@basis-theory/web-elements 3.0.0-beta.4 → 3.0.0-beta.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.vite/manifest.json +22 -11
- package/dist/basis-theory-sdk.es.js +1 -1
- package/dist/basis-theory-sdk.umd.js +1 -1
- package/dist/basis-theory-sdk.umd.js.map +1 -1
- package/dist/{create-card-B5zEHyRg.js → create-card-CB_YcP_4.js} +10 -6
- package/dist/create-card-CB_YcP_4.js.map +1 -0
- package/dist/create-card-display-kBupMJwe.js +280 -0
- package/dist/create-card-display-kBupMJwe.js.map +1 -0
- package/dist/{create-copy-button-DrAz8g0m.js → create-copy-button-2XtKTEo3.js} +5 -2
- package/dist/create-copy-button-2XtKTEo3.js.map +1 -0
- package/dist/{index-BOedIhUN.js → index-Dyy7tm5Z.js} +325 -108
- package/dist/index-Dyy7tm5Z.js.map +1 -0
- package/dist/index.d.ts +1119 -0
- package/dist/loader/basis-theory.min.js +1 -1
- package/dist/sri.json +9 -9
- package/dist/stats.html +1 -1
- package/package.json +12 -12
- package/dist/api-client/src/api-client.d.ts +0 -11
- package/dist/api-client/src/api-client.d.ts.map +0 -1
- package/dist/api-client/src/bin-lookup-transform.d.ts +0 -35
- package/dist/api-client/src/bin-lookup-transform.d.ts.map +0 -1
- package/dist/api-client/src/http-client.d.ts +0 -24
- package/dist/api-client/src/http-client.d.ts.map +0 -1
- package/dist/api-client/src/index.d.ts +0 -9
- package/dist/api-client/src/index.d.ts.map +0 -1
- package/dist/api-client/src/services/sessions.d.ts +0 -19
- package/dist/api-client/src/services/sessions.d.ts.map +0 -1
- package/dist/api-client/src/services/token-intents.d.ts +0 -17
- package/dist/api-client/src/services/token-intents.d.ts.map +0 -1
- package/dist/api-client/src/services/tokens.d.ts +0 -19
- package/dist/api-client/src/services/tokens.d.ts.map +0 -1
- package/dist/api-client/src/types.d.ts +0 -421
- package/dist/api-client/src/types.d.ts.map +0 -1
- package/dist/create-card-B5zEHyRg.js.map +0 -1
- package/dist/create-copy-button-DrAz8g0m.js.map +0 -1
- package/dist/index-BOedIhUN.js.map +0 -1
- package/dist/postmessage/src/client.d.ts +0 -7
- package/dist/postmessage/src/client.d.ts.map +0 -1
- package/dist/postmessage/src/event-map.d.ts +0 -139
- package/dist/postmessage/src/event-map.d.ts.map +0 -1
- package/dist/postmessage/src/index.d.ts +0 -9
- package/dist/postmessage/src/index.d.ts.map +0 -1
- package/dist/postmessage/src/server.d.ts +0 -11
- package/dist/postmessage/src/server.d.ts.map +0 -1
- package/dist/postmessage/src/types.d.ts +0 -75
- package/dist/postmessage/src/types.d.ts.map +0 -1
- package/dist/shared/src/api-url-resolver.d.ts +0 -22
- package/dist/shared/src/api-url-resolver.d.ts.map +0 -1
- package/dist/shared/src/debug-logger.d.ts +0 -16
- package/dist/shared/src/debug-logger.d.ts.map +0 -1
- package/dist/shared/src/deep-sanitization.d.ts +0 -24
- package/dist/shared/src/deep-sanitization.d.ts.map +0 -1
- package/dist/shared/src/errors.d.ts +0 -93
- package/dist/shared/src/errors.d.ts.map +0 -1
- package/dist/shared/src/generate-id.d.ts +0 -13
- package/dist/shared/src/generate-id.d.ts.map +0 -1
- package/dist/shared/src/index.d.ts +0 -14
- package/dist/shared/src/index.d.ts.map +0 -1
- package/dist/shared/src/logger-context.d.ts +0 -25
- package/dist/shared/src/logger-context.d.ts.map +0 -1
- package/dist/shared/src/proxy-validation.d.ts +0 -93
- package/dist/shared/src/proxy-validation.d.ts.map +0 -1
- package/dist/web-elements/src/BasisTheory.d.ts +0 -47
- package/dist/web-elements/src/BasisTheory.d.ts.map +0 -1
- package/dist/web-elements/src/basis-theory.d.ts +0 -85
- package/dist/web-elements/src/basis-theory.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-card-number.d.ts +0 -15
- package/dist/web-elements/src/elements/create-card-number.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-card.d.ts +0 -50
- package/dist/web-elements/src/elements/create-card.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-copy-button.d.ts +0 -19
- package/dist/web-elements/src/elements/create-copy-button.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-cvv.d.ts +0 -11
- package/dist/web-elements/src/elements/create-cvv.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-expiry.d.ts +0 -11
- package/dist/web-elements/src/elements/create-expiry.d.ts.map +0 -1
- package/dist/web-elements/src/elements/create-text.d.ts +0 -14
- package/dist/web-elements/src/elements/create-text.d.ts.map +0 -1
- package/dist/web-elements/src/index.d.ts +0 -27
- package/dist/web-elements/src/index.d.ts.map +0 -1
- package/dist/web-elements/src/mounter/create-mounter.d.ts +0 -11
- package/dist/web-elements/src/mounter/create-mounter.d.ts.map +0 -1
- package/dist/web-elements/src/theme/default-theme.d.ts +0 -22
- package/dist/web-elements/src/theme/default-theme.d.ts.map +0 -1
- package/dist/web-elements/src/theme/inject-theme-dark.d.ts +0 -13
- package/dist/web-elements/src/theme/inject-theme-dark.d.ts.map +0 -1
- package/dist/web-elements/src/theme/inject-theme.d.ts +0 -20
- package/dist/web-elements/src/theme/inject-theme.d.ts.map +0 -1
- package/dist/web-elements/src/types/events.d.ts +0 -165
- package/dist/web-elements/src/types/events.d.ts.map +0 -1
- package/dist/web-elements/src/types/theme.d.ts +0 -91
- package/dist/web-elements/src/types/theme.d.ts.map +0 -1
- package/dist/web-elements/src/types.d.ts +0 -667
- package/dist/web-elements/src/types.d.ts.map +0 -1
- package/dist/web-elements/src/utils/create-event-dispatcher.d.ts +0 -47
- package/dist/web-elements/src/utils/create-event-dispatcher.d.ts.map +0 -1
- package/dist/web-elements/src/utils/create-iframe.d.ts +0 -10
- package/dist/web-elements/src/utils/create-iframe.d.ts.map +0 -1
- package/dist/web-elements/src/utils/resolve-element-references.d.ts +0 -20
- package/dist/web-elements/src/utils/resolve-element-references.d.ts.map +0 -1
- package/dist/web-elements/src/utils/validate-element-options.d.ts +0 -11
- package/dist/web-elements/src/utils/validate-element-options.d.ts.map +0 -1
- package/dist/web-elements/src/utils/validate-sdk-config.d.ts +0 -15
- package/dist/web-elements/src/utils/validate-sdk-config.d.ts.map +0 -1
- package/dist/web-elements/src/utils/warn-unknown-keys.d.ts +0 -15
- package/dist/web-elements/src/utils/warn-unknown-keys.d.ts.map +0 -1
- package/dist/web-elements/src/version.d.ts +0 -25
- package/dist/web-elements/src/version.d.ts.map +0 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { E as ElementError, c as createIframe, a as createPostMessageClient, b as createEventDispatcher, l as log, d as createMounter } from "./index-
|
|
1
|
+
import { E as ElementError, c as createIframe, a as createPostMessageClient, b as createEventDispatcher, l as log, d as createMounter } from "./index-Dyy7tm5Z.js";
|
|
2
2
|
const DEFAULT_CARD_STACK_THRESHOLD = 400;
|
|
3
3
|
const createCardElement = (apiKey, sdkConfig, options = {}, coordinatorElementId, ensureCoordinatorReady, notifyCoordinatorElementUnmount) => {
|
|
4
4
|
let iframe = null;
|
|
@@ -43,18 +43,22 @@ const createCardElement = (apiKey, sdkConfig, options = {}, coordinatorElementId
|
|
|
43
43
|
on: () => () => {
|
|
44
44
|
}
|
|
45
45
|
});
|
|
46
|
+
const numberRef = createSubElementRef(`${id}__number`);
|
|
47
|
+
const expiryDateRef = createSubElementRef(`${id}__expiry`);
|
|
48
|
+
const cvcRef = createSubElementRef(`${id}__cvc`);
|
|
46
49
|
const cardElement = {
|
|
47
50
|
id,
|
|
48
51
|
type,
|
|
49
52
|
get mounted() {
|
|
50
53
|
return isMounted;
|
|
51
54
|
},
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
number: createSubElementRef(`${id}__number`),
|
|
55
|
-
expiryDate: createSubElementRef(`${id}__expiry`),
|
|
56
|
-
cvc: createSubElementRef(`${id}__cvc`)
|
|
55
|
+
get loaded() {
|
|
56
|
+
return isMounted;
|
|
57
57
|
},
|
|
58
|
+
// Sub-field references for tokenization
|
|
59
|
+
number: numberRef,
|
|
60
|
+
expiryDate: expiryDateRef,
|
|
61
|
+
cvc: cvcRef,
|
|
58
62
|
mount: async (selector) => {
|
|
59
63
|
if (isMounted) {
|
|
60
64
|
throw ElementError("Element is already mounted");
