @@
 import { PXDE } from '../../../pxde';
 import { BlockAction } from '../../../blocker';
 import { RiskStatus } from '../../model';
-export declare type RiskResponseV2Payload = {
+export type RiskResponseV2Payload = {
     status: RiskStatus;
     cookie_cfg_block_result?: '0' | '1';
     action?: BlockAction;

package/lib/risk_api/risk_response/v3/RiskResponseV3Payload.d.ts

@@ -1,7 +1,7 @@
 import { BlockAction } from '../../../blocker';
 import { PXDE } from '../../../pxde';
 import { RiskStatus } from '../../model';
-export declare type RiskResponseV3Payload = {
+export type RiskResponseV3Payload = {
     status: RiskStatus;
     score?: number;
     action?: BlockAction;

package/lib/risk_token/parser/DefaultTokenV2Parser.d.ts

@@ -3,7 +3,7 @@ import { TokenParserBase } from './TokenParserBase';
 import { TokenVersion } from '../TokenVersion';
 import { IConfiguration } from '../../config';
 import { IToken } from '../token';
-export declare type DefaultTokenV2ParserOptions = {
+export type DefaultTokenV2ParserOptions = {
     base64Utils: IBase64Utils;
     hmacUtils: IHmacUtils;
 };

package/lib/risk_token/parser/DefaultTokenV3Parser.d.ts

@@ -3,7 +3,7 @@ import { ICipherUtils, IHmacUtils } from '../../utils';
 import { TokenVersion } from '../TokenVersion';
 import { IToken } from '../token';
 import { TokenParserBase } from './TokenParserBase';
-export declare type DefaultTokenV3ParserOptions = {
+export type DefaultTokenV3ParserOptions = {
     cipherUtils: ICipherUtils;
     hmacUtils: IHmacUtils;
 };

package/lib/risk_token/parser/TokenParserOptions.d.ts

@@ -1,4 +1,4 @@
 import { TokenVersion } from '../TokenVersion';
 import { DefaultTokenV3ParserOptions } from './DefaultTokenV3Parser';
 import { DefaultTokenV2ParserOptions } from './DefaultTokenV2Parser';
-export declare type TokenOptionsType<TokenV> = TokenV extends TokenVersion.V2 ? DefaultTokenV2ParserOptions : DefaultTokenV3ParserOptions;
+export type TokenOptionsType<TokenV> = TokenV extends TokenVersion.V2 ? DefaultTokenV2ParserOptions : DefaultTokenV3ParserOptions;

package/lib/risk_token/token/TokenPayloadType.d.ts

@@ -1,4 +1,4 @@
 import { TokenVersion } from '../TokenVersion';
 import { TokenV3Payload } from './v3/TokenV3Payload';
 import { TokenV2Payload } from './v2/TokenV2Payload';
-export declare type TokenPayloadType<TokenV extends TokenVersion> = TokenV extends TokenVersion.V3 ? TokenV3Payload : TokenV extends TokenVersion.V2 ? TokenV2Payload : never;
+export type TokenPayloadType<TokenV extends TokenVersion> = TokenV extends TokenVersion.V3 ? TokenV3Payload : TokenV extends TokenVersion.V2 ? TokenV2Payload : never;

package/lib/risk_token/token/v2/TokenV2Payload.d.ts

@@ -1,4 +1,4 @@
-export declare type TokenV2Payload = {
+export type TokenV2Payload = {
     h: string;
     u: string;
     t: number;

package/lib/risk_token/token/v3/TokenV3Payload.d.ts

@@ -1,5 +1,5 @@
 import { BlockAction } from '../../../blocker';
-export declare type TokenV3Payload = {
+export type TokenV3Payload = {
     a: BlockAction;
     s: number;
     t: number;

package/lib/telemetry/model/TelemetryActivity.d.ts

@@ -1,13 +1,13 @@
 import { ActivityType } from '../../activities';
 import { ConfigurationParams } from '../../config';
-export declare type TelemetryActivityDetails = {
+export type TelemetryActivityDetails = {
     enforcer_configs: ConfigurationParams<unknown, unknown>;
     module_version: string;
     update_reason: 'command';
     node_name?: string;
     os_name?: string;
 };
-export declare type TelemetryActivity = {
+export type TelemetryActivity = {
     type: ActivityType.ENFORCER_TELEMETRY;
     timestamp: number;
     px_app_id: string;

package/lib/utils/cipher/ICipherUtils.d.ts

@@ -1,5 +1,5 @@
 import { AsyncOrSync } from 'ts-essentials';
-export declare type Pbkdf2DecryptOptions = {
+export type Pbkdf2DecryptOptions = {
     keylen?: number;
     ivlen?: number;
 };

package/lib/utils/constants.d.ts

@@ -8,4 +8,4 @@ export declare const X_PX_AUTHORIZATION_HEADER_NAME = "x-px-authorization";
 export declare const X_PX_ORIGINAL_TOKEN_HEADER_NAME = "x-px-original-token";
 export declare const X_PX_BYPASS_REASON_HEADER_NAME = "x-px-bypass-reason";
 export declare const EMAIL_ADDRESS_REGEX: RegExp;
-export declare const CORE_MODULE_VERSION = "JS Core 0.6.2";
+export declare const CORE_MODULE_VERSION = "JS Core 0.7.0";

