@authme/identity-verification 2.8.52 → 2.8.55

package/index.cjs.js

@@ -29332,7 +29332,7 @@ const modal = arg => {
   domTitle.innerText = arg.title;
   domSubtitle.innerText = arg.subtitle;
   domImage.src = arg.image;
-  domContent.innerHTML = arg.content;
+  domContent.textContent = arg.content;
   domClose.innerHTML = `<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1943 6.41714C19.6393 5.97216 19.6393 5.2507 19.1943 4.80571C18.7493 4.36073 18.0278 4.36073 17.5829 4.80571L12 10.3886L6.41714 4.80572C5.97216 4.36073 5.2507 4.36073 4.80571 4.80571C4.36073 5.2507 4.36073 5.97216 4.80571 6.41714L10.3886 12L4.80571 17.5829C4.36073 18.0278 4.36073 18.7493 4.80571 19.1943C5.2507 19.6393 5.97216 19.6393 6.41714 19.1943L12 13.6114L17.5829 19.1943C18.0278 19.6393 18.7493 19.6393 19.1943 19.1943C19.6393 18.7493 19.6393 18.0278 19.1943 17.5829L13.6114 12L19.1943 6.41714Z" fill="${uiThemeConfig.nonEkycCloseButton.contentColor}" fill-opacity="${uiThemeConfig.nonEkycCloseButton.contentOpacity}" /></svg>`;
   domConfirm.innerText = arg.confirm;
   domClose.addEventListener('click', async () => {
@@ -31561,7 +31561,7 @@ const toast = arg => {
   } else {
     toast.style.opacity = '1';
   }
-  toast.innerHTML = message;
+  toast.textContent = message;
   document.body.appendChild(toast);
   timer = setTimeout(() => {
     clearStatus = true;
@@ -31810,7 +31810,7 @@ const popupView = arg => {
   }
   if (arg.cancel) {
     util.uiThemeSmallButton(domCancel, uiThemeConfig.smallerMinorButton);
-    domCancel.innerHTML = arg.cancel;
+    domCancel.textContent = arg.cancel;
     domCancel.addEventListener('click', async () => {
       if (arg.onCancel) {
         arg.onCancel();
@@ -31824,9 +31824,9 @@ const popupView = arg => {
     }
     removePopview();
   });
-  domTitle.innerHTML = arg.title;
-  domContent.innerHTML = arg.content;
-  domConfirm.innerHTML = arg.confirm;
+  domTitle.textContent = arg.title;
+  domContent.textContent = arg.content;
+  domConfirm.textContent = arg.confirm;
   domPopupViewContainer.appendChild(domTitleContainer);
   domTitleContainer.appendChild(domTitle);
   domPopupViewContainer.appendChild(domContentContainer);
@@ -34998,12 +34998,14 @@ class MRZModule {
     let uploadFullFrame = false;
     let pubKey = '';
     let latestTField = null;
+    let currentCardType = null;
     const virtualCanvas = document.createElement('canvas');
     const docInfos = {};
     let shouldEncrypt = false;
     const encryptImageBase64 = async function encryptImageBase64(blob) {
       const imageArrayBuffer = await blobToArrayBuffer(blob);
-      const resultEncrypt = await _this.mrzService.encryptBlob(imageArrayBuffer, pubKey);
+      const uint8Array = new Uint8Array(imageArrayBuffer);
+      const resultEncrypt = await _this.mrzService.encryptBlob(uint8Array, pubKey);
       return resultEncrypt;
     };
     const blobToArrayBuffer = async function blobToArrayBuffer(blob) {
@@ -35040,6 +35042,8 @@ class MRZModule {
           frameHeight = height;
           const resp = await SendRequestWithRetry$1(() => idRecognition.initScan(config.type, config.country, config.needConfirm, config.cardTypes));
           shouldEncrypt = (_resp$shouldEncrypt = resp.shouldEncrypt) != null ? _resp$shouldEncrypt : shouldEncrypt;
+          util.Storage.setItem('shouldEncrypt', shouldEncrypt);
+          util.Storage.setItem('encryptDataBase64', encryptDataBase64);
           pubKey = resp.parameters.pubKey;
           scanId = resp.scanId;
           uploadFullFrame = (_resp$parameters$frau = (_resp$parameters$frau2 = resp.parameters.fraud) == null ? void 0 : _resp$parameters$frau2.collectAllFrames) != null ? _resp$parameters$frau : config.uploadFullFrame;
@@ -35059,9 +35063,15 @@ class MRZModule {
           });
         },
         ocrStart: async function (points, type, setBorderType, setCardBorderColor, setBorderSuccess, scanAnimationContainer, successAnimationContainer, frameImage, frameText, faceMode, cardType, retry = false) {
+          currentCardType = type;
           await _this.mrzService.init();
           await _this.mrzService.setFrameSize(frameWidth, frameHeight);
           await _this.mrzService.setMaskPosition(points.map(([x, y]) => [Number(x.toFixed(2)), Number(y.toFixed(2))]));