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"create-card-CB_YcP_4.js","sources":["../src/elements/create-card.ts"],"sourcesContent":["/**\n * Card Element Factory (Unified)\n */\n\nimport type { PostMessageClient } from '@basis-theory-elements/postmessage';\nimport { createPostMessageClient } from '@basis-theory-elements/postmessage';\nimport { ElementError, log } from '@basis-theory-elements/shared';\nimport { createMounter } from '../mounter/create-mounter';\nimport type {\n CardElement,\n ElementMounter,\n ElementOptions,\n EventListener,\n EventType,\n SDKConfig,\n SubElementRef,\n} from '../types';\nimport { createIframe } from '../utils/create-iframe';\nimport { createEventDispatcher } from '../utils/create-event-dispatcher';\n\n/**\n * Default stack threshold in pixels for CardElement auto-layout\n * When container width is below this threshold, card inputs stack vertically\n */\nconst DEFAULT_CARD_STACK_THRESHOLD = 400;\n\n/**\n * Card element options\n */\nexport interface CardElementOptions {\n /** CSS styling */\n style?: Record<string, any>;\n\n /** Placeholder text for each sub-field */\n placeholder?: {\n cardNumber?: string;\n expiryDate?: string;\n cvc?: string;\n };\n\n /** Accessibility label */\n ariaLabel?: string;\n\n /** Disabled state (applies to all 3 sub-fields) */\n disabled?: boolean;\n\n /** Read-only state (applies to all 3 sub-fields) */\n readOnly?: boolean;\n\n /** Layout mode */\n layout?: 'row' | 'column' | 'auto';\n\n /** Stack threshold in pixels (only applies when layout: 'auto') */\n stackAt?: number;\n\n /** Icon position */\n iconPosition?: 'left' | 'right' | 'none';\n\n /** Restrict accepted card brands */\n cardBrands?: string[];\n\n /**\n * BIN enrichment for the card number field. Setting `coBadge` turns enrichment on and\n * overrides this — an explicit `binLookup: false` is ignored when `coBadge` is set.\n */\n binLookup?: boolean | { enabled?: boolean; debounceMs?: number };\n\n /** Co-badge options; forces BIN enrichment on when set, overriding `binLookup`. */\n coBadge?: {\n preferredNetworks?: string[];\n mode?: 'auto' | 'manual';\n };\n}\n\n/**\n * Factory function to create a unified card element\n * No class, pure functional approach with closure-based state\n */\nexport const createCardElement = (\n apiKey: string,\n sdkConfig: SDKConfig,\n options: CardElementOptions = {},\n coordinatorElementId: string,\n ensureCoordinatorReady: () => Promise<void>,\n notifyCoordinatorElementUnmount: (elementId: string) => Promise<void> // ← Notify coordinator on unmount\n): CardElement => {\n // Private state (closure)\n let iframe: HTMLIFrameElement | null = null;\n let client: PostMessageClient | null = null;\n let mounter: ElementMounter | null = null;\n let isMounted = false;\n let container: HTMLElement | null = null;\n let eventDispatcher: ReturnType<typeof createEventDispatcher> | null = null;\n\n // Event target for event emission\n const eventTarget = new EventTarget();\n\n // Use coordinator-generated ID for all references\n const id = coordinatorElementId;\n const type = 'card';\n\n // Setup event dispatcher\n const setupEventListeners = () => {\n if (!client) {\n return;\n }\n\n eventDispatcher = createEventDispatcher({\n elementType: type,\n elementId: id,\n client,\n eventTarget,\n });\n\n eventDispatcher.setupSubscriptions();\n };\n\n /**\n * Create sub-element reference for tokenization\n * These refs are used in bt.tokens.create() data payload\n */\n const createSubElementRef = (subId: string): SubElementRef => ({\n id: subId,\n type: 'card',\n get mounted() {\n return isMounted;\n },\n mount: () => {\n throw ElementError('Sub-field refs cannot be mounted independently');\n },\n unmount: () => {},\n update: () => Promise.resolve(),\n focus: () => {},\n blur: () => {},\n clear: () => {},\n on: () => () => {},\n });\n\n const numberRef = createSubElementRef(`${id}__number`);\n const expiryDateRef = createSubElementRef(`${id}__expiry`);\n const cvcRef = createSubElementRef(`${id}__cvc`);\n\n // Public API (Element interface with sub-field refs)\n const cardElement = {\n id,\n type,\n get mounted() {\n return isMounted;\n },\n get loaded() {\n return isMounted;\n },\n\n // Sub-field references for tokenization\n number: numberRef,\n expiryDate: expiryDateRef,\n cvc: cvcRef,\n\n mount: async (selector: string | HTMLElement) => {\n if (isMounted) {\n throw ElementError('Element is already mounted');\n }\n\n // Resolve container\n container =\n typeof selector === 'string'\n ? document.querySelector(selector)\n : selector;\n\n if (!container) {\n throw ElementError(`Container not found: ${selector}`);\n }\n\n // Create iframe\n const parentOrigin = window.location.origin;\n const iframeUrl = new URL(`${sdkConfig.elementsBaseUrl}/card.html`);\n iframeUrl.searchParams.set('parentOrigin', parentOrigin);\n iframeUrl.searchParams.set('elementId', id);\n iframeUrl.searchParams.set(\n 'measurePerformance',\n String(sdkConfig.measurePerformance || false)\n );\n iframeUrl.searchParams.set('debug', String(sdkConfig.debug || false));\n\n iframe = createIframe({\n src: iframeUrl.toString(),\n sandbox: 'allow-scripts allow-same-origin',\n title: options.ariaLabel || 'Card Input',\n });\n\n // Add element ID and theme mode attributes\n iframe.setAttribute('data-bt-element-id', id);\n iframe.setAttribute('data-theme-mode', sdkConfig.themeMode || 'auto');\n\n // Create PostMessage client\n client = createPostMessageClient(iframe, {\n targetOrigin: sdkConfig.iframeOrigin,\n timeout: sdkConfig.timeoutMs,\n retries: sdkConfig.retryConfig.maxRetries,\n debug: sdkConfig.debug,\n });\n\n // Create mounter\n mounter = createMounter();\n\n // Set up event listeners\n setupEventListeners();\n\n // Subscribe to 'ready' event BEFORE mounting iframe\n const readyPromise = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n reject(\n ElementError(\n `Iframe EVENT_READY not received within ${sdkConfig.timeoutMs}ms`,\n id,\n { elementType: type, timeoutMs: sdkConfig.timeoutMs }\n )\n );\n }, sdkConfig.timeoutMs);\n\n const handleReady = () => {\n clearTimeout(timeout);\n resolve();\n };\n\n eventTarget.addEventListener('ready', handleReady, { once: true });\n });\n\n // Mount iframe to DOM (synchronous)\n mounter.mount(container, iframe, {\n timeoutMs: sdkConfig.timeoutMs,\n });\n\n isMounted = true;\n\n // Wait for coordinator + configuration to complete\n try {\n // Wait for coordinator (loads Core SDK if needed)\n await ensureCoordinatorReady();\n\n // Wait for EVENT_READY\n await readyPromise;\n\n // Send initial configuration with card-specific options.\n // Omit `binLookup` / `coBadge` when undefined so the iframe never receives\n // explicit `undefined` (object literals include own keys with undefined values).\n await client!.sendRequest('CMD_SET_CONFIG', {\n elementId: id,\n apiKey,\n apiTimeout: sdkConfig.timeoutMs,\n apiRetries: sdkConfig.retryConfig.maxRetries,\n theme: sdkConfig.theme,\n darkTheme: sdkConfig.darkTheme,\n themeMode: sdkConfig.themeMode,\n placeholder: options.placeholder,\n ...(options.style !== undefined && { style: options.style }),\n disabled: options.disabled,\n readOnly: options.readOnly,\n layout: options.layout || 'auto',\n stackAt: options.stackAt || DEFAULT_CARD_STACK_THRESHOLD,\n iconPosition: options.iconPosition || 'left',\n ...(options.cardBrands !== undefined && { cardBrands: options.cardBrands }),\n ...(options.binLookup !== undefined && { binLookup: options.binLookup }),\n ...(options.coBadge !== undefined && { coBadge: options.coBadge }),\n debug: sdkConfig.debug,\n });\n\n // Reveal iframe now that theme is fully applied\n if (iframe) iframe.style.opacity = '1';\n } catch (error) {\n // Dispatch error event before cleanup\n if (eventDispatcher) {\n eventDispatcher.dispatchError(\n 'MOUNT_ERROR',\n (error as Error).message,\n error as Error\n );\n }\n\n // Mount failed - clean up and mark as unmounted\n isMounted = false;\n\n if (client) {\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n eventDispatcher = null;\n container = null;\n\n throw error;\n }\n },\n\n unmount: () => {\n if (!isMounted) {\n throw ElementError('Element is not mounted');\n }\n\n // PCI DSS 3.2.1: Notify coordinator to broadcast ELEMENT_UNMOUNTED for all sub-fields\n // This clears cached values and notifies other elements (like CopyButton)\n // Card element has 3 sub-fields: __number, __expiry, __cvc\n const subFieldSuffixes = ['__number', '__expiry', '__cvc'];\n for (const suffix of subFieldSuffixes) {\n notifyCoordinatorElementUnmount(`${id}${suffix}`).catch((error) => {\n log('Failed to notify coordinator of element unmount', {\n elementId: `${id}${suffix}`,\n error: (error as Error).message,\n });\n });\n }\n\n if (client) {\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n eventDispatcher = null;\n container = null;\n isMounted = false;\n },\n\n update: async (newOptions: Partial<ElementOptions> & { themeMode?: string }) => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before updating');\n }\n\n const cardOptions = newOptions as Partial<CardElementOptions> & { themeMode?: string };\n\n // Only send fields that are present (matches create-card-number) so we never\n // overwrite iframe config with undefined/null over postMessage.\n const updatePayload: Record<string, any> = {\n elementId: id,\n };\n\n if (cardOptions.placeholder !== undefined) {\n updatePayload.placeholder = cardOptions.placeholder;\n }\n if (cardOptions.style !== undefined) {\n updatePayload.style = cardOptions.style;\n }\n if (cardOptions.disabled !== undefined) {\n updatePayload.disabled = cardOptions.disabled;\n }\n if (cardOptions.readOnly !== undefined) {\n updatePayload.readOnly = cardOptions.readOnly;\n }\n if (cardOptions.layout !== undefined) {\n updatePayload.layout = cardOptions.layout;\n }\n if (cardOptions.stackAt !== undefined) {\n updatePayload.stackAt = cardOptions.stackAt;\n }\n if (cardOptions.iconPosition !== undefined) {\n updatePayload.iconPosition = cardOptions.iconPosition;\n }\n if (cardOptions.cardBrands !== undefined) {\n updatePayload.cardBrands = cardOptions.cardBrands;\n }\n if (cardOptions.binLookup !== undefined) {\n updatePayload.binLookup = cardOptions.binLookup;\n }\n if (cardOptions.coBadge !== undefined) {\n updatePayload.coBadge = cardOptions.coBadge;\n }\n\n if (newOptions.themeMode !== undefined) {\n updatePayload.themeMode = newOptions.themeMode;\n updatePayload.theme = sdkConfig.theme;\n updatePayload.darkTheme = sdkConfig.darkTheme;\n }\n\n await client.sendRequest('CMD_UPDATE_CONFIG', updatePayload);\n },\n\n focus: () => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before focusing');\n }\n\n client.sendRequest('CMD_FOCUS', {});\n },\n\n blur: () => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before blurring');\n }\n\n client.sendRequest('CMD_BLUR', {});\n },\n\n clear: () => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before clearing');\n }\n\n client.sendRequest('CMD_CLEAR', {});\n },\n\n on: (eventType: EventType, listener: EventListener) => {\n eventTarget.addEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n\n // Return unsubscribe function\n return () =>\n eventTarget.removeEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n },\n\n setNetwork: async (network: string) => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before setNetwork');\n }\n await client.sendRequest('CMD_SET_NETWORK', { network });\n },\n };\n\n return cardElement as CardElement;\n};\n"],"names":[],"mappings":";AAwBA,MAAM,+BAA+B;AAsD9B,MAAM,oBAAoB,CAC/B,QACA,WACA,UAA8B,CAAA,GAC9B,sBACA,wBACA,oCACgB;AAEhB,MAAI,SAAmC;AACvC,MAAI,SAAmC;AACvC,MAAI,UAAiC;AACrC,MAAI,YAAY;AAChB,MAAI,YAAgC;AACpC,MAAI,kBAAmE;AAGvE,QAAM,cAAc,IAAI,YAAA;AAGxB,QAAM,KAAK;AACX,QAAM,OAAO;AAGb,QAAM,sBAAsB,MAAM;AAChC,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AAEA,sBAAkB,sBAAsB;AAAA,MACtC,aAAa;AAAA,MACb,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IAAA,CACD;AAED,oBAAgB,mBAAA;AAAA,EAClB;AAMA,QAAM,sBAAsB,CAAC,WAAkC;AAAA,IAC7D,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA,OAAO,MAAM;AACX,YAAM,aAAa,gDAAgD;AAAA,IACrE;AAAA,IACA,SAAS,MAAM;AAAA,IAAC;AAAA,IAChB,QAAQ,MAAM,QAAQ,QAAA;AAAA,IACtB,OAAO,MAAM;AAAA,IAAC;AAAA,IACd,MAAM,MAAM;AAAA,IAAC;AAAA,IACb,OAAO,MAAM;AAAA,IAAC;AAAA,IACd,IAAI,MAAM,MAAM;AAAA,IAAC;AAAA,EAAA;AAGnB,QAAM,YAAY,oBAAoB,GAAG,EAAE,UAAU;AACrD,QAAM,gBAAgB,oBAAoB,GAAG,EAAE,UAAU;AACzD,QAAM,SAAS,oBAAoB,GAAG,EAAE,OAAO;AAG/C,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA;AAAA,IAGA,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,KAAK;AAAA,IAEL,OAAO,OAAO,aAAmC;AAC/C,UAAI,WAAW;AACb,cAAM,aAAa,4BAA4B;AAAA,MACjD;AAGA,kBACE,OAAO,aAAa,WAChB,SAAS,cAAc,QAAQ,IAC/B;AAEN,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB,QAAQ,EAAE;AAAA,MACvD;AAGA,YAAM,eAAe,OAAO,SAAS;AACrC,YAAM,YAAY,IAAI,IAAI,GAAG,UAAU,eAAe,YAAY;AAClE,gBAAU,aAAa,IAAI,gBAAgB,YAAY;AACvD,gBAAU,aAAa,IAAI,aAAa,EAAE;AAC1C,gBAAU,aAAa;AAAA,QACrB;AAAA,QACA,OAAO,UAAU,sBAAsB,KAAK;AAAA,MAAA;AAE9C,gBAAU,aAAa,IAAI,SAAS,OAAO,UAAU,SAAS,KAAK,CAAC;AAEpE,eAAS,aAAa;AAAA,QACpB,KAAK,UAAU,SAAA;AAAA,QACf,SAAS;AAAA,QACT,OAAO,QAAQ,aAAa;AAAA,MAAA,CAC7B;AAGD,aAAO,aAAa,sBAAsB,EAAE;AAC5C,aAAO,aAAa,mBAAmB,UAAU,aAAa,MAAM;AAGpE,eAAS,wBAAwB,QAAQ;AAAA,QACvC,cAAc,UAAU;AAAA,QACxB,SAAS,UAAU;AAAA,QACnB,SAAS,UAAU,YAAY;AAAA,QAC/B,OAAO,UAAU;AAAA,MAAA,CAClB;AAGD,gBAAU,cAAA;AAGV,0BAAA;AAGA,YAAM,eAAe,IAAI,QAAc,CAAC,SAAS,WAAW;AAC1D,cAAM,UAAU,WAAW,MAAM;AAC/B;AAAA,YACE;AAAA,cACE,0CAA0C,UAAU,SAAS;AAAA,cAC7D;AAAA,cACA,EAAE,aAAa,MAAM,WAAW,UAAU,UAAA;AAAA,YAAU;AAAA,UACtD;AAAA,QAEJ,GAAG,UAAU,SAAS;AAEtB,cAAM,cAAc,MAAM;AACxB,uBAAa,OAAO;AACpB,kBAAA;AAAA,QACF;AAEA,oBAAY,iBAAiB,SAAS,aAAa,EAAE,MAAM,MAAM;AAAA,MACnE,CAAC;AAGD,cAAQ,MAAM,WAAW,QAAQ;AAAA,QAC/B,WAAW,UAAU;AAAA,MAAA,CACtB;AAED,kBAAY;AAGZ,UAAI;AAEF,cAAM,uBAAA;AAGN,cAAM;AAKN,cAAM,OAAQ,YAAY,kBAAkB;AAAA,UAC1C,WAAW;AAAA,UACX;AAAA,UACA,YAAY,UAAU;AAAA,UACtB,YAAY,UAAU,YAAY;AAAA,UAClC,OAAO,UAAU;AAAA,UACjB,WAAW,UAAU;AAAA,UACrB,WAAW,UAAU;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,GAAI,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,MAAA;AAAA,UACpD,UAAU,QAAQ;AAAA,UAClB,UAAU,QAAQ;AAAA,UAClB,QAAQ,QAAQ,UAAU;AAAA,UAC1B,SAAS,QAAQ,WAAW;AAAA,UAC5B,cAAc,QAAQ,gBAAgB;AAAA,UACtC,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,QAAQ,WAAA;AAAA,UAC9D,GAAI,QAAQ,cAAc,UAAa,EAAE,WAAW,QAAQ,UAAA;AAAA,UAC5D,GAAI,QAAQ,YAAY,UAAa,EAAE,SAAS,QAAQ,QAAA;AAAA,UACxD,OAAO,UAAU;AAAA,QAAA,CAClB;AAGD,YAAI,OAAQ,QAAO,MAAM,UAAU;AAAA,MACrC,SAAS,OAAO;AAEd,YAAI,iBAAiB;AACnB,0BAAgB;AAAA,YACd;AAAA,YACC,MAAgB;AAAA,YACjB;AAAA,UAAA;AAAA,QAEJ;AAGA,oBAAY;AAEZ,YAAI,QAAQ;AACV,iBAAO,QAAA;AACP,mBAAS;AAAA,QACX;AAEA,YAAI,WAAW,QAAQ;AACrB,kBAAQ,QAAQ,MAAM;AACtB,mBAAS;AACT,oBAAU;AAAA,QACZ;AAEA,0BAAkB;AAClB,oBAAY;AAEZ,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,SAAS,MAAM;AACb,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB;AAAA,MAC7C;AAKA,YAAM,mBAAmB,CAAC,YAAY,YAAY,OAAO;AACzD,iBAAW,UAAU,kBAAkB;AACrC,wCAAgC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,UAAU;AACjE,cAAI,mDAAmD;AAAA,YAErD,OAAQ,MAAgB;AAAA,UAAA,CACzB;AAAA,QACH,CAAC;AAAA,MACH;AAEA,UAAI,QAAQ;AACV,eAAO,QAAA;AACP,iBAAS;AAAA,MACX;AAEA,UAAI,WAAW,QAAQ;AACrB,gBAAQ,QAAQ,MAAM;AACtB,iBAAS;AACT,kBAAU;AAAA,MACZ;AAEA,wBAAkB;AAClB,kBAAY;AACZ,kBAAY;AAAA,IACd;AAAA,IAEA,QAAQ,OAAO,eAAiE;AAC9E,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,yCAAyC;AAAA,MAC9D;AAEA,YAAM,cAAc;AAIpB,YAAM,gBAAqC;AAAA,QACzC,WAAW;AAAA,MAAA;AAGb,UAAI,YAAY,gBAAgB,QAAW;AACzC,sBAAc,cAAc,YAAY;AAAA,MAC1C;AACA,UAAI,YAAY,UAAU,QAAW;AACnC,sBAAc,QAAQ,YAAY;AAAA,MACpC;AACA,UAAI,YAAY,aAAa,QAAW;AACtC,sBAAc,WAAW,YAAY;AAAA,MACvC;AACA,UAAI,YAAY,aAAa,QAAW;AACtC,sBAAc,WAAW,YAAY;AAAA,MACvC;AACA,UAAI,YAAY,WAAW,QAAW;AACpC,sBAAc,SAAS,YAAY;AAAA,MACrC;AACA,UAAI,YAAY,YAAY,QAAW;AACrC,sBAAc,UAAU,YAAY;AAAA,MACtC;AACA,UAAI,YAAY,iBAAiB,QAAW;AAC1C,sBAAc,eAAe,YAAY;AAAA,MAC3C;AACA,UAAI,YAAY,eAAe,QAAW;AACxC,sBAAc,aAAa,YAAY;AAAA,MACzC;AACA,UAAI,YAAY,cAAc,QAAW;AACvC,sBAAc,YAAY,YAAY;AAAA,MACxC;AACA,UAAI,YAAY,YAAY,QAAW;AACrC,sBAAc,UAAU,YAAY;AAAA,MACtC;AAEA,UAAI,WAAW,cAAc,QAAW;AACtC,sBAAc,YAAY,WAAW;AACrC,sBAAc,QAAQ,UAAU;AAChC,sBAAc,YAAY,UAAU;AAAA,MACtC;AAEA,YAAM,OAAO,YAAY,qBAAqB,aAAa;AAAA,IAC7D;AAAA,IAEA,OAAO,MAAM;AACX,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,yCAAyC;AAAA,MAC9D;AAEA,aAAO,YAAY,aAAa,EAAE;AAAA,IACpC;AAAA,IAEA,MAAM,MAAM;AACV,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,yCAAyC;AAAA,MAC9D;AAEA,aAAO,YAAY,YAAY,EAAE;AAAA,IACnC;AAAA,IAEA,OAAO,MAAM;AACX,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,yCAAyC;AAAA,MAC9D;AAEA,aAAO,YAAY,aAAa,EAAE;AAAA,IACpC;AAAA,IAEA,IAAI,CAAC,WAAsB,aAA4B;AACrD,kBAAY;AAAA,QACV;AAAA,QACA;AAAA,MAAA;AAIF,aAAO,MACL,YAAY;AAAA,QACV;AAAA,QACA;AAAA,MAAA;AAAA,IAEN;AAAA,IAEA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,2CAA2C;AAAA,MAChE;AACA,YAAM,OAAO,YAAY,mBAAmB,EAAE,SAAS;AAAA,IACzD;AAAA,EAAA;AAGF,SAAO;AACT;"}
|
|
@@ -0,0 +1,280 @@
|
|
|
1
|
+
import { C as ConfigurationError, E as ElementError, c as createIframe, a as createPostMessageClient, l as log, d as createMounter } from "./index-Dyy7tm5Z.js";
|
|
2
|
+
const SESSION_AUTH_TIMEOUT_MS = 3e4;
|
|
3
|
+
const createCardDisplayElement = (_apiKey, sdkConfig, options, coordinatorElementId, ensureCoordinatorReady, _notifyCoordinatorElementUnmount, coordinatorRequest) => {
|
|
4
|
+
if (!options.tokenId || typeof options.tokenId !== "string") {
|
|
5
|
+
throw ConfigurationError("tokenId is required for cardDisplay element");
|
|
6
|
+
}
|
|
7
|
+
let iframe = null;
|
|
8
|
+
let client = null;
|
|
9
|
+
let mounter = null;
|
|
10
|
+
let isMounted = false;
|
|
11
|
+
let isLoaded = false;
|
|
12
|
+
let container = null;
|
|
13
|
+
let currentTokenId = options.tokenId;
|
|
14
|
+
const eventTarget = new EventTarget();
|
|
15
|
+
const id = coordinatorElementId;
|
|
16
|
+
const type = "cardDisplay";
|
|
17
|
+
const dispatchEvent = (eventType, detail) => {
|
|
18
|
+
eventTarget.dispatchEvent(new CustomEvent(eventType, {
|
|
19
|
+
detail: {
|
|
20
|
+
elementType: type,
|
|
21
|
+
elementId: id,
|
|
22
|
+
timestamp: Date.now(),
|
|
23
|
+
...detail
|
|
24
|
+
}
|
|
25
|
+
}));
|
|
26
|
+
};
|
|
27
|
+
const dispatchLoadError = (code, error) => {
|
|
28
|
+
log("Failed to load display token", {
|
|
29
|
+
error: error.message
|
|
30
|
+
});
|
|
31
|
+
dispatchEvent("error", { code, message: error.message });
|
|
32
|
+
};
|
|
33
|
+
const releaseDisplaySession = async () => {
|
|
34
|
+
try {
|
|
35
|
+
await coordinatorRequest("CMD_CLEAR_DISPLAY_SESSION", { elementId: id });
|
|
36
|
+
} catch (error) {
|
|
37
|
+
log("Failed to release display session", {
|
|
38
|
+
error: error.message
|
|
39
|
+
});
|
|
40
|
+
}
|
|
41
|
+
};
|
|
42
|
+
const loadDisplayToken = async (tokenId) => {
|
|
43
|
+
if (!sdkConfig.sessionAuthorizationUrl) {
|
|
44
|
+
dispatchLoadError(
|
|
45
|
+
"SESSION_AUTHORIZATION_FAILED",
|
|
46
|
+
ConfigurationError("sessionAuthorizationUrl is required to load cardDisplay data")
|
|
47
|
+
);
|
|
48
|
+
return;
|
|
49
|
+
}
|
|
50
|
+
let nonce;
|
|
51
|
+
try {
|
|
52
|
+
const result = await coordinatorRequest(
|
|
53
|
+
"CMD_CREATE_DISPLAY_SESSION",
|
|
54
|
+
{ tokenId, elementId: id }
|
|
55
|
+
);
|
|
56
|
+
if (!(result == null ? void 0 : result.nonce)) {
|
|
57
|
+
return;
|
|
58
|
+
}
|
|
59
|
+
nonce = result.nonce;
|
|
60
|
+
} catch (error) {
|
|
61
|
+
dispatchLoadError("SESSION_CREATION_FAILED", error);
|
|
62
|
+
return;
|
|
63
|
+
}
|
|
64
|
+
const controller = new AbortController();
|
|
65
|
+
const timeout = setTimeout(() => controller.abort(), SESSION_AUTH_TIMEOUT_MS);
|
|
66
|
+
let authResponse;
|
|
67
|
+
try {
|
|
68
|
+
authResponse = await fetch(sdkConfig.sessionAuthorizationUrl, {
|
|
69
|
+
method: "POST",
|
|
70
|
+
headers: { "Content-Type": "application/json" },
|
|
71
|
+
// No credentials: the request only carries the session nonce, and
|
|
72
|
+
// sending credentials is incompatible with a wildcard CORS origin
|
|
73
|
+
// (Access-Control-Allow-Origin: *), which merchant authorize endpoints
|
|
74
|
+
// commonly use.
