Skip to content

feat: Vercel validator reports refusal match keys (0.21.0) - #66

Merged
cport1 merged 1 commit into
mainfrom
feat/refusal-match-keys
Oct 22, 2026
Merged

cport1 merged 1 commit into
mainfrom
feat/refusal-match-keys

Conversation

@cport1

@cport1 cport1 commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Regenerated gate.generated.js from the validator source. Each request the Vercel validator refuses, or would refuse in monitor mode, is now reported as a match key: the first 24 hex characters of SHA-256 over org, client IP and path. WebDecoy uses it to label the detection of the same request as Would block or Blocked. The IP and path themselves are never sent, and reports with no refusals are byte-for-byte unchanged.

Bumps all packages to 0.21.0 with a CHANGELOG entry. build, test (node 522, nextjs 16, client 55, hono 12, express 15), lint and check:edge all pass.

Refused requests, and those monitor mode would refuse, are reported as a
salted SHA-256 of IP and path so WebDecoy can label the matching detection.
The IP and path themselves are never sent.
@cport1
cport1 merged commit 05cc0cf into main Oct 22, 2026
2 checks passed
@cport1
cport1 deleted the feat/refusal-match-keys branch October 22, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant