clue-api 1.3.0.dev20__tar.gz → 1.3.0.dev28__tar.gz

{clue_api-1.3.0.dev20 → clue_api-1.3.0.dev28}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: clue-api
-Version: 1.3.0.dev20
+Version: 1.3.0.dev28
 Summary: Clue distributed enrichment service
 License: MIT
 License-File: LICENSE

{clue_api-1.3.0.dev20 → clue_api-1.3.0.dev28}/clue/api/v1/lookup.py

@@ -205,13 +205,16 @@ def enrich(type_name: str, value: str, **kwargs) -> dict[str, QueryResult]:
     user = kwargs["user"]
 
     # For backwards compatability, if eml is used it is replaced with email
-    type_name = type_name.replace("eml", "email")
+    type_name = type_name.lower().replace("eml", "email")
 
     if type_name == "telemetry":
         try:
             json.loads(urllib.parse.unquote(value))
         except json.JSONDecodeError:
             return bad_request(err="If type is telemetry, value must be a valid JSON object.")
+    else:
+        # Normalize to lowercase all non-telemetry inputs
+        value = value.lower()
 
     # re-encode the type after being decoded going through flask/wsgi route
     value = urllib.parse.quote(value, safe="")

{clue_api-1.3.0.dev20 → clue_api-1.3.0.dev28}/clue/constants/supported_types.py

@@ -37,4 +37,4 @@ SUPPORTED_TYPES = {
     "tenant-id": UUID4_REGEX,
 }
 
-CASE_INSENSITIVE_TYPES = ["ip", "domain", "port", "tenant-id"]
+CASE_INSENSITIVE_TYPES = ["ip", "domain", "port", "tenant-id", "hbs_oid", "hbs_agent_id"]

{clue_api-1.3.0.dev20 → clue_api-1.3.0.dev28}/clue/models/selector.py

@@ -1,9 +1,10 @@
 # ruff: noqa: D101
 import ipaddress
 import json
+from typing import Annotated
 
 from flask import request
-from pydantic import BaseModel, Field, model_validator
+from pydantic import BaseModel, Field, StringConstraints, model_validator
 from typing_extensions import Self
 
 from clue.common.logging import get_logger
@@ -14,7 +15,7 @@ logger = get_logger(__file__)
 
 
 class Selector(BaseModel):
-    type: str
+    type: Annotated[str, StringConstraints(to_lower=True, strip_whitespace=True)]
     value: str
     classification: str | None = Field(default=None)
     sources: list[str] | None = Field(default=None)
@@ -41,8 +42,7 @@ class Selector(BaseModel):
                 json.loads(self.value)
             except json.JSONDecodeError as e:
                 raise AssertionError("If type is telemetry, value must be a valid JSON object.") from e
-
-        if self.type in CASE_INSENSITIVE_TYPES:
+        elif self.type in CASE_INSENSITIVE_TYPES:
             self.value = self.value.lower()
 
         if not self.classification:

{clue_api-1.3.0.dev20 → clue_api-1.3.0.dev28}/pyproject.toml

@@ -146,7 +146,7 @@ log_cli_level = "WARN"
 [tool.poetry]
 package-mode = true
 name = "clue-api"
-version = "1.3.0.dev20"
+version = "1.3.0.dev28"
 description = "Clue distributed enrichment service"
 authors = ["Canadian Centre for Cyber Security <contact@cyber.gc.ca>"]
 license = "MIT"