@fat-zebra/sdk 2.1.1 → 2.1.2

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to the Fat Zebra JS SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.2] - 2026-06-17
+
+### Fixed
+
+- Fixed a bug where the 3DS device data collection step could hang indefinitely due to an unexpected Cybersource payload format
+
 ## [2.1.0] - 2026-06-03
 
 > **Upgrade recommended.** This release fixes a critical issue where the React SDK could silently fall back to the legacy 3DS API, which is being decommissioned. Merchants should upgrade to avoid potential production failures.

package/dist/three_d_secure/utility/device-data-collection.js

@@ -58,13 +58,18 @@ class DeviceDataCollection {
         this.handleCollectionResponse(event);
     }
     static handleCollectionResponse(event) {
-        const response = JSON.parse(event.data);
-        if (response["MessageType"] == "profile.completed") {
-            emit(PublicEvent.DEVICE_PROFILE_READY_THREE_D_SECURE_EVENT, { message: null, data: null });
+        try {
+            const response = typeof event.data === "string" ? JSON.parse(event.data) : event.data;
+            if (response["MessageType"] == "profile.completed") {
+                emit(PublicEvent.DEVICE_PROFILE_READY_THREE_D_SECURE_EVENT, { message: null, data: null });
+            }
+            else if (response["Status"] == false) {
+                // Still proceed, even if status is false (as per recommendations from cybersource support team.
+                emit(PublicEvent.DEVICE_PROFILE_READY_THREE_D_SECURE_EVENT, { message: null, data: null });
+            }
         }
-        else if (response["Status"] == false) {
-            // Still proceed, even if status is false (as per recommendations from cybersource support team.
-            emit(PublicEvent.DEVICE_PROFILE_READY_THREE_D_SECURE_EVENT, { message: null, data: null });
+        catch (_a) {
+            // Unparseable payload — do not proceed
         }
     }
     static collectDeviceData() {
@@ -138,8 +143,13 @@ export default DeviceDataCollection;
 __decorate([
     logMethod({
         mapArgs: (args) => {
-            const params = args[0]; // grab the first argument.
-            return JSON.parse(params.data);
+            const params = args[0];
+            try {
+                return typeof params.data === "string" ? JSON.parse(params.data) : params.data;
+            }
+            catch (_a) {
+                return params.data;
+            }
         },
     })
 ], DeviceDataCollection, "handleCollectionResponse", null);

package/dist/version.js

@@ -1,6 +1,6 @@
-/*! fatzebra-sdk-commit: 058224c622e8fbff2bd14a9b64d79a602e336aba */
+/*! fatzebra-sdk-commit: 98facc3e829be81d954b2fd8674d98d09532e61f */
 export const version = '1.5.9';
 // Placeholder replaced at build time by .github/scripts/stamp-version.js with the
 // deployed commit hash (`git rev-parse HEAD`). Stays as the placeholder for builds
 // that don't run the stamp step (e.g. local/package builds).
-export const commitHash = '058224c622e8fbff2bd14a9b64d79a602e336aba';
+export const commitHash = '98facc3e829be81d954b2fd8674d98d09532e61f';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fat-zebra/sdk",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "",
   "main": "index.js",
   "scripts": {
@@ -30,7 +30,7 @@
     "@types/react-dom": "^19.1.9",
     "audit-ci": "^7.1.0",
     "dotenv": "^16.0.1",
-    "esbuild": "^0.25.10",
+    "esbuild": "^0.28.1",
     "husky": "^9.1.7",
     "jest": "^30.2.0",
     "jest-environment-jsdom": "^30.2.0",
@@ -49,6 +49,7 @@
   "overrides": {
     "test-exclude": "^7.0.1",
     "minimatch": "^10.2.2",
+    "form-data": "^4.0.6",
     "jest-util": {
       "picomatch": "^4.0.4"
     },