|
|
75
|
+
body: JSON.stringify({ nonce }),
|
|
76
|
+
signal: controller.signal
|
|
77
|
+
});
|
|
78
|
+
} catch (error) {
|
|
79
|
+
await releaseDisplaySession();
|
|
80
|
+
dispatchLoadError("NETWORK_ERROR", error);
|
|
81
|
+
return;
|
|
82
|
+
} finally {
|
|
83
|
+
clearTimeout(timeout);
|
|
84
|
+
}
|
|
85
|
+
if (!authResponse.ok) {
|
|
86
|
+
await releaseDisplaySession();
|
|
87
|
+
dispatchLoadError(
|
|
88
|
+
"SESSION_AUTHORIZATION_FAILED",
|
|
89
|
+
ElementError(
|
|
90
|
+
`Session authorization failed: ${authResponse.status} ${authResponse.statusText}`,
|
|
91
|
+
id
|
|
92
|
+
)
|
|
93
|
+
);
|
|
94
|
+
return;
|
|
95
|
+
}
|
|
96
|
+
try {
|
|
97
|
+
await coordinatorRequest("CMD_RETRIEVE_DISPLAY_TOKEN", {
|
|
98
|
+
tokenId,
|
|
99
|
+
elementId: id
|
|
100
|
+
});
|
|
101
|
+
} catch (error) {
|
|
102
|
+
dispatchLoadError("TOKEN_RETRIEVAL_FAILED", error);
|
|
103
|
+
}
|
|
104
|
+
};
|
|
105
|
+
const element = {
|
|
106
|
+
id,
|
|
107
|
+
type,
|
|
108
|
+
get mounted() {
|
|
109
|
+
return isMounted;
|
|
110
|
+
},
|
|
111
|
+
get loaded() {
|
|
112
|
+
return isLoaded;
|
|
113
|
+
},
|
|
114
|
+
mount: async (selector) => {
|
|
115
|
+
if (isMounted) {
|
|
116
|
+
throw ElementError("Element is already mounted", id);
|
|
117
|
+
}
|
|
118
|
+
container = typeof selector === "string" ? document.querySelector(selector) : selector;
|
|
119
|
+
if (!container) {
|
|
120
|
+
throw ElementError(`Container not found: ${selector}`);
|
|
121
|
+
}
|
|
122
|
+
const parentOrigin = window.location.origin;
|
|
123
|
+
const iframeUrl = new URL(`${sdkConfig.elementsBaseUrl}/card-display.html`);
|
|
124
|
+
iframeUrl.searchParams.set("parentOrigin", parentOrigin);
|
|
125
|
+
iframeUrl.searchParams.set("elementId", id);
|
|
126
|
+
iframeUrl.searchParams.set("debug", String(sdkConfig.debug || false));
|
|
127
|
+
iframe = createIframe({
|
|
128
|
+
src: iframeUrl.toString(),
|
|
129
|
+
sandbox: "allow-scripts allow-same-origin",
|
|
130
|
+
allow: "clipboard-write",
|
|
131
|
+
title: "Card Display"
|
|
132
|
+
});
|
|
133
|
+
iframe.setAttribute("data-bt-element-id", id);
|
|
134
|
+
client = createPostMessageClient(iframe, {
|
|
135
|
+
targetOrigin: sdkConfig.iframeOrigin,
|
|
136
|
+
timeout: sdkConfig.timeoutMs,
|
|
137
|
+
retries: sdkConfig.retryConfig.maxRetries,
|
|
138
|
+
debug: sdkConfig.debug
|
|
139
|
+
});
|
|
140
|
+
mounter = createMounter();
|
|
141
|
+
const readyPromise = new Promise((resolve, reject) => {
|
|
142
|
+
const timeout = setTimeout(() => {
|
|
143
|
+
reject(ElementError(
|
|
144
|
+
`Iframe EVENT_READY not received within ${sdkConfig.timeoutMs}ms`,
|
|
145
|
+
id,
|
|
146
|
+
{ elementType: type, timeoutMs: sdkConfig.timeoutMs }
|
|
147
|
+
));
|
|
148
|
+
}, sdkConfig.timeoutMs);
|
|
149
|
+
const unsubscribe = client.subscribe("EVENT_READY", () => {
|
|
150
|
+
clearTimeout(timeout);
|
|
151
|
+
unsubscribe();
|
|
152
|
+
resolve();
|
|
153
|
+
});
|
|
154
|
+
});
|
|
155
|
+
client.subscribe("EVENT_CHANGE", (payload) => {
|
|
156
|
+
if (payload.loaded) {
|
|
157
|
+
isLoaded = true;
|
|
158
|
+
}
|
|
159
|
+
dispatchEvent("change", payload);
|
|
160
|
+
});
|
|
161
|
+
client.subscribe("EVENT_ERROR", (payload) => {
|
|
162
|
+
dispatchEvent("error", payload);
|
|
163
|
+
});
|
|
164
|
+
mounter.mount(container, iframe, {
|
|
165
|
+
timeoutMs: sdkConfig.timeoutMs
|
|
166
|
+
});
|
|
167
|
+
isMounted = true;
|
|
168
|
+
try {
|
|
169
|
+
await ensureCoordinatorReady();
|
|
170
|
+
await readyPromise;
|
|
171
|
+
await client.sendRequest("CMD_SET_CONFIG", {
|
|
172
|
+
elementId: id,
|
|
173
|
+
tokenId: currentTokenId,
|
|
174
|
+
theme: sdkConfig.theme,
|
|
175
|
+
darkTheme: sdkConfig.darkTheme,
|
|
176
|
+
themeMode: sdkConfig.themeMode,
|
|
177
|
+
number: options.number,
|
|
178
|
+
cvc: options.cvc,
|
|
179
|
+
expiration: options.expiration,
|
|
180
|
+
debug: sdkConfig.debug
|
|
181
|
+
});
|
|
182
|
+
if (iframe) iframe.style.opacity = "1";
|
|
183
|
+
dispatchEvent("ready", {});
|
|
184
|
+
if (currentTokenId) {
|
|
185
|
+
void loadDisplayToken(currentTokenId);
|
|
186
|
+
}
|
|
187
|
+
} catch (error) {
|
|
188
|
+
dispatchEvent("error", {
|
|
189
|
+
code: "MOUNT_ERROR",
|
|
190
|
+
message: error.message
|
|
191
|
+
});
|
|
192
|
+
isMounted = false;
|
|
193
|
+
if (client) {
|
|
194
|
+
client.destroy();
|
|
195
|
+
client = null;
|
|
196
|
+
}
|
|
197
|
+
if (mounter && iframe) {
|
|
198
|
+
mounter.unmount(iframe);
|
|
199
|
+
iframe = null;
|
|
200
|
+
mounter = null;
|
|
201
|
+
}
|
|
202
|
+
container = null;
|
|
203
|
+
throw error;
|
|
204
|
+
}
|
|
205
|
+
},
|
|
206
|
+
unmount: () => {
|
|
207
|
+
if (!isMounted) {
|
|
208
|
+
throw ElementError("Element is not mounted");
|
|
209
|
+
}
|
|
210
|
+
void releaseDisplaySession();
|
|
211
|
+
if (client) {
|
|
212
|
+
client.sendRequest("CMD_CLEAR", {}).catch((error) => {
|
|
213
|
+
log("Failed to send clear command", {
|
|
214
|
+
error: error.message
|
|
215
|
+
});
|
|
216
|
+
});
|
|
217
|
+
client.destroy();
|
|
218
|
+
client = null;
|
|
219
|
+
}
|
|
220
|
+
if (mounter && iframe) {
|
|
221
|
+
mounter.unmount(iframe);
|
|
222
|
+
iframe = null;
|
|
223
|
+
mounter = null;
|
|
224
|
+
}
|
|
225
|
+
container = null;
|
|
226
|
+
isMounted = false;
|
|
227
|
+
isLoaded = false;
|
|
228
|
+
},
|
|
229
|
+
update: async (newOptions) => {
|
|
230
|
+
if (!isMounted || !client) {
|
|
231
|
+
throw ElementError("Element must be mounted before updating", id);
|
|
232
|
+
}
|
|
233
|
+
if (newOptions.tokenId !== void 0 && newOptions.tokenId !== currentTokenId) {
|
|
234
|
+
currentTokenId = newOptions.tokenId;
|
|
235
|
+
isLoaded = false;
|
|
236
|
+
await client.sendRequest("CMD_CLEAR", {});
|
|
237
|
+
void loadDisplayToken(currentTokenId);
|
|
238
|
+
}
|
|
239
|
+
const updatePayload = {};
|
|
240
|
+
if (newOptions.number !== void 0) {
|
|
241
|
+
updatePayload.number = newOptions.number;
|
|
242
|
+
}
|
|
243
|
+
if (newOptions.cvc !== void 0) {
|
|
244
|
+
updatePayload.cvc = newOptions.cvc;
|
|
245
|
+
}
|
|
246
|
+
if (newOptions.expiration !== void 0) {
|
|
247
|
+
updatePayload.expiration = newOptions.expiration;
|
|
248
|
+
}
|
|
249
|
+
if (newOptions.themeMode !== void 0) {
|
|
250
|
+
updatePayload.themeMode = newOptions.themeMode;
|
|
251
|
+
updatePayload.theme = sdkConfig.theme;
|
|
252
|
+
updatePayload.darkTheme = sdkConfig.darkTheme;
|
|
253
|
+
}
|
|
254
|
+
if (Object.keys(updatePayload).length > 0) {
|
|
255
|
+
await client.sendRequest("CMD_UPDATE_CONFIG", updatePayload);
|
|
256
|
+
}
|
|
257
|
+
},
|
|
258
|
+
on: (eventType, listener) => {
|
|
259
|
+
eventTarget.addEventListener(
|
|
260
|
+
eventType,
|
|
261
|
+
listener
|
|
262
|
+
);
|
|
263
|
+
return () => eventTarget.removeEventListener(
|
|
264
|
+
eventType,
|
|
265
|
+
listener
|
|
266
|
+
);
|
|
267
|
+
},
|
|
268
|
+
// No-ops for API compatibility with Element interface
|
|
269
|
+
focus: () => {
|
|
270
|
+
},
|
|
271
|
+
blur: () => {
|
|
272
|
+
},
|
|
273
|
+
clear: () => {
|
|
274
|
+
}
|
|
275
|
+
};
|
|
276
|
+
return element;
|
|
277
|
+
};
|
|
278
|
+
export {
|
|
279
|
+
createCardDisplayElement
|
|
280
|
+
};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"create-card-display-kBupMJwe.js","sources":["../src/elements/create-card-display.ts"],"sourcesContent":["/**\n * Card Display Element Factory\n *\n * Iframe lifecycle for read-only display of tokenized card data.\n * Token loading is orchestrated by BasisTheory.ts — this factory\n * only handles iframe creation, mounting, config, and events.\n */\n\nimport type { PostMessageClient } from '@basis-theory-elements/postmessage';\nimport { createPostMessageClient } from '@basis-theory-elements/postmessage';\nimport { ConfigurationError, ElementError, log } from '@basis-theory-elements/shared';\nimport { createMounter } from '../mounter/create-mounter';\nimport type {\n CardDisplayElement,\n CardDisplayEventType,\n CardDisplayOptions,\n ElementMounter,\n EventListener,\n SDKConfig,\n} from '../types';\nimport { createIframe } from '../utils/create-iframe';\n\n/**\n * Factory function to create a card display element\n */\n// Authorization request to the merchant backend can be slow; bound it so a\n// hung endpoint surfaces as an error instead of leaving the element loading.\nconst SESSION_AUTH_TIMEOUT_MS = 30_000;\n\nexport const createCardDisplayElement = (\n _apiKey: string, // Unused - coordinator handles API calls\n sdkConfig: SDKConfig,\n options: CardDisplayOptions,\n coordinatorElementId: string,\n ensureCoordinatorReady: () => Promise<void>,\n _notifyCoordinatorElementUnmount: (elementId: string) => Promise<void>,\n coordinatorRequest: <T>(command: string, payload: unknown) => Promise<T>\n): CardDisplayElement => {\n // Validate required options\n if (!options.tokenId || typeof options.tokenId !== 'string') {\n throw ConfigurationError('tokenId is required for cardDisplay element');\n }\n\n // Private state (closure)\n let iframe: HTMLIFrameElement | null = null;\n let client: PostMessageClient | null = null;\n let mounter: ElementMounter | null = null;\n let isMounted = false;\n let isLoaded = false;\n let container: HTMLElement | null = null;\n let currentTokenId = options.tokenId;\n\n const eventTarget = new EventTarget();\n const id = coordinatorElementId;\n const type = 'cardDisplay' as const;\n\n /**\n * Dispatch custom event to listeners\n */\n const dispatchEvent = (eventType: CardDisplayEventType, detail: Record<string, unknown>): void => {\n eventTarget.dispatchEvent(new CustomEvent(eventType, {\n detail: {\n elementType: type,\n elementId: id,\n timestamp: Date.now(),\n ...detail,\n },\n }));\n };\n\n /**\n * Dispatch a display-load failure to listeners with a specific error code,\n * mirroring the codes the coordinator broadcasts so the consumer sees one\n * consistent vocabulary regardless of which hop failed.\n */\n const dispatchLoadError = (code: string, error: unknown): void => {\n log('Failed to load display token', {\n elementId: id,\n code,\n error: (error as Error).message,\n });\n\n dispatchEvent('error', { code, message: (error as Error).message });\n };\n\n /**\n * Best-effort release of the coordinator-held session after a parent-side\n * failure (or unmount). Without this the session key would linger in the\n * coordinator until the lazy TTL sweep — undesirable in a PCI context.\n */\n const releaseDisplaySession = async (): Promise<void> => {\n try {\n await coordinatorRequest('CMD_CLEAR_DISPLAY_SESSION', { elementId: id });\n } catch (error) {\n log('Failed to release display session', {\n elementId: id,\n error: (error as Error).message,\n });\n }\n };\n\n /**\n * Drive the display-token flow across the iframe boundary.\n *\n * 1. Ask the coordinator to create a session and return its nonce.\n * 2. Authorize the session against the merchant backend FROM HERE (the parent\n * page). The coordinator iframe's CSP `connect-src` only allows BasisTheory\n * domains, so it can't reach an arbitrary merchant URL — the merchant's own\n * page can, because the merchant controls its CSP and cookies flow here.\n * 3. Tell the coordinator to retrieve the token and broadcast it to the iframe.\n *\n * Fire-and-forget from the caller's perspective: failures surface as an\n * 'error' event rather than rejecting mount()/update().\n */\n const loadDisplayToken = async (tokenId: string): Promise<void> => {\n // Check config before creating a session we couldn't use anyway.\n if (!sdkConfig.sessionAuthorizationUrl) {\n dispatchLoadError(\n 'SESSION_AUTHORIZATION_FAILED',\n ConfigurationError('sessionAuthorizationUrl is required to load cardDisplay data')\n );\n\n return;\n }\n\n // Hop 1: coordinator creates the session, returns the nonce. A null nonce\n // means createDisplaySession already broadcast a DISPLAY_LOAD_ERROR to the\n // element — return without dispatching again so we don't double-report.\n let nonce: string;\n\n try {\n const result = await coordinatorRequest<{ nonce: string | null }>(\n 'CMD_CREATE_DISPLAY_SESSION',\n { tokenId, elementId: id }\n );\n\n if (!result?.nonce) {\n return;\n }\n\n nonce = result.nonce;\n } catch (error) {\n dispatchLoadError('SESSION_CREATION_FAILED', error);\n\n return;\n }\n\n // Hop 2: authorize via the merchant backend (runs in the parent page)\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), SESSION_AUTH_TIMEOUT_MS);\n\n let authResponse: Response;\n\n try {\n authResponse = await fetch(sdkConfig.sessionAuthorizationUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n // No credentials: the request only carries the session nonce, and\n // sending credentials is incompatible with a wildcard CORS origin\n // (Access-Control-Allow-Origin: *), which merchant authorize endpoints\n // commonly use.\n body: JSON.stringify({ nonce }),\n signal: controller.signal,\n });\n } catch (error) {\n // Network failure or timeout abort — release the orphaned coordinator session.\n await releaseDisplaySession();\n dispatchLoadError('NETWORK_ERROR', error);\n\n return;\n } finally {\n clearTimeout(timeout);\n }\n\n if (!authResponse.ok) {\n await releaseDisplaySession();\n dispatchLoadError(\n 'SESSION_AUTHORIZATION_FAILED',\n ElementError(\n `Session authorization failed: ${authResponse.status} ${authResponse.statusText}`,\n id\n )\n );\n\n return;\n }\n\n // Hop 3: coordinator retrieves the token and broadcasts to the iframe.\n // Card values reach the element via BroadcastChannel (DISPLAY_VALUE_UPDATED),\n // never through this response — keep it that way for PCI isolation.\n // Retrieval errors are broadcast by the coordinator (throwOnError: false), so\n // a rejection here means the request itself failed to reach the coordinator.\n try {\n await coordinatorRequest('CMD_RETRIEVE_DISPLAY_TOKEN', {\n tokenId,\n elementId: id,\n });\n } catch (error) {\n dispatchLoadError('TOKEN_RETRIEVAL_FAILED', error);\n }\n };\n\n const element: CardDisplayElement = {\n id,\n type,\n\n get mounted() {\n return isMounted;\n },\n\n get loaded() {\n return isLoaded;\n },\n\n mount: async (selector: string | HTMLElement) => {\n if (isMounted) {\n throw ElementError('Element is already mounted', id);\n }\n\n container = typeof selector === 'string'\n ? document.querySelector(selector)\n : selector;\n\n if (!container) {\n throw ElementError(`Container not found: ${selector}`);\n }\n\n // Create iframe URL\n const parentOrigin = window.location.origin;\n const iframeUrl = new URL(`${sdkConfig.elementsBaseUrl}/card-display.html`);\n iframeUrl.searchParams.set('parentOrigin', parentOrigin);\n iframeUrl.searchParams.set('elementId', id);\n iframeUrl.searchParams.set('debug', String(sdkConfig.debug || false));\n\n iframe = createIframe({\n src: iframeUrl.toString(),\n sandbox: 'allow-scripts allow-same-origin',\n allow: 'clipboard-write',\n title: 'Card Display',\n });\n\n iframe.setAttribute('data-bt-element-id', id);\n\n client = createPostMessageClient(iframe, {\n targetOrigin: sdkConfig.iframeOrigin,\n timeout: sdkConfig.timeoutMs,\n retries: sdkConfig.retryConfig.maxRetries,\n debug: sdkConfig.debug,\n });\n\n mounter = createMounter();\n\n // Subscribe to ready event before mounting\n const readyPromise = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n reject(ElementError(\n `Iframe EVENT_READY not received within ${sdkConfig.timeoutMs}ms`,\n id,\n { elementType: type, timeoutMs: sdkConfig.timeoutMs }\n ));\n }, sdkConfig.timeoutMs);\n\n const unsubscribe = client!.subscribe('EVENT_READY', () => {\n clearTimeout(timeout);\n unsubscribe();\n resolve();\n });\n });\n\n // Subscribe to iframe events\n client.subscribe('EVENT_CHANGE', (payload: Record<string, unknown>) => {\n if (payload.loaded) {\n isLoaded = true;\n }\n\n dispatchEvent('change', payload);\n });\n\n client.subscribe('EVENT_ERROR', (payload: Record<string, unknown>) => {\n dispatchEvent('error', payload);\n });\n\n // Mount iframe\n mounter.mount(container, iframe, {\n timeoutMs: sdkConfig.timeoutMs,\n });\n\n isMounted = true;\n\n try {\n // Ensure coordinator is ready\n await ensureCoordinatorReady();\n\n // Wait for iframe ready\n await readyPromise;\n\n // Send initial configuration\n await client!.sendRequest('CMD_SET_CONFIG', {\n elementId: id,\n tokenId: currentTokenId,\n theme: sdkConfig.theme,\n darkTheme: sdkConfig.darkTheme,\n themeMode: sdkConfig.themeMode,\n number: options.number,\n cvc: options.cvc,\n expiration: options.expiration,\n debug: sdkConfig.debug,\n });\n\n // Reveal iframe\n if (iframe) iframe.style.opacity = '1';\n\n // Dispatch ready event\n dispatchEvent('ready', {});\n\n // Drive the display-token flow from the parent page (session create ->\n // merchant authorization -> token retrieve). Fire-and-forget: a token\n // load failure surfaces as an 'error' event, not a mount() rejection.\n if (currentTokenId) {\n void loadDisplayToken(currentTokenId);\n }\n\n } catch (error) {\n // Dispatch error event\n dispatchEvent('error', {\n code: 'MOUNT_ERROR',\n message: (error as Error).message,\n });\n\n // Cleanup on failure\n isMounted = false;\n\n if (client) {\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n container = null;\n\n throw error;\n }\n },\n\n unmount: () => {\n if (!isMounted) {\n throw ElementError('Element is not mounted');\n }\n\n // Release any in-flight coordinator-held session so its key doesn't\n // outlive the element (PCI). Fire-and-forget — unmount stays synchronous.\n void releaseDisplaySession();\n\n // Send clear command for PCI compliance\n if (client) {\n client.sendRequest('CMD_CLEAR', {}).catch((error) => {\n log('Failed to send clear command', {\n elementId: id,\n error: (error as Error).message,\n });\n });\n\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n container = null;\n isMounted = false;\n isLoaded = false;\n },\n\n update: async (newOptions: Partial<CardDisplayOptions> & { themeMode?: string }) => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before updating', id);\n }\n\n // If tokenId changed, reset state and re-run the token load\n if (newOptions.tokenId !== undefined && newOptions.tokenId !== currentTokenId) {\n currentTokenId = newOptions.tokenId;\n isLoaded = false;\n\n await client.sendRequest('CMD_CLEAR', {});\n\n // Re-run the parent-driven token load for the new tokenId\n void loadDisplayToken(currentTokenId);\n }\n\n // Update display configurations\n const updatePayload: Record<string, unknown> = {};\n\n if (newOptions.number !== undefined) {\n updatePayload.number = newOptions.number;\n }\n if (newOptions.cvc !== undefined) {\n updatePayload.cvc = newOptions.cvc;\n }\n if (newOptions.expiration !== undefined) {\n updatePayload.expiration = newOptions.expiration;\n }\n\n // Include theme mode update if provided\n if (newOptions.themeMode !== undefined) {\n updatePayload.themeMode = newOptions.themeMode;\n updatePayload.theme = sdkConfig.theme;\n updatePayload.darkTheme = sdkConfig.darkTheme;\n }\n\n if (Object.keys(updatePayload).length > 0) {\n await client.sendRequest('CMD_UPDATE_CONFIG', updatePayload);\n }\n },\n\n on: (eventType: CardDisplayEventType, listener: EventListener) => {\n eventTarget.addEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n\n return () => eventTarget.removeEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n },\n\n // No-ops for API compatibility with Element interface\n focus: () => {},\n blur: () => {},\n clear: () => {},\n };\n\n return element;\n};\n"],"names":[],"mappings":";AA2BA,MAAM,0BAA0B;AAEzB,MAAM,2BAA2B,CACtC,SACA,WACA,SACA,sBACA,wBACA,kCACA,uBACuB;AAEvB,MAAI,CAAC,QAAQ,WAAW,OAAO,QAAQ,YAAY,UAAU;AAC3D,UAAM,mBAAmB,6CAA6C;AAAA,EACxE;AAGA,MAAI,SAAmC;AACvC,MAAI,SAAmC;AACvC,MAAI,UAAiC;AACrC,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,MAAI,YAAgC;AACpC,MAAI,iBAAiB,QAAQ;AAE7B,QAAM,cAAc,IAAI,YAAA;AACxB,QAAM,KAAK;AACX,QAAM,OAAO;AAKb,QAAM,gBAAgB,CAAC,WAAiC,WAA0C;AAChG,gBAAY,cAAc,IAAI,YAAY,WAAW;AAAA,MACnD,QAAQ;AAAA,QACN,aAAa;AAAA,QACb,WAAW;AAAA,QACX,WAAW,KAAK,IAAA;AAAA,QAChB,GAAG;AAAA,MAAA;AAAA,IACL,CACD,CAAC;AAAA,EACJ;AAOA,QAAM,oBAAoB,CAAC,MAAc,UAAyB;AAChE,QAAI,gCAAgC;AAAA,MAGlC,OAAQ,MAAgB;AAAA,IAAA,CACzB;AAED,kBAAc,SAAS,EAAE,MAAM,SAAU,MAAgB,SAAS;AAAA,EACpE;AAOA,QAAM,wBAAwB,YAA2B;AACvD,QAAI;AACF,YAAM,mBAAmB,6BAA6B,EAAE,WAAW,IAAI;AAAA,IACzE,SAAS,OAAO;AACd,UAAI,qCAAqC;AAAA,QAEvC,OAAQ,MAAgB;AAAA,MAAA,CACzB;AAAA,IACH;AAAA,EACF;AAeA,QAAM,mBAAmB,OAAO,YAAmC;AAEjE,QAAI,CAAC,UAAU,yBAAyB;AACtC;AAAA,QACE;AAAA,QACA,mBAAmB,8DAA8D;AAAA,MAAA;AAGnF;AAAA,IACF;AAKA,QAAI;AAEJ,QAAI;AACF,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,QACA,EAAE,SAAS,WAAW,GAAA;AAAA,MAAG;AAG3B,UAAI,EAAC,iCAAQ,QAAO;AAClB;AAAA,MACF;AAEA,cAAQ,OAAO;AAAA,IACjB,SAAS,OAAO;AACd,wBAAkB,2BAA2B,KAAK;AAElD;AAAA,IACF;AAGA,UAAM,aAAa,IAAI,gBAAA;AACvB,UAAM,UAAU,WAAW,MAAM,WAAW,MAAA,GAAS,uBAAuB;AAE5E,QAAI;AAEJ,QAAI;AACF,qBAAe,MAAM,MAAM,UAAU,yBAAyB;AAAA,QAC5D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAK3B,MAAM,KAAK,UAAU,EAAE,OAAO;AAAA,QAC9B,QAAQ,WAAW;AAAA,MAAA,CACpB;AAAA,IACH,SAAS,OAAO;AAEd,YAAM,sBAAA;AACN,wBAAkB,iBAAiB,KAAK;AAExC;AAAA,IACF,UAAA;AACE,mBAAa,OAAO;AAAA,IACtB;AAEA,QAAI,CAAC,aAAa,IAAI;AACpB,YAAM,sBAAA;AACN;AAAA,QACE;AAAA,QACA;AAAA,UACE,iCAAiC,aAAa,MAAM,IAAI,aAAa,UAAU;AAAA,UAC/E;AAAA,QAAA;AAAA,MACF;AAGF;AAAA,IACF;AAOA,QAAI;AACF,YAAM,mBAAmB,8BAA8B;AAAA,QACrD;AAAA,QACA,WAAW;AAAA,MAAA,CACZ;AAAA,IACH,SAAS,OAAO;AACd,wBAAkB,0BAA0B,KAAK;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,UAA8B;AAAA,IAClC;AAAA,IACA;AAAA,IAEA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IAEA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IAEA,OAAO,OAAO,aAAmC;AAC/C,UAAI,WAAW;AACb,cAAM,aAAa,8BAA8B,EAAE;AAAA,MACrD;AAEA,kBAAY,OAAO,aAAa,WAC5B,SAAS,cAAc,QAAQ,IAC/B;AAEJ,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB,QAAQ,EAAE;AAAA,MACvD;AAGA,YAAM,eAAe,OAAO,SAAS;AACrC,YAAM,YAAY,IAAI,IAAI,GAAG,UAAU,eAAe,oBAAoB;AAC1E,gBAAU,aAAa,IAAI,gBAAgB,YAAY;AACvD,gBAAU,aAAa,IAAI,aAAa,EAAE;AAC1C,gBAAU,aAAa,IAAI,SAAS,OAAO,UAAU,SAAS,KAAK,CAAC;AAEpE,eAAS,aAAa;AAAA,QACpB,KAAK,UAAU,SAAA;AAAA,QACf,SAAS;AAAA,QACT,OAAO;AAAA,QACP,OAAO;AAAA,MAAA,CACR;AAED,aAAO,aAAa,sBAAsB,EAAE;AAE5C,eAAS,wBAAwB,QAAQ;AAAA,QACvC,cAAc,UAAU;AAAA,QACxB,SAAS,UAAU;AAAA,QACnB,SAAS,UAAU,YAAY;AAAA,QAC/B,OAAO,UAAU;AAAA,MAAA,CAClB;AAED,gBAAU,cAAA;AAGV,YAAM,eAAe,IAAI,QAAc,CAAC,SAAS,WAAW;AAC1D,cAAM,UAAU,WAAW,MAAM;AAC/B,iBAAO;AAAA,YACL,0CAA0C,UAAU,SAAS;AAAA,YAC7D;AAAA,YACA,EAAE,aAAa,MAAM,WAAW,UAAU,UAAA;AAAA,UAAU,CACrD;AAAA,QACH,GAAG,UAAU,SAAS;AAEtB,cAAM,cAAc,OAAQ,UAAU,eAAe,MAAM;AACzD,uBAAa,OAAO;AACpB,sBAAA;AACA,kBAAA;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAGD,aAAO,UAAU,gBAAgB,CAAC,YAAqC;AACrE,YAAI,QAAQ,QAAQ;AAClB,qBAAW;AAAA,QACb;AAEA,sBAAc,UAAU,OAAO;AAAA,MACjC,CAAC;AAED,aAAO,UAAU,eAAe,CAAC,YAAqC;AACpE,sBAAc,SAAS,OAAO;AAAA,MAChC,CAAC;AAGD,cAAQ,MAAM,WAAW,QAAQ;AAAA,QAC/B,WAAW,UAAU;AAAA,MAAA,CACtB;AAED,kBAAY;AAEZ,UAAI;AAEF,cAAM,uBAAA;AAGN,cAAM;AAGN,cAAM,OAAQ,YAAY,kBAAkB;AAAA,UAC1C,WAAW;AAAA,UACX,SAAS;AAAA,UACT,OAAO,UAAU;AAAA,UACjB,WAAW,UAAU;AAAA,UACrB,WAAW,UAAU;AAAA,UACrB,QAAQ,QAAQ;AAAA,UAChB,KAAK,QAAQ;AAAA,UACb,YAAY,QAAQ;AAAA,UACpB,OAAO,UAAU;AAAA,QAAA,CAClB;AAGD,YAAI,OAAQ,QAAO,MAAM,UAAU;AAGnC,sBAAc,SAAS,EAAE;AAKzB,YAAI,gBAAgB;AAClB,eAAK,iBAAiB,cAAc;AAAA,QACtC;AAAA,MAEF,SAAS,OAAO;AAEd,sBAAc,SAAS;AAAA,UACrB,MAAM;AAAA,UACN,SAAU,MAAgB;AAAA,QAAA,CAC3B;AAGD,oBAAY;AAEZ,YAAI,QAAQ;AACV,iBAAO,QAAA;AACP,mBAAS;AAAA,QACX;AAEA,YAAI,WAAW,QAAQ;AACrB,kBAAQ,QAAQ,MAAM;AACtB,mBAAS;AACT,oBAAU;AAAA,QACZ;AAEA,oBAAY;AAEZ,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,SAAS,MAAM;AACb,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB;AAAA,MAC7C;AAIA,WAAK,sBAAA;AAGL,UAAI,QAAQ;AACV,eAAO,YAAY,aAAa,CAAA,CAAE,EAAE,MAAM,CAAC,UAAU;AACnD,cAAI,gCAAgC;AAAA,YAElC,OAAQ,MAAgB;AAAA,UAAA,CACzB;AAAA,QACH,CAAC;AAED,eAAO,QAAA;AACP,iBAAS;AAAA,MACX;AAEA,UAAI,WAAW,QAAQ;AACrB,gBAAQ,QAAQ,MAAM;AACtB,iBAAS;AACT,kBAAU;AAAA,MACZ;AAEA,kBAAY;AACZ,kBAAY;AACZ,iBAAW;AAAA,IACb;AAAA,IAEA,QAAQ,OAAO,eAAqE;AAClF,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,2CAA2C,EAAE;AAAA,MAClE;AAGA,UAAI,WAAW,YAAY,UAAa,WAAW,YAAY,gBAAgB;AAC7E,yBAAiB,WAAW;AAC5B,mBAAW;AAEX,cAAM,OAAO,YAAY,aAAa,EAAE;AAGxC,aAAK,iBAAiB,cAAc;AAAA,MACtC;AAGA,YAAM,gBAAyC,CAAA;AAE/C,UAAI,WAAW,WAAW,QAAW;AACnC,sBAAc,SAAS,WAAW;AAAA,MACpC;AACA,UAAI,WAAW,QAAQ,QAAW;AAChC,sBAAc,MAAM,WAAW;AAAA,MACjC;AACA,UAAI,WAAW,eAAe,QAAW;AACvC,sBAAc,aAAa,WAAW;AAAA,MACxC;AAGA,UAAI,WAAW,cAAc,QAAW;AACtC,sBAAc,YAAY,WAAW;AACrC,sBAAc,QAAQ,UAAU;AAChC,sBAAc,YAAY,UAAU;AAAA,MACtC;AAEA,UAAI,OAAO,KAAK,aAAa,EAAE,SAAS,GAAG;AACzC,cAAM,OAAO,YAAY,qBAAqB,aAAa;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,WAAiC,aAA4B;AAChE,kBAAY;AAAA,QACV;AAAA,QACA;AAAA,MAAA;AAGF,aAAO,MAAM,YAAY;AAAA,QACvB;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAAA;AAAA,IAGA,OAAO,MAAM;AAAA,IAAC;AAAA,IACd,MAAM,MAAM;AAAA,IAAC;AAAA,IACb,OAAO,MAAM;AAAA,IAAC;AAAA,EAAA;AAGhB,SAAO;AACT;"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { C as ConfigurationError, l as log, E as ElementError, c as createIframe, a as createPostMessageClient, b as createEventDispatcher, d as createMounter } from "./index-
