@fat-zebra/sdk 2.1.2-beta.1 → 2.1.3-beta.1

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to the Fat Zebra JS SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.2] - 2026-06-17
+
+### Fixed
+
+- Fixed a bug where the 3DS device data collection step could hang indefinitely due to an unexpected Cybersource payload format
+
 ## [2.1.0] - 2026-06-03
 
 > **Upgrade recommended.** This release fixes a critical issue where the React SDK could silently fall back to the legacy 3DS API, which is being decommissioned. Merchants should upgrade to avoid potential production failures.

package/dist/three_d_secure/utility/three_d_secure_challenge_window.d.ts

@@ -4,6 +4,7 @@ type ShowChallengeIframeProps = {
     accessToken: string;
     cardToken: string;
     challengeWindowSize?: ChallengeWindowSize;
+    containerSelector?: string;
 };
 declare class ThreeDSecureChallengeWindow {
     static readonly displayName = "ThreeDSecureChallengeWindow";
@@ -14,7 +15,7 @@ declare class ThreeDSecureChallengeWindow {
     private static windowSizeToDims;
     private static ensureOverlay;
     static hide(): void;
-    static showChallengeIframe({ stepUpUrl, accessToken, cardToken, challengeWindowSize, }: ShowChallengeIframeProps): void;
+    static showChallengeIframe({ stepUpUrl, accessToken, cardToken, challengeWindowSize, containerSelector, }: ShowChallengeIframeProps): void;
     private static reportChallengeIframeLoaded;
     private static reportChallengeIframeError;
 }

package/dist/three_d_secure/utility/three_d_secure_challenge_window.js

@@ -25,16 +25,25 @@ class ThreeDSecureChallengeWindow {
                 return { width: 500, height: 600 };
         }
     }
-    static ensureOverlay() {
+    static ensureOverlay(containerSelector) {
         let overlay = document.getElementById(ThreeDSecureChallengeWindow.OVERLAY_ID);
         let content = document.getElementById(ThreeDSecureChallengeWindow.CONTENT_ID);
         let frameWrap = document.getElementById(ThreeDSecureChallengeWindow.FRAME_WRAP_ID);
         if (overlay && content && frameWrap)
             return { overlay, content, frameWrap };
+        const container = containerSelector
+            ? document.querySelector(containerSelector)
+            : null;
+        if (container) {
+            // Ensure the container establishes a positioning context
+            if (getComputedStyle(container).position === "static") {
+                container.style.position = "relative";
+            }
+        }
         overlay = document.createElement("div");
         overlay.id = ThreeDSecureChallengeWindow.OVERLAY_ID;
         Object.assign(overlay.style, {
-            position: "fixed",
+            position: container ? "absolute" : "fixed",
             inset: "0",
             background: "rgba(0,0,0,0.6)",
             display: "none",
@@ -73,7 +82,7 @@ class ThreeDSecureChallengeWindow {
         });
         content.appendChild(frameWrap);
         overlay.appendChild(content);
-        document.body.appendChild(overlay);
+        (container !== null && container !== void 0 ? container : document.body).appendChild(overlay);
         return { overlay, content, frameWrap };
     }
     static hide() {
@@ -84,8 +93,8 @@ class ThreeDSecureChallengeWindow {
         if (frameWrap)
             frameWrap.innerHTML = "";
     }
-    static showChallengeIframe({ stepUpUrl, accessToken, cardToken, challengeWindowSize, }) {
-        const { overlay, content, frameWrap } = ThreeDSecureChallengeWindow.ensureOverlay();
+    static showChallengeIframe({ stepUpUrl, accessToken, cardToken, challengeWindowSize, containerSelector, }) {
+        const { overlay, content, frameWrap } = ThreeDSecureChallengeWindow.ensureOverlay(containerSelector);
         const dims = ThreeDSecureChallengeWindow.windowSizeToDims(challengeWindowSize);
         // Reset any previous sizing
         Object.assign(overlay.style, {
@@ -190,6 +199,7 @@ __decorate([
                     card_token: params.cardToken,
                     challenge_window_size: params.challengeWindowSize,
                     step_up_url: params.stepUpUrl,
+                    container_selector: params.containerSelector,
                 },
             ];
         },

package/dist/version.js

@@ -1,6 +1,6 @@
-/*! fatzebra-sdk-commit: 1b09b7f09dc61eb5ac900a9ae3604f704a7befcb */
+/*! fatzebra-sdk-commit: 3353d28c822e8215f058488ab099bf1456d8c210 */
 export const version = '1.5.9';
 // Placeholder replaced at build time by .github/scripts/stamp-version.js with the
 // deployed commit hash (`git rev-parse HEAD`). Stays as the placeholder for builds
 // that don't run the stamp step (e.g. local/package builds).
-export const commitHash = '1b09b7f09dc61eb5ac900a9ae3604f704a7befcb';
+export const commitHash = '3353d28c822e8215f058488ab099bf1456d8c210';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fat-zebra/sdk",
-  "version": "2.1.2-beta.1",
+  "version": "2.1.3-beta.1",
   "description": "",
   "main": "index.js",
   "scripts": {