-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #52 from PerimeterX/dev
Dev
- Loading branch information
Showing
10 changed files
with
301 additions
and
42 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,124 @@ | ||
| require 'perimeterx/internal/perimeter_x_context' | ||
| module PxModule | ||
| class FirstPartyManager | ||
| def initialize(px_config, px_http_client, logger) | ||
| @px_config = px_config | ||
| @app_id = px_config[:app_id] | ||
| @px_http_client = px_http_client | ||
| @logger = logger | ||
| @from = [ | ||
| "/#{@app_id[2..-1]}/init.js", | ||
| "/#{@app_id[2..-1]}/captcha", | ||
| "/#{@app_id[2..-1]}/xhr" | ||
| ] | ||
| end | ||
|
|
||
| def send_first_party_request(req) | ||
| uri = URI.parse(req.original_url) | ||
| url_path = uri.path | ||
|
|
||
| headers = extract_headers(req) | ||
| headers["x-px-first-party"] = "1" | ||
| headers["x-px-enforcer-true-ip"] = PerimeterXContext.extract_ip(req, @px_config) | ||
|
|
||
| if url_path.start_with?(@from[0]) | ||
| return get_client(req, uri, headers) | ||
| elsif url_path.start_with?(@from[1]) | ||
| return get_captcha(req, uri, headers) | ||
| elsif url_path.start_with?(@from[2]) | ||
| return send_xhr(req, uri, headers) | ||
| else | ||
| return nil | ||
| end | ||
| end | ||
|
|
||
| def get_client(req, uri, headers) | ||
| @logger.debug("FirstPartyManager[get_client]") | ||
|
|
||
| # define host | ||
| headers["host"] = PxModule::CLIENT_HOST | ||
|
|
||
| # define request url | ||
| url = "#{uri.scheme}://#{PxModule::CLIENT_HOST}/#{@app_id}/main.min.js" | ||
|
|
||
| # send request | ||
| return @px_http_client.get(url, headers) | ||
| end | ||
|
|
||
| def get_captcha(req, uri, headers) | ||
| @logger.debug("FirstPartyManager[get_captcha]") | ||
|
|
||
| # define host | ||
| headers["host"] = PxModule::CAPTCHA_HOST | ||
|
|
||
| # define request url | ||
| path_and_query = uri.request_uri | ||
| uri_suffix = path_and_query.sub "/#{@app_id[2..-1]}/captcha", "" | ||
| url = "#{uri.scheme}://#{PxModule::CAPTCHA_HOST}#{uri_suffix}" | ||
|
|
||
| # send request | ||
| return @px_http_client.get(url, headers) | ||
| end | ||
|
|
||
| def send_xhr(req, uri, headers) | ||
| @logger.debug("FirstPartyManager[send_xhr]") | ||
|
|
||
| # handle vid cookies | ||
| if !req.cookies.nil? | ||
| if req.cookies.key?("_pxvid") | ||
| vid = PerimeterXContext.force_utf8(req.cookies["_pxvid"]) | ||
| if headers.key?('cookie') | ||
| headers['cookie'] += "; pxvid=#{vid}"; | ||
| else | ||
| headers['cookie'] = "pxvid=#{vid}"; | ||
| end | ||
| end | ||
| end | ||
|
|
||
| # define host | ||
| headers["host"] = "collector-#{@app_id.downcase}.perimeterx.net" | ||
|
|
||
| # define request url | ||
| path_and_query = uri.request_uri | ||
| path_suffix = path_and_query.sub "/#{@app_id[2..-1]}/xhr", "" | ||
| url = "#{uri.scheme}://collector-#{@app_id.downcase}.perimeterx.net#{path_suffix}" | ||
|
|
||
| # send request | ||
| return @px_http_client.post_xhr(url, req.body.string, headers) | ||
| end | ||
|
|
||
| def extract_headers(req) | ||
| headers = Hash.new | ||
| req.headers.each do |k, v| | ||
| if (k.start_with? 'HTTP_') && (!@px_config[:sensitive_headers].include? k) | ||
| header = k.to_s.gsub('HTTP_', '') | ||
| header = header.gsub('_', '-').downcase | ||
| headers[header] = PerimeterXContext.force_utf8(v) | ||
| end | ||
| end | ||
| return headers | ||
| end | ||
|
|
||
| # -1 - not first party request | ||
| # 0 - /init.js | ||
| # 1 - /captcha | ||
| # 2 - /xhr | ||
| def get_first_party_request_type(req) | ||
| url_path = URI.parse(req.original_url).path | ||
| @from.each_with_index do |val,index| | ||
| if url_path.start_with?(val) | ||
| return index | ||
| end | ||
| end | ||
| return -1 | ||
| end | ||
|
|
||
| def is_first_party_request(req) | ||
| return get_first_party_request_type(req) != -1 | ||
| end | ||
|
|
||
| def get_response_content_type(req) | ||
| return get_first_party_request_type(req) == 2 ? :json : :js | ||
| end | ||
| end | ||
| end |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.