|
|
1
|
+
import { C as ConfigurationError, l as log, E as ElementError, g as generateId, c as createIframe, a as createPostMessageClient, b as createEventDispatcher, d as createMounter } from "./index-Dyy7tm5Z.js";
|
|
2
2
|
const createCopyButtonElement = (_apiKey, sdkConfig, inputOptions, coordinatorElementId, ensureCoordinatorReady, _notifyCoordinatorElementUnmount) => {
|
|
3
3
|
const options = inputOptions;
|
|
4
4
|
if ((options == null ? void 0 : options.allowClipboard) !== true) {
|
|
@@ -48,6 +48,9 @@ const createCopyButtonElement = (_apiKey, sdkConfig, inputOptions, coordinatorEl
|
|
|
48
48
|
get mounted() {
|
|
49
49
|
return isMounted;
|
|
50
50
|
},
|
|
51
|
+
get loaded() {
|
|
52
|
+
return isMounted;
|
|
53
|
+
},
|
|
51
54
|
mount: async (selector) => {
|
|
52
55
|
if (isMounted) {
|
|
53
56
|
throw ElementError("Element is already mounted", id);
|
|
@@ -56,7 +59,7 @@ const createCopyButtonElement = (_apiKey, sdkConfig, inputOptions, coordinatorEl
|
|
|
56
59
|
if (!container) {
|
|
57
60
|
throw ElementError(`Container not found: ${selector}`);
|
|
58
61
|
}
|
|
59
|
-
const signature =
|
|
62
|
+
const signature = generateId();
|
|
60
63
|
const parentOrigin = window.location.origin;
|
|
61
64
|
const iframeUrl = new URL(`${sdkConfig.elementsBaseUrl}/copy-button.html`);
|
|
62
65
|
iframeUrl.searchParams.set("parentOrigin", parentOrigin);
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"create-copy-button-2XtKTEo3.js","sources":["../src/elements/create-copy-button.ts"],"sourcesContent":["/**\n * Copy Button Element Factory\n *\n * Creates a secure button that copies values to clipboard.\n * Can copy either a static value or a value from a linked BT element.\n *\n * SECURITY NOTE: This element is opt-in only via allowClipboard: true.\n * Clipboard access for raw card data may not be PCI compliant and must\n * never be enabled inadvertently.\n */\n\nimport type { PostMessageClient } from '@basis-theory-elements/postmessage';\nimport { createPostMessageClient } from '@basis-theory-elements/postmessage';\nimport { ConfigurationError, ElementError, generateId, log } from '@basis-theory-elements/shared';\nimport { createMounter } from '../mounter/create-mounter';\nimport type {\n CopyButtonElement,\n CopyButtonOptions,\n Element,\n ElementMounter,\n ElementOptions,\n EventListener,\n EventType,\n SDKConfig,\n} from '../types';\nimport { createIframe } from '../utils/create-iframe';\nimport { createEventDispatcher } from '../utils/create-event-dispatcher';\n\n/**\n * Factory function to create a copy button element\n *\n * @throws ConfigurationError if allowClipboard is not set to true\n */\nexport const createCopyButtonElement = (\n _apiKey: string, // Reserved for future API calls\n sdkConfig: SDKConfig,\n inputOptions: ElementOptions | CopyButtonOptions | undefined,\n coordinatorElementId: string,\n ensureCoordinatorReady: () => Promise<void>,\n _notifyCoordinatorElementUnmount: (elementId: string) => Promise<void> // Not used - CopyButton doesn't cache sensitive values\n): CopyButtonElement => {\n // SECURITY: Defense-in-depth check for allowClipboard flag\n // Primary validation is in validate-element-options.ts, but we keep this\n // as a backup in case the factory is called directly (e.g., lazy loading)\n const options = inputOptions as CopyButtonOptions | undefined;\n if (options?.allowClipboard !== true) {\n throw ConfigurationError(\n 'CopyButton requires allowClipboard: true. ' +\n 'Clipboard access for raw card data may not be PCI compliant ' +\n 'and must be explicitly enabled.',\n {\n received: options?.allowClipboard,\n expected: true,\n elementType: 'copyButton',\n }\n );\n }\n\n // Private state (closure)\n let iframe: HTMLIFrameElement | null = null;\n let client: PostMessageClient | null = null;\n let mounter: ElementMounter | null = null;\n let isMounted = false;\n let container: HTMLElement | null = null;\n let eventDispatcher: ReturnType<typeof createEventDispatcher> | null = null;\n\n const eventTarget = new EventTarget();\n const id = coordinatorElementId;\n const type = 'copyButton' as const;\n\n // Setup event dispatcher (centralized event mapping logic)\n const setupEventListeners = () => {\n if (!client) return;\n\n eventDispatcher = createEventDispatcher({\n elementType: type,\n elementId: id,\n client,\n eventTarget,\n });\n\n eventDispatcher.setupSubscriptions();\n\n // Subscribe to copy events from the iframe\n client.subscribe('EVENT_COPY', (payload) => {\n const event = new CustomEvent('copy', {\n detail: {\n elementType: type,\n elementId: id,\n timestamp: Date.now(),\n success: payload?.success ?? false,\n error: payload?.error,\n },\n });\n eventTarget.dispatchEvent(event);\n });\n };\n\n const element: CopyButtonElement = {\n id,\n type,\n get mounted() {\n return isMounted;\n },\n get loaded() {\n return isMounted;\n },\n\n mount: async (selector: string | HTMLElement) => {\n if (isMounted) {\n throw ElementError('Element is already mounted', id);\n }\n\n container =\n typeof selector === 'string'\n ? document.querySelector(selector)\n : selector;\n\n if (!container) {\n throw ElementError(`Container not found: ${selector}`);\n }\n\n // Generate signature for iframe authentication\n // Must match between URL param and CMD_SET_CONFIG to prevent\n // unauthorized iframe framing attacks\n const signature = generateId();\n\n // Pass parent origin + element ID + signature via URL parameters\n const parentOrigin = window.location.origin;\n const iframeUrl = new URL(`${sdkConfig.elementsBaseUrl}/copy-button.html`);\n iframeUrl.searchParams.set('parentOrigin', parentOrigin);\n iframeUrl.searchParams.set('elementId', id);\n iframeUrl.searchParams.set('signature', signature);\n iframeUrl.searchParams.set(\n 'measurePerformance',\n String(sdkConfig.measurePerformance || false)\n );\n iframeUrl.searchParams.set('debug', String(sdkConfig.debug || false));\n\n iframe = createIframe({\n src: iframeUrl.toString(),\n sandbox: 'allow-scripts allow-same-origin',\n // clipboard-write is required for Firefox/Safari clipboard access in iframes\n allow: 'clipboard-write',\n title: 'Copy Button',\n });\n\n // Add element ID attribute for debugging\n iframe.setAttribute('data-bt-element-id', id);\n\n client = createPostMessageClient(iframe, {\n targetOrigin: sdkConfig.iframeOrigin,\n timeout: sdkConfig.timeoutMs,\n retries: sdkConfig.retryConfig.maxRetries,\n debug: sdkConfig.debug,\n });\n\n mounter = createMounter();\n setupEventListeners();\n\n // Subscribe to 'ready' event BEFORE mounting iframe (prevents race condition)\n const readyPromise = new Promise<void>((resolve, reject) => {\n const timeout = setTimeout(() => {\n reject(\n ElementError(\n `Iframe EVENT_READY not received within ${sdkConfig.timeoutMs}ms`,\n id,\n { elementType: type, timeoutMs: sdkConfig.timeoutMs }\n )\n );\n }, sdkConfig.timeoutMs);\n\n const handleReady = () => {\n clearTimeout(timeout);\n resolve();\n };\n\n eventTarget.addEventListener('ready', handleReady, { once: true });\n });\n\n // Mount iframe to DOM\n mounter.mount(container, iframe, {\n timeoutMs: sdkConfig.timeoutMs,\n });\n\n isMounted = true;\n\n // Wait for coordinator + configuration to complete\n try {\n await ensureCoordinatorReady();\n await readyPromise;\n\n // Send copy button config with signature for authentication\n await client!.sendRequest('CMD_SET_CONFIG', {\n elementId: id,\n signature, // Must match URL param signature for iframe to operate\n theme: sdkConfig.theme,\n darkTheme: sdkConfig.darkTheme,\n themeMode: sdkConfig.themeMode,\n text: options.text || 'Copy',\n value: options.value,\n disabled: options.disabled,\n debug: sdkConfig.debug,\n });\n\n // Reveal iframe now that theme is applied\n if (iframe) iframe.style.opacity = '1';\n } catch (error) {\n // Dispatch error event before cleanup\n if (eventDispatcher) {\n eventDispatcher.dispatchError(\n 'MOUNT_ERROR',\n (error as Error).message,\n error as Error\n );\n }\n\n // Mount failed - clean up\n isMounted = false;\n\n if (client) {\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n eventDispatcher = null;\n container = null;\n\n throw error;\n }\n },\n\n unmount: () => {\n if (!isMounted) {\n throw ElementError('Element is not mounted');\n }\n\n if (client) {\n client.destroy();\n client = null;\n }\n\n if (mounter && iframe) {\n mounter.unmount(iframe);\n iframe = null;\n mounter = null;\n }\n\n eventDispatcher = null;\n container = null;\n isMounted = false;\n },\n\n update: async (newOptions: Partial<CopyButtonOptions> & { themeMode?: string }) => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before updating', id);\n }\n\n // Only send fields that are present (matches create-card-number) so we never\n // overwrite iframe config with undefined/null over postMessage.\n const updatePayload: Record<string, any> = {};\n\n const copyButtonOptions = newOptions as Partial<CopyButtonOptions> & { themeMode?: string };\n\n if (copyButtonOptions.text !== undefined) {\n updatePayload.text = copyButtonOptions.text;\n }\n if (copyButtonOptions.value !== undefined) {\n updatePayload.value = copyButtonOptions.value;\n }\n if (copyButtonOptions.disabled !== undefined) {\n updatePayload.disabled = copyButtonOptions.disabled;\n }\n\n // Include theme mode update if provided\n if (newOptions.themeMode !== undefined) {\n updatePayload.themeMode = newOptions.themeMode;\n updatePayload.theme = sdkConfig.theme;\n updatePayload.darkTheme = sdkConfig.darkTheme;\n }\n\n await client.sendRequest('CMD_UPDATE_CONFIG', updatePayload);\n },\n\n focus: () => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before focusing', id);\n }\n\n client.sendRequest('CMD_FOCUS', {});\n },\n\n blur: () => {\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before blurring', id);\n }\n\n client.sendRequest('CMD_BLUR', {});\n },\n\n // No-op for CopyButton (nothing to clear in a button)\n clear: () => {},\n\n on: (eventType: EventType, listener: EventListener) => {\n eventTarget.addEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n\n return () =>\n eventTarget.removeEventListener(\n eventType,\n listener as EventListenerOrEventListenerObject\n );\n },\n\n /**\n * Link this copy button to another element's value\n * Sends CMD_SET_VALUE_REF to the iframe with the referenced element's ID\n * @returns Promise that resolves when the reference is set\n */\n setValueRef: async (refElement: Element): Promise<void> => {\n log('setValueRef called', {\n copyButtonId: id,\n refElementId: refElement?.id,\n });\n\n if (!refElement || !refElement.id) {\n throw ElementError('setValueRef requires a valid Element with an ID', id);\n }\n\n if (!isMounted || !client) {\n throw ElementError('Element must be mounted before calling setValueRef', id);\n }\n\n // Send command to iframe to link to the referenced element\n await client.sendRequest('CMD_SET_VALUE_REF', {\n referenceElementId: refElement.id,\n });\n },\n };\n\n return element;\n};\n"],"names":[],"mappings":";AAiCO,MAAM,0BAA0B,CACrC,SACA,WACA,cACA,sBACA,wBACA,qCACsB;AAItB,QAAM,UAAU;AAChB,OAAI,mCAAS,oBAAmB,MAAM;AACpC,UAAM;AAAA,MACJ;AAAA,MAGA;AAAA,QACE,UAAU,mCAAS;AAAA,QACnB,UAAU;AAAA,QACV,aAAa;AAAA,MAAA;AAAA,IACf;AAAA,EAEJ;AAGA,MAAI,SAAmC;AACvC,MAAI,SAAmC;AACvC,MAAI,UAAiC;AACrC,MAAI,YAAY;AAChB,MAAI,YAAgC;AACpC,MAAI,kBAAmE;AAEvE,QAAM,cAAc,IAAI,YAAA;AACxB,QAAM,KAAK;AACX,QAAM,OAAO;AAGb,QAAM,sBAAsB,MAAM;AAChC,QAAI,CAAC,OAAQ;AAEb,sBAAkB,sBAAsB;AAAA,MACtC,aAAa;AAAA,MACb,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IAAA,CACD;AAED,oBAAgB,mBAAA;AAGhB,WAAO,UAAU,cAAc,CAAC,YAAY;AAC1C,YAAM,QAAQ,IAAI,YAAY,QAAQ;AAAA,QACpC,QAAQ;AAAA,UACN,aAAa;AAAA,UACb,WAAW;AAAA,UACX,WAAW,KAAK,IAAA;AAAA,UAChB,UAAS,mCAAS,YAAW;AAAA,UAC7B,OAAO,mCAAS;AAAA,QAAA;AAAA,MAClB,CACD;AACD,kBAAY,cAAc,KAAK;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,QAAM,UAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IAEA,OAAO,OAAO,aAAmC;AAC/C,UAAI,WAAW;AACb,cAAM,aAAa,8BAA8B,EAAE;AAAA,MACrD;AAEA,kBACE,OAAO,aAAa,WAChB,SAAS,cAAc,QAAQ,IAC/B;AAEN,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB,QAAQ,EAAE;AAAA,MACvD;AAKA,YAAM,YAAY,WAAA;AAGlB,YAAM,eAAe,OAAO,SAAS;AACrC,YAAM,YAAY,IAAI,IAAI,GAAG,UAAU,eAAe,mBAAmB;AACzE,gBAAU,aAAa,IAAI,gBAAgB,YAAY;AACvD,gBAAU,aAAa,IAAI,aAAa,EAAE;AAC1C,gBAAU,aAAa,IAAI,aAAa,SAAS;AACjD,gBAAU,aAAa;AAAA,QACrB;AAAA,QACA,OAAO,UAAU,sBAAsB,KAAK;AAAA,MAAA;AAE9C,gBAAU,aAAa,IAAI,SAAS,OAAO,UAAU,SAAS,KAAK,CAAC;AAEpE,eAAS,aAAa;AAAA,QACpB,KAAK,UAAU,SAAA;AAAA,QACf,SAAS;AAAA;AAAA,QAET,OAAO;AAAA,QACP,OAAO;AAAA,MAAA,CACR;AAGD,aAAO,aAAa,sBAAsB,EAAE;AAE5C,eAAS,wBAAwB,QAAQ;AAAA,QACvC,cAAc,UAAU;AAAA,QACxB,SAAS,UAAU;AAAA,QACnB,SAAS,UAAU,YAAY;AAAA,QAC/B,OAAO,UAAU;AAAA,MAAA,CAClB;AAED,gBAAU,cAAA;AACV,0BAAA;AAGA,YAAM,eAAe,IAAI,QAAc,CAAC,SAAS,WAAW;AAC1D,cAAM,UAAU,WAAW,MAAM;AAC/B;AAAA,YACE;AAAA,cACE,0CAA0C,UAAU,SAAS;AAAA,cAC7D;AAAA,cACA,EAAE,aAAa,MAAM,WAAW,UAAU,UAAA;AAAA,YAAU;AAAA,UACtD;AAAA,QAEJ,GAAG,UAAU,SAAS;AAEtB,cAAM,cAAc,MAAM;AACxB,uBAAa,OAAO;AACpB,kBAAA;AAAA,QACF;AAEA,oBAAY,iBAAiB,SAAS,aAAa,EAAE,MAAM,MAAM;AAAA,MACnE,CAAC;AAGD,cAAQ,MAAM,WAAW,QAAQ;AAAA,QAC/B,WAAW,UAAU;AAAA,MAAA,CACtB;AAED,kBAAY;AAGZ,UAAI;AACF,cAAM,uBAAA;AACN,cAAM;AAGN,cAAM,OAAQ,YAAY,kBAAkB;AAAA,UAC1C,WAAW;AAAA,UACX;AAAA;AAAA,UACA,OAAO,UAAU;AAAA,UACjB,WAAW,UAAU;AAAA,UACrB,WAAW,UAAU;AAAA,UACrB,MAAM,QAAQ,QAAQ;AAAA,UACtB,OAAO,QAAQ;AAAA,UACf,UAAU,QAAQ;AAAA,UAClB,OAAO,UAAU;AAAA,QAAA,CAClB;AAGD,YAAI,OAAQ,QAAO,MAAM,UAAU;AAAA,MACrC,SAAS,OAAO;AAEd,YAAI,iBAAiB;AACnB,0BAAgB;AAAA,YACd;AAAA,YACC,MAAgB;AAAA,YACjB;AAAA,UAAA;AAAA,QAEJ;AAGA,oBAAY;AAEZ,YAAI,QAAQ;AACV,iBAAO,QAAA;AACP,mBAAS;AAAA,QACX;AAEA,YAAI,WAAW,QAAQ;AACrB,kBAAQ,QAAQ,MAAM;AACtB,mBAAS;AACT,oBAAU;AAAA,QACZ;AAEA,0BAAkB;AAClB,oBAAY;AAEZ,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,SAAS,MAAM;AACb,UAAI,CAAC,WAAW;AACd,cAAM,aAAa,wBAAwB;AAAA,MAC7C;AAEA,UAAI,QAAQ;AACV,eAAO,QAAA;AACP,iBAAS;AAAA,MACX;AAEA,UAAI,WAAW,QAAQ;AACrB,gBAAQ,QAAQ,MAAM;AACtB,iBAAS;AACT,kBAAU;AAAA,MACZ;AAEA,wBAAkB;AAClB,kBAAY;AACZ,kBAAY;AAAA,IACd;AAAA,IAEA,QAAQ,OAAO,eAAoE;AACjF,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,2CAA2C,EAAE;AAAA,MAClE;AAIA,YAAM,gBAAqC,CAAA;AAE3C,YAAM,oBAAoB;AAE1B,UAAI,kBAAkB,SAAS,QAAW;AACxC,sBAAc,OAAO,kBAAkB;AAAA,MACzC;AACA,UAAI,kBAAkB,UAAU,QAAW;AACzC,sBAAc,QAAQ,kBAAkB;AAAA,MAC1C;AACA,UAAI,kBAAkB,aAAa,QAAW;AAC5C,sBAAc,WAAW,kBAAkB;AAAA,MAC7C;AAGA,UAAI,WAAW,cAAc,QAAW;AACtC,sBAAc,YAAY,WAAW;AACrC,sBAAc,QAAQ,UAAU;AAChC,sBAAc,YAAY,UAAU;AAAA,MACtC;AAEA,YAAM,OAAO,YAAY,qBAAqB,aAAa;AAAA,IAC7D;AAAA,IAEA,OAAO,MAAM;AACX,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,2CAA2C,EAAE;AAAA,MAClE;AAEA,aAAO,YAAY,aAAa,EAAE;AAAA,IACpC;AAAA,IAEA,MAAM,MAAM;AACV,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,2CAA2C,EAAE;AAAA,MAClE;AAEA,aAAO,YAAY,YAAY,EAAE;AAAA,IACnC;AAAA;AAAA,IAGA,OAAO,MAAM;AAAA,IAAC;AAAA,IAEd,IAAI,CAAC,WAAsB,aAA4B;AACrD,kBAAY;AAAA,QACV;AAAA,QACA;AAAA,MAAA;AAGF,aAAO,MACL,YAAY;AAAA,QACV;AAAA,QACA;AAAA,MAAA;AAAA,IAEN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,aAAa,OAAO,eAAuC;AACzD,UAAI,sBAAsB;AAAA,QAExB,cAAc,yCAAY;AAAA,MAAA,CAC3B;AAED,UAAI,CAAC,cAAc,CAAC,WAAW,IAAI;AACjC,cAAM,aAAa,mDAAmD,EAAE;AAAA,MAC1E;AAEA,UAAI,CAAC,aAAa,CAAC,QAAQ;AACzB,cAAM,aAAa,sDAAsD,EAAE;AAAA,MAC7E;AAGA,YAAM,OAAO,YAAY,qBAAqB;AAAA,QAC5C,oBAAoB,WAAW;AAAA,MAAA,CAChC;AAAA,IACH;AAAA,EAAA;AAGF,SAAO;AACT;"}
|