@alipay/ams-checkout 2.0.20 → 2.0.22

package/esm/foundation/service/security/index.js

@@ -9,20 +9,24 @@ function _defineProperty(obj, key, value) { key = _toPropertyKey(key); if (key i
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : String(i); }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
 import { ProductSceneEnum } from "../../../types";
-import { Security, SecurityRegionEnum, getSecurityConfigStorageKey, getSecurityHost, getSecurityScene } from "./security";
+import { Security, SecurityRegionEnum, getSecurityConfigStorageKey, getSecurityHost, getSecurityScene, mapEnvironment } from "./security";
 import { getOrSetStorageId, safeJson } from "../../../util";
+import { SecuritySdkRegistry } from "../../../util/security-registry";
+import { ApdidLoader } from "../../../util/jshield-apdid";
 import { ServiceProvider } from '..';
 export var SecurityService = /*#__PURE__*/function () {
   function SecurityService() {
     _classCallCheck(this, SecurityService);
     _defineProperty(this, "logger", void 0);
     _defineProperty(this, "productScene", ProductSceneEnum.EASY_PAY);
+    _defineProperty(this, "environment", void 0);
   }
   _createClass(SecurityService, [{
     key: "init",
     value: function init(initOptions, instanceId, sdkMetaData) {
       this.logger = ServiceProvider.getInstance(instanceId).getService('Log');
       this.productScene = sdkMetaData.productScene;
+      this.environment = initOptions === null || initOptions === void 0 ? void 0 : initOptions.environment;
     }
   }, {
     key: "update",
@@ -46,40 +50,44 @@ export var SecurityService = /*#__PURE__*/function () {
               return _context2.abrupt("return", new Promise(function (resolve) {
                 // To avoid rendering being blocked, move the logic to the next event loop for processing
                 setTimeout( /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
-                  var getDeviceIdStartTime, securitySDK, deviceId;
+                  var getDeviceIdStartTime, product, securitySDK, deviceId;
                   return _regeneratorRuntime().wrap(function _callee$(_context) {
                     while (1) switch (_context.prev = _context.next) {
                       case 0:
                         getDeviceIdStartTime = Date.now();
-                        securitySDK = _this._getSecuritySDKByProductScene({
-                          product: (deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.productScene) || _this.productScene
+                        product = (deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.productScene) || _this.productScene;
+                        _context.next = 4;
+                        return _this._getSecuritySDKByProductScene({
+                          product: product
                         });
+                      case 4:
+                        securitySDK = _context.sent;
                         deviceId = '';
                         if (!securitySDK) {
-                          _context.next = 15;
+                          _context.next = 18;
                           break;
                         }
                         if (!(isPolling && parseInt(deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.tokenCollectTime) > 0)) {
-                          _context.next = 10;
+                          _context.next = 13;
                           break;
                         }
-                        _context.next = 7;
+                        _context.next = 10;
                         return securitySDK.pollingGetApdidToken(deviceIdParameter);
-                      case 7:
+                      case 10:
                         _context.t0 = _context.sent;
-                        _context.next = 13;
+                        _context.next = 16;
                         break;
-                      case 10:
-                        _context.next = 12;
+                      case 13:
+                        _context.next = 15;
                         return securitySDK.getApdidToken();
-                      case 12:
+                      case 15:
                         _context.t0 = _context.sent;
-                      case 13:
+                      case 16:
                         deviceId = _context.t0;
                         _this.logDeviceId(deviceId, getDeviceIdStartTime);
-                      case 15:
+                      case 18:
                         resolve(deviceId);
-                      case 16:
+                      case 19:
                       case "end":
                         return _context.stop();
                     }
@@ -145,6 +153,10 @@ export var SecurityService = /*#__PURE__*/function () {
         var isPre,
           timeout,
           sdkAction,
+          scene,
+          existing,
+          apdidEnv,
+          loader,
           _args5 = arguments;
         return _regeneratorRuntime().wrap(function _callee5$(_context5) {
           while (1) switch (_context5.prev = _context5.next) {
@@ -152,17 +164,78 @@ export var SecurityService = /*#__PURE__*/function () {
               isPre = _args5.length > 0 && _args5[0] !== undefined ? _args5[0] : false;
               timeout = _args5.length > 1 ? _args5[1] : undefined;
               sdkAction = isPre ? 'PreInit' : 'Init';
-              if (!this._getSecuritySDKByProductScene({
-                product: this.productScene
-              })) {
-                _context5.next = 5;
+              scene = this._getSceneByProduct(this.productScene); // Check if already ready
+              if (!SecuritySdkRegistry.isReady(scene)) {
+                _context5.next = 6;
                 break;
               }
               return _context5.abrupt("return", Promise.resolve());
-            case 5:
+            case 6:
+              if (!SecuritySdkRegistry.isLoading(scene)) {
+                _context5.next = 19;
+                break;
+              }
+              existing = SecuritySdkRegistry.get(scene);
+              if (!(existing && existing.status === 'loading')) {
+                _context5.next = 19;
+                break;
+              }
+              _context5.prev = 9;
+              _context5.next = 12;
+              return existing.loadingPromise;
+            case 12:
+              this.logger.logInfo({
+                title: "sdk_event_securitySdk".concat(sdkAction, "Success")
+              }).send();
+              _context5.next = 18;
+              break;
+            case 15:
+              _context5.prev = 15;
+              _context5.t0 = _context5["catch"](9);
+              this.logger.logError({
+                title: 'sdk_error_securitySdkInitFailed'
+              }, {
+                productScene: this.productScene,
+                sign: isPre ? 'Active initialization' : 'SDK internal initialization'
+              }).send();
+            case 18:
+              return _context5.abrupt("return");
+            case 19:
               this.logger.logInfo({
                 title: "sdk_event_securitySdk".concat(sdkAction)
               });
+
+              // 非阻塞调度 ApdidLoader 加载，在浏览器空闲时发起，2s 超时兜底
+              // Security 内部的 ensureApdidLoaded() 会在需要 token 时按需等待加载完成
+              apdidEnv = mapEnvironment(this.environment);
+              loader = ApdidLoader.getInstance();
+              loader.scheduleLoad({
+                environment: apdidEnv,
+                callbacks: {
+                  onLoad: function onLoad(duration) {
+                    _this2.logger.logInfo({
+                      title: 'sdk_event_securitySdkScriptLoaded'
+                    }, {
+                      eventMessage: "".concat(duration)
+                    }).send();
+                  },
+                  onLoadFailed: function onLoadFailed(error) {
+                    _this2.logger.logError({
+                      title: 'sdk_event_securitySdkLoadFailed',
+                      msg: error.message
+                    }, {
+                      productScene: _this2.productScene
+                    }).send();
+                  },
+                  onLoadTimeout: function onLoadTimeout() {
+                    _this2.logger.logError({
+                      title: 'sdk_event_securitySdkScriptLoadTimeout'
+                    }, {
+                      productScene: _this2.productScene
+                    }).send();
+                  }
+                }
+              });
               return _context5.abrupt("return", new Promise(function (resolve, reject) {
                 if (timeout) {
                   setTimeout(function () {
@@ -196,11 +269,11 @@ export var SecurityService = /*#__PURE__*/function () {
                   reject();
                 });
               }));
-            case 7:
+            case 24:
             case "end":
               return _context5.stop();
           }
-        }, _callee5, this);
+        }, _callee5, this, [[9, 15]]);
       }));
       function _initSecurity() {
         return _initSecurity3.apply(this, arguments);
@@ -227,34 +300,85 @@ export var SecurityService = /*#__PURE__*/function () {
     }
 
     /**
-     * @description Obtain security SDK through scenario identification
+     * Get the scene string from product enum
      */
   }, {
-    key: "_getSecuritySDKByProductScene",
-    value: function _getSecuritySDKByProductScene(securityConfig) {
-      var storage = this._getSecurityConfigStorage(securityConfig.product);
-      var scene = storage.scene || getSecurityScene(securityConfig.product);
-      var securitySdk = SecurityService.securitySdkMap.get(scene);
-      return securitySdk;
+    key: "_getSceneByProduct",
+    value: function _getSceneByProduct(product) {
+      var storage = this._getSecurityConfigStorage(product);
+      return storage.scene || getSecurityScene(product);
     }
 
     /**
-     * @description New security SDK through scenario identification
+     * @description Obtain security SDK through scenario identification (async-aware)
+     * Handles three states: ready, loading, not found
      */
+  }, {
+    key: "_getSecuritySDKByProductScene",
+    value: (function () {
+      var _getSecuritySDKByProductScene2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee6(securityConfig) {
+        var scene;
+        return _regeneratorRuntime().wrap(function _callee6$(_context6) {
+          while (1) switch (_context6.prev = _context6.next) {
+            case 0:
+              scene = this._getSceneByProduct(securityConfig.product);
+              return _context6.abrupt("return", SecuritySdkRegistry.getInstance(scene));
+            case 2:
+            case "end":
+              return _context6.stop();
+          }
+        }, _callee6, this);
+      }));
+      function _getSecuritySDKByProductScene(_x3) {
+        return _getSecuritySDKByProductScene2.apply(this, arguments);
+      }
+      return _getSecuritySDKByProductScene;
+    }()
+    /**
+     * @description New security SDK through scenario identification (async)
+     * Uses shared SecuritySdkRegistry to avoid duplicate initialization
+     */
+    )
   }, {
     key: "_newSecuritySDKByScene",
     value: function _newSecuritySDKByScene(securityConfig, successCallback, failCallback) {
       var storage = this._getSecurityConfigStorage(securityConfig.product);
       var scene = storage.scene || getSecurityScene(securityConfig.product);
       var h5gateway = storage.h5gateway || getSecurityHost(securityConfig.region);
+
+      // Check if already exists in registry (avoid duplicates)
+      var existingEntry = SecuritySdkRegistry.get(scene);
+      if (existingEntry && (existingEntry.status === 'ready' || existingEntry.status === 'loading')) {
+        if (existingEntry.status === 'ready') {
+          successCallback && successCallback();
+        }
+        // If loading, the existing callbacks will handle it
+        return;
+      }
       try {
         var securitySdk = new Security({
           scene: scene,
-          h5gateway: h5gateway
+          h5gateway: h5gateway,
+          environment: this.environment
         });
-        SecurityService.securitySdkMap.set(scene, securitySdk);
-        securitySdk.initSecurity(successCallback, failCallback);
+
+        // Create loading promise and register in registry
+        var loadingPromise = new Promise(function (resolveLoading, rejectLoading) {
+          securitySdk.initSecurity(function () {
+            SecuritySdkRegistry.setReady(scene, securitySdk);
+            successCallback && successCallback();
+            resolveLoading(securitySdk);
+          }, function (msg) {
+            SecuritySdkRegistry.setFailed(scene, new Error(msg || 'Security init failed'));
+            failCallback && failCallback(msg);
+            rejectLoading(new Error(msg || 'Security init failed'));
+          });
+        });
+
+        // Register as loading in the shared registry
+        SecuritySdkRegistry.setLoading(scene, loadingPromise);
       } catch (error) {
+        SecuritySdkRegistry.setFailed(scene, new Error(error === null || error === void 0 ? void 0 : error.toString()));
         failCallback && failCallback(error === null || error === void 0 ? void 0 : error.toString());
       }
     }
@@ -280,5 +404,4 @@ export var SecurityService = /*#__PURE__*/function () {
     }
   }]);
   return SecurityService;
-}();
-_defineProperty(SecurityService, "securitySdkMap", new Map());
+}();

package/esm/foundation/service/security/security.d.ts

@@ -1,4 +1,5 @@
 import { IsecurityConfig, ProductSceneEnum, DeviceIdParameter } from '../../../types';
+import type { ApdidEnvironment } from '../../../util/jshield-apdid';
 export declare const getSecurityConfigStorageKey: (scene: ProductSceneEnum) => string;
 export declare enum SecurityRegionEnum {
     SG = "SG",
@@ -22,10 +23,30 @@ export declare const sceneMap: {
 };
 export declare const getSecurityHost: (region: string) => string;
 export declare const getSecurityScene: (product: string) => string;
+/**
+ * Map SDK environment string to ApdidEnvironment for CDN URL selection.
