07a7a683b7
All checks were successful
Publish NuGets / build (release) Successful in 39s
Adds an abstraction over the CreateChallengeRequest.complexity field
(already present in the proto since the original altcha module landed),
letting applications scale PoW difficulty per request based on actor
signals — repeat-offender counters, threat-intel headers, reputation
scores — without leaking those concerns into the gRPC provider.
- new IAltchaDifficultyAdvisor in Svrnty.CQRS.Altcha.Abstractions:
Task<uint?> GetComplexityAsync(...). null means "use the upstream
service's configured default."
- NullAltchaDifficultyAdvisor in Svrnty.CQRS.Altcha is the no-op
fallback registered by AddSvrntyAltcha() via TryAddSingleton, so
applications can replace it without ordering constraints.
- AltchaGrpcChallengeProvider now resolves the advisor and sets
CreateChallengeRequest.Complexity when the advisor returns a value.
The Altcha server clamps to its configured min/max, so callers
don't need to enforce bounds here.
No breaking changes to existing consumers — the no-op default keeps
behaviour identical when no advisor is registered.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
37 lines
1.8 KiB
C#
37 lines
1.8 KiB
C#
using Microsoft.Extensions.DependencyInjection;
|
|
using Microsoft.Extensions.DependencyInjection.Extensions;
|
|
using Svrnty.CQRS.Abstractions.Security;
|
|
using Svrnty.CQRS.Altcha.Abstractions;
|
|
|
|
namespace Svrnty.CQRS.Altcha;
|
|
|
|
public static class ServiceCollectionExtensions
|
|
{
|
|
/// <summary>
|
|
/// Registers <see cref="AltchaAuthorizationCheck"/> as both an
|
|
/// <see cref="ICommandAuthorizationCheck"/> and an
|
|
/// <see cref="IQueryAuthorizationCheck"/>, plus a no-op
|
|
/// <see cref="IAltchaDifficultyAdvisor"/> that defers to the upstream
|
|
/// Altcha service's configured default complexity. Applications opt
|
|
/// into adaptive difficulty by registering their own
|
|
/// <see cref="IAltchaDifficultyAdvisor"/> before or after this call —
|
|
/// the <c>TryAdd</c> registration here yields to any existing one.
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// The check is a no-op until an
|
|
/// <see cref="IAltchaVerifier"/> implementation is also registered
|
|
/// (typically via <c>AddSvrntyAltchaGrpcVerifier(...)</c> from
|
|
/// <c>Svrnty.CQRS.Altcha.Grpc</c>). Idempotent for the concrete check;
|
|
/// the multi-instance interface registrations are added unconditionally,
|
|
/// so callers should invoke this exactly once per application startup.
|
|
/// </remarks>
|
|
public static IServiceCollection AddSvrntyAltcha(this IServiceCollection services)
|
|
{
|
|
services.TryAddSingleton<AltchaAuthorizationCheck>();
|
|
services.AddSingleton<ICommandAuthorizationCheck>(sp => sp.GetRequiredService<AltchaAuthorizationCheck>());
|
|
services.AddSingleton<IQueryAuthorizationCheck>(sp => sp.GetRequiredService<AltchaAuthorizationCheck>());
|
|
services.TryAddSingleton<IAltchaDifficultyAdvisor, NullAltchaDifficultyAdvisor>();
|
|
return services;
|
|
}
|
|
}
|