+          const oldParams = await _this.mrzService.getParams();
+          await _this.mrzService.setParams(Object.assign({}, oldParams, {
+            fImageBlurTh: 750,
+            fCardMatchTh: 0.3
+          }));
           await _this.mrzService.startSession();
           if (retry) {
             docInfos[type].ocrImg = null;
@@ -35100,6 +35110,7 @@ class MRZModule {
         },
         acceptTypes,
         recognition: async function (data) {
+          var _docInfos$currentCard;
           const mrzResult = await _this.mrzService.recognition(data);
           if (_this.canvas) {
             var _this$mrzService;
@@ -35114,8 +35125,28 @@ class MRZModule {
             imgData.data.set(debugData);
             ctx.putImageData(imgData, 0, 0);
           }
-          if (mrzResult.eStatus === idRecognition.EAuthMeMRZServiceStatus.Success && !!docInfos[idRecognition.EAuthMeCardClass.Passport].docId) {
-            docInfos[idRecognition.EAuthMeCardClass.Passport].ocrOriginImg = util.UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
+          if (mrzResult.eStatus === idRecognition.EAuthMeMRZServiceStatus.Success) {
+            const cardType = currentCardType;
+            const ocrOriginImg = util.UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
+            // V9: 如果有卡片圖像就使用它，否則使用原始幀圖像
+            let resultOcrImg;
+            if (mrzResult.imageData && mrzResult.iWidth > 0 && mrzResult.iHeight > 0) {
+              resultOcrImg = util.UintArrayToBlob(mrzResult.iWidth, mrzResult.iHeight, mrzResult.imageData, virtualCanvas);
+            } else {
+              resultOcrImg = ocrOriginImg;
+            }
+            // 存圖不等 docId — 避免競態條件導致圖片遺失
+            if (!docInfos[cardType]) {
+              docInfos[cardType] = {
+                docId: '',
+                ocrImg: null,
+                ocrOriginImg: null,
+                fraudOriginImg: null,
+                fraudResult: null
+              };
+            }
+            docInfos[cardType].ocrImg = resultOcrImg;
+            docInfos[cardType].ocrOriginImg = ocrOriginImg;
             await _this.mrzService.stop();
             // 1. 最後結果統一使用 getFinalResult 取得的結果。
             // 2. 由於 engine-lib 限制，getFinalResult 必須要在 stop 之後呼叫。
@@ -35159,13 +35190,13 @@ class MRZModule {
                 }
               }
             }
-          } else if (uploadFullFrame) {
+          } else if (uploadFullFrame && currentCardType && (_docInfos$currentCard = docInfos[currentCardType]) != null && _docInfos$currentCard.docId) {
             const image = util.UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
             const requestImg = await encryptImageBase64(image);
-            // downloadImage(image, `${frameIndex}-${docInfos[type as EAuthMeCardClass].docId}-${new Date().getTime().toString()}.jpg`)
+            const uploadCardType = currentCardType;
             util.backgroundRequest(async function () {
               const postData = {
-                scanDocumentId: docInfos[idRecognition.EAuthMeCardClass.Passport].docId,
+                scanDocumentId: docInfos[uploadCardType].docId,
                 image: requestImg,
                 type: idRecognition.ResourceImageType.Recognition,
                 info: {
@@ -35194,10 +35225,15 @@ class MRZModule {
           }
         },
         confirmImage: async function (option) {
-          const docId = docInfos[option.type].docId;
+          var _docInfos$option$type;
+          const docId = (_docInfos$option$type = docInfos[option.type]) == null ? void 0 : _docInfos$option$type.docId;
           if (docId) {
             docInfos[option.type].docId = '';
-            const requestImg = await encryptImageBase64(docInfos[option.type].ocrOriginImg);
+            const ocrOriginImg = docInfos[option.type].ocrOriginImg;
+            if (!ocrOriginImg) {
+              throw new core.AuthmeError(core.ErrorCode.SDK_INTERNAL_ERROR, 'MRZ card image not available for upload');
+            }
+            const requestImg = await encryptImageBase64(ocrOriginImg);
             const report = await _this.mrzService.getReport();
             await SendRequestWithRetry$1(async function () {
               const postData = {
@@ -35210,7 +35246,7 @@ class MRZModule {