+ */
+export declare const mapEnvironment: (env?: string) => ApdidEnvironment;
 export declare class Security {
     scene: string;
     h5gateway: string;
-    constructor(options: IsecurityConfig);
+    private environment?;
+    private apdidLoaded;
+    private apdidLoadFailed;
+    constructor(options: IsecurityConfig & {
+        environment?: string;
+    });
+    /**
+     * Ensure the apdid-core script is loaded async.
+     * Returns true if loaded successfully, false otherwise.
+     * On failure, sets apdidLoadFailed flag for graceful degradation.
+     */
+    private ensureApdidLoaded;
+    /**
+     * Get the APDID module from the loader.
+     * Returns undefined if not loaded.
+     */
+    private getAPDIDModule;
     initSecurity(successCallback: any, failCallback: any): void;
     private initToken;
     pollingGetApdidToken(config?: DeviceIdParameter): Promise<string>;

package/esm/foundation/service/security/security.js

@@ -9,7 +9,7 @@ function _defineProperty(obj, key, value) { key = _toPropertyKey(key); if (key i
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : String(i); }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
 import { ProductSceneEnum } from "../../../types";
-import APDID from "../../../util/jshield-apdid/apdid-core.umd.min";
+import { ApdidLoader } from "../../../util/jshield-apdid";
 export var getSecurityConfigStorageKey = function getSecurityConfigStorageKey(scene) {
   return "AMSSDK_SECURITY_CONFIG_".concat(scene);
 };
@@ -31,17 +31,108 @@ export var getSecurityHost = function getSecurityHost(region) {
 export var getSecurityScene = function getSecurityScene(product) {
   return sceneMap[product] || '';
 };
+
+/**
+ * Map SDK environment string to ApdidEnvironment for CDN URL selection.
+ */
+export var mapEnvironment = function mapEnvironment(env) {
+  if (!env) return 'production';
+  var lower = env.toLowerCase();
+  if (lower === 'pre' || lower === 'light_sandbox') return 'pre';
+  if (lower === 'dev' || lower === 'test' || lower === 'local') return 'dev';
+  return 'production';
+};
 export var Security = /*#__PURE__*/function () {
   function Security(options) {
     _classCallCheck(this, Security);
     _defineProperty(this, "scene", void 0);
     _defineProperty(this, "h5gateway", void 0);
+    _defineProperty(this, "environment", void 0);
+    _defineProperty(this, "apdidLoaded", false);
+    _defineProperty(this, "apdidLoadFailed", false);
     this.scene = options.scene;
     this.h5gateway = options.h5gateway || securityHost[SecurityRegionEnum.SG];
+    this.environment = options.environment;
   }
+
+  /**
+   * Ensure the apdid-core script is loaded async.
+   * Returns true if loaded successfully, false otherwise.
+   * On failure, sets apdidLoadFailed flag for graceful degradation.
+   */
   _createClass(Security, [{
+    key: "ensureApdidLoaded",
+    value: (function () {
+      var _ensureApdidLoaded = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+        var loader, apdidEnv;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              if (!this.apdidLoaded) {
+                _context.next = 2;
+                break;
+              }
+              return _context.abrupt("return", true);
+            case 2:
+              if (!this.apdidLoadFailed) {
+                _context.next = 4;
+                break;
+              }
+              return _context.abrupt("return", false);
+            case 4:
+              loader = ApdidLoader.getInstance();
+              apdidEnv = mapEnvironment(this.environment);
+              _context.prev = 6;
+              _context.next = 9;
+              return loader.load({
+                environment: apdidEnv,
+                callbacks: {
+                  onLoad: function onLoad(duration) {
+                    console.log("[Security] apdid-core script loaded in ".concat(duration, "ms"));
+                  },
+                  onLoadFailed: function onLoadFailed(error) {
+                    console.error('[Security] apdid-core script load failed:', error.message);
+                  },
+                  onLoadTimeout: function onLoadTimeout() {
+                    console.error('[Security] apdid-core script load timeout');
+                  }
+                }
+              });
+            case 9:
+              this.apdidLoaded = true;
+              return _context.abrupt("return", true);
+            case 13:
+              _context.prev = 13;
+              _context.t0 = _context["catch"](6);
+              console.error('[Security] apdid-core load error, degrading:', _context.t0);
+              this.apdidLoadFailed = true;
+              return _context.abrupt("return", false);
+            case 18:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this, [[6, 13]]);
+      }));
+      function ensureApdidLoaded() {
+        return _ensureApdidLoaded.apply(this, arguments);
+      }
+      return ensureApdidLoaded;
+    }()
+    /**
+     * Get the APDID module from the loader.
