@edge-markets/connect-node 1.6.0 → 1.6.1

package/README.md

@@ -175,7 +175,7 @@ const balance = await client.getBalance()
 ### Transfers
 
 ```typescript
-// Initiate transfer (requires OTP verification)
+// 1. Initiate the transfer — returns a pending transfer that requires verification.
 const transfer = await client.initiateTransfer({
   type: 'debit',           // 'debit' = pull from user, 'credit' = push to user
   amount: '100.00',
@@ -183,12 +183,22 @@ const transfer = await client.initiateTransfer({
 })
 // Returns: { transferId, status: 'pending_verification', otpMethod }
 
-// Verify with OTP
-const result = await client.verifyTransfer(transfer.transferId, userOtp)
-// Returns: { transferId, status: 'completed' | 'failed' }
+// 2. Create an EDGE-hosted verification session. The returned `verificationUrl`
+//    is a single-use, short-lived URL you embed in an iframe or popup on your
+//    frontend. The user enters their OTP inside the EDGE-hosted UI — OTP secrets
+//    never touch your infrastructure.
+const session = await client.createVerificationSession(transfer.transferId, {
+  origin: 'https://your-site.example.com',
+})
+// Returns: { sessionId, verificationUrl, expiresAt }
+
+// 3. Listen for the postMessage event from the iframe (or poll
+//    getVerificationSessionStatus) to learn when verification completes.
+//    A `transfer.completed` webhook will be delivered to your configured
+//    webhook URL once the transfer settles.
 
 // Get transfer status
-const status = await client.getTransfer(transferId)
+const status = await client.getTransfer(transfer.transferId)
 
 // List transfers
 const { transfers, total } = await client.listTransfers({

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as node_https from 'node:https';
-import { EdgeEnvironment, TransferCategory, SdkGeolocation, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, Transfer, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSession, VerificationSessionStatusResponse, EdgeTokens } from '@edge-markets/connect';
+import { EdgeEnvironment, TransferCategory, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, Transfer, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSession, VerificationSessionStatusResponse, EdgeTokens } from '@edge-markets/connect';
 export { Balance, CreateVerificationSessionRequest, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferList, TransferListItem, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 interface RequestInfo {
@@ -56,13 +56,6 @@ interface TransferOptions {
     /** Optional transaction category for settlement window determination */
     category?: TransferCategory;
 }
-/**
- * Options for verifying a transfer with OTP.
- */
-interface VerifyTransferOptions {
-    /** SDK-reported geolocation for cross-referencing against IP-based geo */
-    sdkGeo?: SdkGeolocation;
-}
 
 /**
  * A lightweight, user-scoped API client created via {@link EdgeConnectServer.forUser}.
@@ -78,7 +71,6 @@ declare class EdgeUserClient {
     verifyIdentity(options: VerifyIdentityOptions): Promise<VerifyIdentityResult>;
     getBalance(): Promise<Balance>;
     initiateTransfer(options: TransferOptions): Promise<Transfer>;
-    verifyTransfer(transferId: string, otp: string, options?: VerifyTransferOptions): Promise<Transfer>;
     getTransfer(transferId: string): Promise<Transfer>;
     listTransfers(params?: ListTransfersParams): Promise<TransferList>;
     revokeConsent(): Promise<{
@@ -132,4 +124,4 @@ declare class EdgeConnectServer {
     private handleApiErrorFromBody;
 }
 
-export { EdgeConnectServer, type EdgeConnectServerConfig, EdgeUserClient, type MtlsConfig, type RequestInfo, type ResponseInfo, type RetryConfig, type TransferOptions, type VerifyTransferOptions };
+export { EdgeConnectServer, type EdgeConnectServerConfig, EdgeUserClient, type MtlsConfig, type RequestInfo, type ResponseInfo, type RetryConfig, type TransferOptions };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as node_https from 'node:https';
-import { EdgeEnvironment, TransferCategory, SdkGeolocation, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, Transfer, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSession, VerificationSessionStatusResponse, EdgeTokens } from '@edge-markets/connect';
+import { EdgeEnvironment, TransferCategory, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, Transfer, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSession, VerificationSessionStatusResponse, EdgeTokens } from '@edge-markets/connect';
 export { Balance, CreateVerificationSessionRequest, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferList, TransferListItem, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 interface RequestInfo {
@@ -56,13 +56,6 @@ interface TransferOptions {
     /** Optional transaction category for settlement window determination */
     category?: TransferCategory;
 }
-/**
- * Options for verifying a transfer with OTP.
- */
-interface VerifyTransferOptions {
-    /** SDK-reported geolocation for cross-referencing against IP-based geo */
-    sdkGeo?: SdkGeolocation;
-}
 
 /**
  * A lightweight, user-scoped API client created via {@link EdgeConnectServer.forUser}.