                 }
               };
               if (shouldEncrypt) {
-                postData.image = await blobToBase64(docInfos[option.type].ocrOriginImg);
+                postData.image = await blobToBase64(ocrOriginImg);
                 return idRecognition.uploadFrameBase64({
                   id: scanId,
                   encryptedBase64String: await encryptDataBase64(postData)
@@ -35638,7 +35674,8 @@ class OCRModule {
     const docInfos = {};
     const encryptImageBase64 = async function encryptImageBase64(blob) {
       const imageArrayBuffer = await blobToArrayBuffer(blob);
-      const resultEncrypt = await _this.ocrService.encryptBlob(imageArrayBuffer, pubKey);
+      const uint8Array = new Uint8Array(imageArrayBuffer);
+      const resultEncrypt = await _this.ocrService.encryptBlob(uint8Array, pubKey);
       return resultEncrypt;
     };
     const blobToArrayBuffer = async function blobToArrayBuffer(blob) {
@@ -35775,6 +35812,9 @@ class OCRModule {
             _this.engine.setPublicKeyForJson('');
           }
           if (config.type === idRecognition.IdRecognitionCardType.IDCard && config.needAntiFraud) {
+            if (!resp.parameters.fraud) {
+              throw new core.AuthmeError(core.ErrorCode.ANTI_FRAUD_INIT_ERROR, 'Anti-fraud feature is not enabled on the server');
+            }
             // 先設定 stage 再 init，避免使用預設的 Frontal stage
             await _this.antiFraudInstance.setStage(antiFraudStageList);
             await _this.antiFraudInstance.init();
@@ -36841,7 +36881,6 @@ class OCRModule {
         throw new core.AuthmeError(core.ErrorCode.EVENT_NAME_WRONG);
       }))).pipe(rxjs.tap(downloadDebugLogs)));
     } catch (error) {
-      console.error(error);
       const catchedError = error instanceof core.AuthmeError ? error : new core.AuthmeError(core.ErrorCode.SDK_INTERNAL_ERROR, error);
       downloadDebugLogs();
       return {
@@ -37322,7 +37361,7 @@ class AuthmeIdentityVerification extends engine.AuthmeFunctionModule {
 }
 
 var name = "authme/sdk";
-var version$1 = "2.8.52";
+var version$1 = "2.8.55";
 var packageInfo = {
 	name: name,
 	version: version$1};

package/index.esm.js

@@ -29330,7 +29330,7 @@ const modal = arg => {
   domTitle.innerText = arg.title;
   domSubtitle.innerText = arg.subtitle;
   domImage.src = arg.image;
-  domContent.innerHTML = arg.content;
+  domContent.textContent = arg.content;
   domClose.innerHTML = `<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1943 6.41714C19.6393 5.97216 19.6393 5.2507 19.1943 4.80571C18.7493 4.36073 18.0278 4.36073 17.5829 4.80571L12 10.3886L6.41714 4.80572C5.97216 4.36073 5.2507 4.36073 4.80571 4.80571C4.36073 5.2507 4.36073 5.97216 4.80571 6.41714L10.3886 12L4.80571 17.5829C4.36073 18.0278 4.36073 18.7493 4.80571 19.1943C5.2507 19.6393 5.97216 19.6393 6.41714 19.1943L12 13.6114L17.5829 19.1943C18.0278 19.6393 18.7493 19.6393 19.1943 19.1943C19.6393 18.7493 19.6393 18.0278 19.1943 17.5829L13.6114 12L19.1943 6.41714Z" fill="${uiThemeConfig.nonEkycCloseButton.contentColor}" fill-opacity="${uiThemeConfig.nonEkycCloseButton.contentOpacity}" /></svg>`;
   domConfirm.innerText = arg.confirm;
   domClose.addEventListener('click', async () => {
@@ -31559,7 +31559,7 @@ const toast = arg => {
   } else {
     toast.style.opacity = '1';
   }
-  toast.innerHTML = message;
+  toast.textContent = message;
   document.body.appendChild(toast);
   timer = setTimeout(() => {
     clearStatus = true;
@@ -31808,7 +31808,7 @@ const popupView = arg => {
   }
   if (arg.cancel) {
     uiThemeSmallButton(domCancel, uiThemeConfig.smallerMinorButton);
-    domCancel.innerHTML = arg.cancel;
+    domCancel.textContent = arg.cancel;
     domCancel.addEventListener('click', async () => {
       if (arg.onCancel) {
         arg.onCancel();
@@ -31822,9 +31822,9 @@ const popupView = arg => {
     }
     removePopview();
   });
-  domTitle.innerHTML = arg.title;
-  domContent.innerHTML = arg.content;
-  domConfirm.innerHTML = arg.confirm;
+  domTitle.textContent = arg.title;
+  domContent.textContent = arg.content;
+  domConfirm.textContent = arg.confirm;
   domPopupViewContainer.appendChild(domTitleContainer);
   domTitleContainer.appendChild(domTitle);
   domPopupViewContainer.appendChild(domContentContainer);
@@ -34996,12 +34996,14 @@ class MRZModule {
     let uploadFullFrame = false;
     let pubKey = '';
     let latestTField = null;
+    let currentCardType = null;
     const virtualCanvas = document.createElement('canvas');
     const docInfos = {};
     let shouldEncrypt = false;
     const encryptImageBase64 = async function encryptImageBase64(blob) {
       const imageArrayBuffer = await blobToArrayBuffer(blob);
-      const resultEncrypt = await _this.mrzService.encryptBlob(imageArrayBuffer, pubKey);
+      const uint8Array = new Uint8Array(imageArrayBuffer);
+      const resultEncrypt = await _this.mrzService.encryptBlob(uint8Array, pubKey);
       return resultEncrypt;
     };
     const blobToArrayBuffer = async function blobToArrayBuffer(blob) {
@@ -35038,6 +35040,8 @@ class MRZModule {
           frameHeight = height;
           const resp = await SendRequestWithRetry$1(() => initScan(config.type, config.country, config.needConfirm, config.cardTypes));
           shouldEncrypt = (_resp$shouldEncrypt = resp.shouldEncrypt) != null ? _resp$shouldEncrypt : shouldEncrypt;
+          Storage.setItem('shouldEncrypt', shouldEncrypt);
+          Storage.setItem('encryptDataBase64', encryptDataBase64);
           pubKey = resp.parameters.pubKey;
           scanId = resp.scanId;
           uploadFullFrame = (_resp$parameters$frau = (_resp$parameters$frau2 = resp.parameters.fraud) == null ? void 0 : _resp$parameters$frau2.collectAllFrames) != null ? _resp$parameters$frau : config.uploadFullFrame;
@@ -35057,9 +35061,15 @@ class MRZModule {
           });
         },
         ocrStart: async function (points, type, setBorderType, setCardBorderColor, setBorderSuccess, scanAnimationContainer, successAnimationContainer, frameImage, frameText, faceMode, cardType, retry = false) {
+          currentCardType = type;
           await _this.mrzService.init();
           await _this.mrzService.setFrameSize(frameWidth, frameHeight);
           await _this.mrzService.setMaskPosition(points.map(([x, y]) => [Number(x.toFixed(2)), Number(y.toFixed(2))]));
+          const oldParams = await _this.mrzService.getParams();
+          await _this.mrzService.setParams(Object.assign({}, oldParams, {
+            fImageBlurTh: 750,
+            fCardMatchTh: 0.3
+          }));
           await _this.mrzService.startSession();
           if (retry) {
             docInfos[type].ocrImg = null;
@@ -35098,6 +35108,7 @@ class MRZModule {
         },
         acceptTypes,
         recognition: async function (data) {
+          var _docInfos$currentCard;
           const mrzResult = await _this.mrzService.recognition(data);
           if (_this.canvas) {
             var _this$mrzService;
@@ -35112,8 +35123,28 @@ class MRZModule {
             imgData.data.set(debugData);
             ctx.putImageData(imgData, 0, 0);
           }
-          if (mrzResult.eStatus === EAuthMeMRZServiceStatus.Success && !!docInfos[EAuthMeCardClass.Passport].docId) {
-            docInfos[EAuthMeCardClass.Passport].ocrOriginImg = UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
+          if (mrzResult.eStatus === EAuthMeMRZServiceStatus.Success) {
+            const cardType = currentCardType;
+            const ocrOriginImg = UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
+            // V9: 如果有卡片圖像就使用它，否則使用原始幀圖像
+            let resultOcrImg;
+            if (mrzResult.imageData && mrzResult.iWidth > 0 && mrzResult.iHeight > 0) {
+              resultOcrImg = UintArrayToBlob(mrzResult.iWidth, mrzResult.iHeight, mrzResult.imageData, virtualCanvas);
+            } else {
+              resultOcrImg = ocrOriginImg;
+            }
+            // 存圖不等 docId — 避免競態條件導致圖片遺失
+            if (!docInfos[cardType]) {
+              docInfos[cardType] = {
+                docId: '',
+                ocrImg: null,
+                ocrOriginImg: null,
+                fraudOriginImg: null,
+                fraudResult: null
+              };
+            }
+            docInfos[cardType].ocrImg = resultOcrImg;
+            docInfos[cardType].ocrOriginImg = ocrOriginImg;
             await _this.mrzService.stop();
             // 1. 最後結果統一使用 getFinalResult 取得的結果。
             // 2. 由於 engine-lib 限制，getFinalResult 必須要在 stop 之後呼叫。
@@ -35157,13 +35188,13 @@ class MRZModule {
                 }
               }
             }
-          } else if (uploadFullFrame) {
+          } else if (uploadFullFrame && currentCardType && (_docInfos$currentCard = docInfos[currentCardType]) != null && _docInfos$currentCard.docId) {
             const image = UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
             const requestImg = await encryptImageBase64(image);
-            // downloadImage(image, `${frameIndex}-${docInfos[type as EAuthMeCardClass].docId}-${new Date().getTime().toString()}.jpg`)
+            const uploadCardType = currentCardType;
             backgroundRequest(async function () {
               const postData = {
-                scanDocumentId: docInfos[EAuthMeCardClass.Passport].docId,
+                scanDocumentId: docInfos[uploadCardType].docId,
                 image: requestImg,
                 type: ResourceImageType.Recognition,
                 info: {
@@ -35192,10 +35223,15 @@ class MRZModule {
           }
         },
         confirmImage: async function (option) {
-          const docId = docInfos[option.type].docId;
+          var _docInfos$option$type;
+          const docId = (_docInfos$option$type = docInfos[option.type]) == null ? void 0 : _docInfos$option$type.docId;
           if (docId) {
             docInfos[option.type].docId = '';
-            const requestImg = await encryptImageBase64(docInfos[option.type].ocrOriginImg);
+            const ocrOriginImg = docInfos[option.type].ocrOriginImg;
+            if (!ocrOriginImg) {
+              throw new AuthmeError(ErrorCode.SDK_INTERNAL_ERROR, 'MRZ card image not available for upload');
+            }
+            const requestImg = await encryptImageBase64(ocrOriginImg);
             const report = await _this.mrzService.getReport();
             await SendRequestWithRetry$1(async function () {
               const postData = {
@@ -35208,7 +35244,7 @@ class MRZModule {
                 }
               };
               if (shouldEncrypt) {
-                postData.image = await blobToBase64(docInfos[option.type].ocrOriginImg);
+                postData.image = await blobToBase64(ocrOriginImg);
                 return uploadFrameBase64({
                   id: scanId,
                   encryptedBase64String: await encryptDataBase64(postData)
@@ -35636,7 +35672,8 @@ class OCRModule {
     const docInfos = {};
     const encryptImageBase64 = async function encryptImageBase64(blob) {
       const imageArrayBuffer = await blobToArrayBuffer(blob);
-      const resultEncrypt = await _this.ocrService.encryptBlob(imageArrayBuffer, pubKey);
+      const uint8Array = new Uint8Array(imageArrayBuffer);
+      const resultEncrypt = await _this.ocrService.encryptBlob(uint8Array, pubKey);
       return resultEncrypt;
     };
     const blobToArrayBuffer = async function blobToArrayBuffer(blob) {
@@ -35773,6 +35810,9 @@ class OCRModule {
             _this.engine.setPublicKeyForJson('');
           }
           if (config.type === IdRecognitionCardType.IDCard && config.needAntiFraud) {
+            if (!resp.parameters.fraud) {
+              throw new AuthmeError(ErrorCode.ANTI_FRAUD_INIT_ERROR, 'Anti-fraud feature is not enabled on the server');
+            }
             // 先設定 stage 再 init，避免使用預設的 Frontal stage
             await _this.antiFraudInstance.setStage(antiFraudStageList);
             await _this.antiFraudInstance.init();
@@ -36839,7 +36879,6 @@ class OCRModule {
         throw new AuthmeError(ErrorCode.EVENT_NAME_WRONG);
       }))).pipe(tap(downloadDebugLogs)));
     } catch (error) {
-      console.error(error);
       const catchedError = error instanceof AuthmeError ? error : new AuthmeError(ErrorCode.SDK_INTERNAL_ERROR, error);
       downloadDebugLogs();
       return {
@@ -37320,7 +37359,7 @@ class AuthmeIdentityVerification extends AuthmeFunctionModule {
 }
 
 var name = "authme/sdk";
-var version$1 = "2.8.52";
+var version$1 = "2.8.55";
 var packageInfo = {
 	name: name,
 	version: version$1};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authme/identity-verification",
-  "version": "2.8.52",
+  "version": "2.8.55",
   "peerDependencies": {
     "core-js": "^3.6.0",
     "lottie-web": "^5.9.2",