+     * Returns undefined if not loaded.
+     */
+    )
+  }, {
+    key: "getAPDIDModule",
+    value: function getAPDIDModule() {
+      var loader = ApdidLoader.getInstance();
+      return loader.getApdidModule();
+    }
+  }, {
     key: "initSecurity",
     value: function initSecurity(successCallback, failCallback) {
+      var _this = this;
       if (!this.scene) {
         throw new Error('securityConfig parameter error');
       }
@@ -50,12 +141,23 @@ export var Security = /*#__PURE__*/function () {
         console.error(errorMsg);
         throw new Error(errorMsg);
       }
-      this.initToken(successCallback, failCallback);
+
+      // Async: ensure script is loaded before calling initToken
+      this.ensureApdidLoaded().then(function (loaded) {
+        if (!loaded) {
+          failCallback && failCallback('apdid-core script load failed');
+          return;
+        }
+        _this.initToken(successCallback, failCallback);
+      }).catch(function () {
+        failCallback && failCallback('apdid-core script load failed');
+      });
     }
   }, {
     key: "initToken",
     value: function initToken(successCallback, failCallback) {
       try {
+        var APDID = this.getAPDIDModule();
         APDID === null || APDID === void 0 || APDID.initToken(this.scene, {
           host: this.h5gateway
         }, function (success, tokenResult, msg) {
@@ -64,7 +166,6 @@ export var Security = /*#__PURE__*/function () {
           } else {
             failCallback && failCallback(msg);
           }
-          console.log('initToken result tokenResult', JSON.stringify(tokenResult), msg);
         });
       } catch (error) {
         failCallback && failCallback(error === null || error === void 0 ? void 0 : error.toString());
@@ -73,48 +174,48 @@ export var Security = /*#__PURE__*/function () {
   }, {
     key: "pollingGetApdidToken",
     value: function () {
-      var _pollingGetApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(config) {
-        var _this = this;
+      var _pollingGetApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(config) {
+        var _this2 = this;
         var tokenCollectTime, dataPollingInterval, asyncFunc;
-        return _regeneratorRuntime().wrap(function _callee3$(_context3) {
-          while (1) switch (_context3.prev = _context3.next) {
+        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
+          while (1) switch (_context4.prev = _context4.next) {
             case 0:
               tokenCollectTime = parseInt((config === null || config === void 0 ? void 0 : config.tokenCollectTime) || '0', 10);
               dataPollingInterval = parseInt((config === null || config === void 0 ? void 0 : config.dataPollingInterval) || '500', 10);
               asyncFunc = /*#__PURE__*/function () {
-                var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(resolve) {
+                var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(resolve) {
                   var deviceId, interval, polling;
-                  return _regeneratorRuntime().wrap(function _callee2$(_context2) {
-                    while (1) switch (_context2.prev = _context2.next) {
+                  return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+                    while (1) switch (_context3.prev = _context3.next) {
                       case 0:
-                        _context2.next = 2;
-                        return _this.getApdidToken();
+                        _context3.next = 2;
+                        return _this2.getApdidToken();
                       case 2:
-                        deviceId = _context2.sent;
+                        deviceId = _context3.sent;
                         if (!deviceId) {
-                          _context2.next = 5;
+                          _context3.next = 5;
                           break;
                         }
-                        return _context2.abrupt("return", resolve(deviceId));
+                        return _context3.abrupt("return", resolve(deviceId));
                       case 5:
                         polling = /*#__PURE__*/function () {
-                          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
-                            return _regeneratorRuntime().wrap(function _callee$(_context) {
-                              while (1) switch (_context.prev = _context.next) {
+                          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
+                            return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+                              while (1) switch (_context2.prev = _context2.next) {
                                 case 0:
-                                  _context.next = 2;
-                                  return _this.getApdidToken();
+                                  _context2.next = 2;
+                                  return _this2.getApdidToken();
                                 case 2:
-                                  deviceId = _context.sent;
+                                  deviceId = _context2.sent;
                                   if (deviceId) {
                                     clearInterval(interval);
                                     resolve(deviceId);
                                   }
                                 case 4:
                                 case "end":
-                                  return _context.stop();
+                                  return _context2.stop();
                               }
-                            }, _callee);
+                            }, _callee2);
                           }));
                           return function polling() {
                             return _ref2.apply(this, arguments);
@@ -127,22 +228,22 @@ export var Security = /*#__PURE__*/function () {
                         }, tokenCollectTime);
                       case 8:
                       case "end":
-                        return _context2.stop();
+                        return _context3.stop();
                     }
-                  }, _callee2);
+                  }, _callee3);
                 }));
                 return function asyncFunc(_x2) {
                   return _ref.apply(this, arguments);
                 };
               }();
-              return _context3.abrupt("return", new Promise(function (resolve) {
+              return _context4.abrupt("return", new Promise(function (resolve) {
                 asyncFunc(resolve);
               }));
             case 4:
             case "end":
-              return _context3.stop();
+              return _context4.stop();
           }
-        }, _callee3);
+        }, _callee4);
       }));
       function pollingGetApdidToken(_x) {
         return _pollingGetApdidToken.apply(this, arguments);
@@ -152,25 +253,37 @@ export var Security = /*#__PURE__*/function () {
   }, {
     key: "getApdidToken",
     value: function () {
-      var _getApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4() {
-        var _this2 = this;
-        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
-          while (1) switch (_context4.prev = _context4.next) {
+      var _getApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5() {
+        var _this3 = this;
+        var loaded;
+        return _regeneratorRuntime().wrap(function _callee5$(_context5) {
+          while (1) switch (_context5.prev = _context5.next) {
             case 0:
-              return _context4.abrupt("return", new Promise(function (resolve) {
+              _context5.next = 2;
+              return this.ensureApdidLoaded();
+            case 2:
+              loaded = _context5.sent;
+              if (loaded) {
+                _context5.next = 5;
+                break;
+              }
+              return _context5.abrupt("return", '');
+            case 5:
+              return _context5.abrupt("return", new Promise(function (resolve) {
                 try {
-                  APDID === null || APDID === void 0 || APDID.getApdidToken(_this2.scene, function (tokenResult) {
+                  var APDID = _this3.getAPDIDModule();
+                  APDID === null || APDID === void 0 || APDID.getApdidToken(_this3.scene, function (tokenResult) {
                     resolve(tokenResult === null || tokenResult === void 0 ? void 0 : tokenResult.token);
                   });
                 } catch (error) {
                   resolve('');
                 }
               }));
-            case 1:
+            case 6:
             case "end":
-              return _context4.stop();
+              return _context5.stop();
           }
-        }, _callee4);
+        }, _callee5, this);
       }));
       function getApdidToken() {
         return _getApdidToken.apply(this, arguments);

package/esm/foundation/utils/preload_helper.d.ts

@@ -3,10 +3,13 @@ import { Security } from '../../util/security';
 export default class PreloadHelper {
     static isWebAppPreloaded: boolean;
     static isSecuritySDKPreloaded: boolean;
-    private static securitySdkMap;
     static preloadWebApp(productScene: ProductSceneEnum, paymentMethodCategoryType: PaymentMethodCategoryTypeEnum, environment?: string, useV2?: boolean): void;
-    static preloadSecuritySDK(product: ProductSceneEnum, securityRegion?: string): void;
-    static getSecuritySdk(scene: any): Security;
+    /**
+     * Preload security SDK asynchronously.
+     * Triggers ApdidLoader.load() for async script loading and registers in SecuritySdkRegistry.
+     */
+    static preloadSecuritySDK(product: ProductSceneEnum, securityRegion?: string, environment?: string): Promise<void>;
+    static getSecuritySdk(scene: string): Security | undefined;
     static buildWebAppPreloadUrl(productScene: ProductSceneEnum, paymentMethodCategoryType: PaymentMethodCategoryTypeEnum, environment: string, useV2?: boolean): {
         preloadUrl: string;
         containerId: string;