07a7a683b7
All checks were successful
Publish NuGets / build (release) Successful in 39s
Adds an abstraction over the CreateChallengeRequest.complexity field
(already present in the proto since the original altcha module landed),
letting applications scale PoW difficulty per request based on actor
signals — repeat-offender counters, threat-intel headers, reputation
scores — without leaking those concerns into the gRPC provider.
- new IAltchaDifficultyAdvisor in Svrnty.CQRS.Altcha.Abstractions:
Task<uint?> GetComplexityAsync(...). null means "use the upstream
service's configured default."
- NullAltchaDifficultyAdvisor in Svrnty.CQRS.Altcha is the no-op
fallback registered by AddSvrntyAltcha() via TryAddSingleton, so
applications can replace it without ordering constraints.
- AltchaGrpcChallengeProvider now resolves the advisor and sets
CreateChallengeRequest.Complexity when the advisor returns a value.
The Altcha server clamps to its configured min/max, so callers
don't need to enforce bounds here.
No breaking changes to existing consumers — the no-op default keeps
behaviour identical when no advisor is registered.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
28 lines
1.3 KiB
C#
28 lines
1.3 KiB
C#
namespace Svrnty.CQRS.Altcha.Abstractions;
|
|
|
|
/// <summary>
|
|
/// Resolves a per-request PoW complexity (search-space upper bound) for the
|
|
/// next Altcha challenge the server will mint. Implementations may consult
|
|
/// per-actor signals — repeat-offender counters, threat-intel headers,
|
|
/// reputation scores — to scale difficulty up for suspicious actors while
|
|
/// keeping the baseline cheap for everyone else.
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// The framework ships a no-op <see cref="IAltchaDifficultyAdvisor"/> that
|
|
/// always returns <c>null</c>, meaning "use the upstream service's configured
|
|
/// default complexity." Applications opt into adaptive difficulty by
|
|
/// replacing the registration with their own implementation; consult request
|
|
/// context via <see cref="Microsoft.AspNetCore.Http.IHttpContextAccessor"/>
|
|
/// or scoped DI.
|
|
/// </remarks>
|
|
public interface IAltchaDifficultyAdvisor
|
|
{
|
|
/// <summary>
|
|
/// Returns the desired <c>maxNumber</c> (PoW search-space upper bound)
|
|
/// for the next challenge, or <c>null</c> to defer to the upstream
|
|
/// service default. The Altcha server clamps to its configured min/max,
|
|
/// so callers don't need to enforce bounds here.
|
|
/// </summary>
|
|
Task<uint?> GetComplexityAsync(CancellationToken cancellationToken = default);
|
|
}
|