package/lib/utils/constants.js

@@ -8,4 +8,4 @@ export const X_PX_AUTHORIZATION_HEADER_NAME = 'x-px-authorization';
 export const X_PX_ORIGINAL_TOKEN_HEADER_NAME = 'x-px-original-token';
 export const X_PX_BYPASS_REASON_HEADER_NAME = 'x-px-bypass-reason';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.6.2';
+export const CORE_MODULE_VERSION = 'JS Core 0.7.0';

package/lib/utils/index.d.ts

@@ -11,3 +11,4 @@ export * from './constants';
 export * from './ModuleMode';
 export * from './VidSource';
 export * from './Algorithm';
+export * from './url_parser';

package/lib/utils/index.js

@@ -11,3 +11,4 @@ export * from './constants';
 export * from './ModuleMode';
 export * from './VidSource';
 export * from './Algorithm';
+export * from './url_parser';

package/lib/utils/url_parser/DefaultUrlParser.d.ts

@@ -0,0 +1,13 @@
+import { IURLParser } from './IURLParser';
+import { IURL } from '../../http';
+export type UrlParserOptions = {
+    normalize?: boolean;
+    reverseCharactersEncoding?: boolean;
+};
+export declare class DefaultUrlParser implements IURLParser {
+    private options;
+    constructor(options?: UrlParserOptions);
+    parse(rawUrl: string): IURL;
+    private reverseCharactersEncoding;
+    private normalize;
+}

package/lib/utils/url_parser/DefaultUrlParser.js

@@ -0,0 +1,21 @@
+export class DefaultUrlParser {
+    constructor(options) {
+        this.options = Object.assign({ normalize: true, reverseCharactersEncoding: false }, options);
+    }
+    parse(rawUrl) {
+        const url = new URL(rawUrl);
+        if (this.options.reverseCharactersEncoding) {
+            url.pathname = this.reverseCharactersEncoding(url.pathname);
+        }
+        if (this.options.normalize) {
+            url.pathname = this.normalize(url.pathname);
+        }
+        return url;
+    }
+    reverseCharactersEncoding(path) {
+        return decodeURI(path);
+    }
+    normalize(path) {
+        return path.replace(/\/+$/, '').replace(/\/+/g, '/');
+    }
+}

package/lib/utils/url_parser/IURLParser.d.ts

@@ -0,0 +1,4 @@
+import { IURL } from '../../http';
+export interface IURLParser {
+    parse(rawUrl: string): IURL;
+}

package/lib/utils/url_parser/IURLParser.js

@@ -0,0 +1 @@
+export {};

package/lib/utils/url_parser/index.d.ts

@@ -0,0 +1,2 @@
+export * from './IURLParser';
+export * from './DefaultUrlParser';

package/lib/utils/url_parser/index.js

@@ -0,0 +1,2 @@
+export * from './IURLParser';
+export * from './DefaultUrlParser';

package/lib/utils/utils.d.ts

@@ -6,6 +6,11 @@ export declare const getScoreApiDomain: (appId: string) => string;
 export declare const getCollectorDomain: (appId: string) => string;
 export declare const getAuthorizationHeader: (authToken: string) => string;
 export declare const getExtension: (route: string) => string;
+/**
+ *
+ * @param rawUrl
+ * @deprecated use {@link IURLParser} instead.
+ */
 export declare const getDecodedUrl: (rawUrl: string) => IURL;
 export declare const removeSensitiveFields: <T extends Record<string, any>>(object: T, sensitiveFields: (keyof T)[]) => T;
 export declare const removeSensitiveHeaders: (headers: ReadonlyHeaders, sensitiveHeaderNames: string[]) => Record<string, string[]>;

package/lib/utils/utils.js

@@ -39,8 +39,12 @@ export const getExtension = (route) => {
     }
     return endOfPath.substring(extensionIndex);
 };
+/**
+ *
+ * @param rawUrl
+ * @deprecated use {@link IURLParser} instead.
+ */
 export const getDecodedUrl = (rawUrl) => {
-    rawUrl = rawUrl.replace(/%/g, '%25');
     try {
         return new URL(decodeURIComponent(rawUrl));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perimeterx-js-core",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "",
   "main": "lib/index.js",
   "type": "module",
@@ -35,7 +35,7 @@
     "@types/crypto-js": "^4.1.1",
     "@types/mocha": "^10.0.0",
     "@types/sinon": "^10.0.13",
-    "@types/uuid": "^8.3.4",
+    "@types/uuid": "^9.0.2",
     "@typescript-eslint/eslint-plugin": "^5.40.0",
     "@typescript-eslint/parser": "^5.40.0",
     "chai": "^4.3.6",
@@ -49,10 +49,10 @@
     "mocha": "^10.0.0",
     "nyc": "^15.1.0",
     "prettier": "^2.7.1",
-    "sinon": "^14.0.1",
+    "sinon": "^15.2.0",
     "ts-loader": "^9.4.1",
     "ts-node": "^10.9.1",
-    "typescript": "^4.4.4"
+    "typescript": "^5.1.6"
   },
   "lint-staged": {
     "*.ts": "npm run lint:fix"