@bloonio/lokotro-pay 1.1.0 → 1.1.2

package/index.d.ts

@@ -218,6 +218,7 @@ interface LokotroPaymentBody {
     cardHolderName?: string;
     merchant?: LokotroMerchantInfo;
     mastercardPaymentMethod?: 'HOSTED_SESSION' | 'DIRECT_CAPTURE';
+    transactionalCurrency?: string;
     metadata?: Record<string, unknown>;
 }
 /**
@@ -571,11 +572,15 @@ interface LokotroPaymentState {
 }
 declare class LokotroPaymentService {
     private httpClient;
+    /** Allowed domains for redirect URLs to prevent open redirect attacks */
+    private static readonly ALLOWED_REDIRECT_DOMAINS;
     private stateSubject;
     state$: Observable<LokotroPaymentState>;
     private currentPaymentBody?;
     private mobileMoneyPollingTimer?;
     private mobileMoneyPollingAttempts;
+    private pollingStop$;
+    private pollingSubscription?;
     private static readonly MOBILE_MONEY_POLL_INTERVAL;
     private static readonly MOBILE_MONEY_MAX_ATTEMPTS;
     constructor(httpClient: LokotroHttpClientService);
@@ -704,6 +709,16 @@ declare class LokotroPaymentService {
     private getBoolean;
     private asRecord;
     private getRecordArray;
+    /**
+     * Validate that a redirect URL points to an allowed domain.
+     * Prevents open redirect attacks if the API response is compromised.
+     */
+    private isValidRedirectUrl;
+    /**
+     * Full cleanup - call when the host component is destroyed.
+     * Addresses singleton state collision by ensuring polling and state are reset.
+     */
+    destroy(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<LokotroPaymentService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<LokotroPaymentService>;
 }
@@ -948,6 +963,7 @@ declare class LokotroPayCheckoutComponent implements OnInit, OnDestroy {
     private static readonly MAX_RETRY_ATTEMPTS;
     private retryAttempts;
     private stateSubscription?;
+    private readonly destroy$;
     constructor(paymentService: LokotroPaymentService, localization: LokotroLocalizationService);
     /** Check if user has retries left */
     get hasRetriesLeft(): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bloonio/lokotro-pay",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Angular SDK for Lokotro Pay - Payment processing library with multiple payment methods",
   "keywords": [
     "angular",