@@ -78,7 +71,6 @@ declare class EdgeUserClient {
     verifyIdentity(options: VerifyIdentityOptions): Promise<VerifyIdentityResult>;
     getBalance(): Promise<Balance>;
     initiateTransfer(options: TransferOptions): Promise<Transfer>;
-    verifyTransfer(transferId: string, otp: string, options?: VerifyTransferOptions): Promise<Transfer>;
     getTransfer(transferId: string): Promise<Transfer>;
     listTransfers(params?: ListTransfersParams): Promise<TransferList>;
     revokeConsent(): Promise<{
@@ -132,4 +124,4 @@ declare class EdgeConnectServer {
     private handleApiErrorFromBody;
 }
 
-export { EdgeConnectServer, type EdgeConnectServerConfig, EdgeUserClient, type MtlsConfig, type RequestInfo, type ResponseInfo, type RetryConfig, type TransferOptions, type VerifyTransferOptions };
+export { EdgeConnectServer, type EdgeConnectServerConfig, EdgeUserClient, type MtlsConfig, type RequestInfo, type ResponseInfo, type RetryConfig, type TransferOptions };

package/dist/index.js

@@ -134,18 +134,6 @@ var EdgeUserClient = class {
     }
     return this.server._apiRequest("POST", "/transfer", this.accessToken, body);
   }
-  async verifyTransfer(transferId, otp, options) {
-    const body = { otp };
-    if (options?.sdkGeo) {
-      body.sdkGeo = options.sdkGeo;
-    }
-    return this.server._apiRequest(
-      "POST",
-      `/transfer/${encodeURIComponent(transferId)}/verify`,
-      this.accessToken,
-      body
-    );
-  }
   async getTransfer(transferId) {
     return this.server._apiRequest("GET", `/transfer/${encodeURIComponent(transferId)}`, this.accessToken);
   }
@@ -308,6 +296,28 @@ var instances = /* @__PURE__ */ new Map();
 function getInstanceKey(config) {
   return `${config.clientId}:${config.environment}`;
 }
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "api.edgeboost.com"]);
+function isMtlsEnforcedHost(host) {
+  if (MTLS_ENFORCED_HOSTS.has(host)) {
+    return true;
+  }
+  for (const enforced of MTLS_ENFORCED_HOSTS) {
+    if (host.endsWith("." + enforced)) {
+      return true;
+    }
+  }
+  return false;
+}
+function environmentRequiresMtls(environment, apiBaseUrl) {
+  if (environment === "staging" || environment === "production") {
+    return true;
+  }
+  try {
+    return isMtlsEnforcedHost(new URL(apiBaseUrl).host);
+  } catch {
+    return false;
+  }
+}
 var EdgeConnectServer = class _EdgeConnectServer {
   static getInstance(config) {
     const key = getInstanceKey(config);
@@ -343,6 +353,10 @@ var EdgeConnectServer = class _EdgeConnectServer {
       validateMtlsConfig(config.mtls);
       this.httpsAgent = createHttpsAgent(config.mtls);
       this.dispatcher = createUndiciDispatcher(config.mtls);
+    } else if (environmentRequiresMtls(config.environment, this.apiBaseUrl)) {
+      console.warn(
+        `[EdgeConnectServer] environment='${config.environment}' is served from an mTLS-enforced host (${this.apiBaseUrl}) but no mtls config was provided. Requests will fail at the TLS handshake with a connection reset. Pass mtls: { enabled: true, cert, key, ca? } to EdgeConnectServer or coordinate with EDGE DevRel to issue a partner client certificate.`
+      );
     }
   }
   /**

package/dist/index.mjs

@@ -97,18 +97,6 @@ var EdgeUserClient = class {
     }
     return this.server._apiRequest("POST", "/transfer", this.accessToken, body);
   }
-  async verifyTransfer(transferId, otp, options) {
-    const body = { otp };
-    if (options?.sdkGeo) {
-      body.sdkGeo = options.sdkGeo;
-    }
-    return this.server._apiRequest(
-      "POST",
-      `/transfer/${encodeURIComponent(transferId)}/verify`,
-      this.accessToken,
-      body
-    );
-  }
   async getTransfer(transferId) {
     return this.server._apiRequest("GET", `/transfer/${encodeURIComponent(transferId)}`, this.accessToken);
   }
@@ -271,6 +259,28 @@ var instances = /* @__PURE__ */ new Map();
 function getInstanceKey(config) {
   return `${config.clientId}:${config.environment}`;
 }
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "api.edgeboost.com"]);
+function isMtlsEnforcedHost(host) {
+  if (MTLS_ENFORCED_HOSTS.has(host)) {
+    return true;
+  }
+  for (const enforced of MTLS_ENFORCED_HOSTS) {
+    if (host.endsWith("." + enforced)) {
+      return true;
+    }
+  }
+  return false;
+}
+function environmentRequiresMtls(environment, apiBaseUrl) {
+  if (environment === "staging" || environment === "production") {
+    return true;
+  }
+  try {
+    return isMtlsEnforcedHost(new URL(apiBaseUrl).host);
+  } catch {
+    return false;
+  }
+}
 var EdgeConnectServer = class _EdgeConnectServer {
   static getInstance(config) {
     const key = getInstanceKey(config);
@@ -306,6 +316,10 @@ var EdgeConnectServer = class _EdgeConnectServer {
       validateMtlsConfig(config.mtls);
       this.httpsAgent = createHttpsAgent(config.mtls);
       this.dispatcher = createUndiciDispatcher(config.mtls);
+    } else if (environmentRequiresMtls(config.environment, this.apiBaseUrl)) {
+      console.warn(
+        `[EdgeConnectServer] environment='${config.environment}' is served from an mTLS-enforced host (${this.apiBaseUrl}) but no mtls config was provided. Requests will fail at the TLS handshake with a connection reset. Pass mtls: { enabled: true, cert, key, ca? } to EdgeConnectServer or coordinate with EDGE DevRel to issue a partner client certificate.`
+      );
     }
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-node",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "Server SDK for EDGE Connect token exchange and API calls",
   "author": "Edge Markets",
   "license": "MIT",
@@ -21,7 +21,7 @@
     }
   },
   "dependencies": {
-    "@edge-markets/connect": "^1.5.0"
+    "@edge-markets/connect": "^1.5.1"
   },
   "devDependencies": {
     "tsup": "^8.0.0",