@finteqhub/sdk-js 0.14.0 → 0.16.0-beta.1

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 Notable changes to `@finteqhub/sdk-js`. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## 0.16.0
+
+### Changed
+
+- The SDK no longer sends the `x-merchant-id` header (previously on every request) or the `x-project-id` header (previously on `submit-form` and `operations` requests, taken from the session response). The constructor signature is unchanged: `merchantId` is still accepted, but it is no longer validated (the constructor does not throw when it is empty or missing) and is not transmitted. This release requires a backend that no longer expects these headers; against older backends `submit-form` and `sessions` requests are rejected with 400.
+
+## 0.15.0
+
+### Added
+
+- Form submissions include `session.device.browser.clientHints` when `navigator.userAgentData` is available, for both regular and secure endpoints. The SDK forwards native browser keys and values, including the high-entropy device model, for backend device-brand detection; it does not send a device brand itself.
+- If high-entropy values are unavailable or rejected, the SDK sends the available low-entropy `brands`, `mobile` and `platform` values. Browsers without the API omit `clientHints` entirely. The public SDK API is unchanged.
+
 ## 0.14.0
 
 ### Breaking changes

package/README.md

@@ -6,7 +6,9 @@ Use `new FinteqHubProcessing(apiUrl: string, fingerprintVisitorId: string, merch
 const processing = new FinteqHubProcessing('api-url', 'fingerprint-visitor-id', 'merchant-id', 'session-id');
 ```
 
-The constructor validates its arguments and throws a `TypeError` when `apiUrl`, `fingerprintVisitorId`, `merchantId` or `sessionId` is missing, empty or not a string, when `isSecure` is not a boolean, or when `retryOptions` is malformed (see [Retries and error diagnostics](#retries-and-error-diagnostics)).
+The constructor validates its arguments and throws a `TypeError` when `apiUrl`, `fingerprintVisitorId` or `sessionId` is missing, empty or not a string, when `isSecure` is not a boolean, or when `retryOptions` is malformed (see [Retries and error diagnostics](#retries-and-error-diagnostics)).
+
+`merchantId` is accepted for compatibility but is neither validated nor sent to the API since 0.16.0.
 
 ## Retries and error diagnostics
 

package/dist/src/processing.js

@@ -43,7 +43,6 @@ export class FinteqHubProcessing {
                     method: "GET",
                     headers: {
                         "Content-Type": "application/json;charset=UTF-8",
-                        "x-merchant-id": this.merchantId,
                         "x-request-id": uuid(),
                         [SDK_HEADER_NAME]: SDK_HEADER_VALUE,
                     },
@@ -60,7 +59,7 @@ export class FinteqHubProcessing {
         return new Promise((resolve, reject) => __awaiter(this, void 0, void 0, function* () {
             try {
                 const url = this.isSecure ? `${this.apiUrl}/v1/secure/transactions/submit-form` : `${this.apiUrl}/v1/transactions/submit-form`;
-                const result = yield this.sendPost(url, Object.assign({ session: Object.assign({ fingerprint: this.fingerprintVisitorId }, getDeviceData()) }, data));
+                const result = yield this.sendPost(url, Object.assign({ session: Object.assign({ fingerprint: this.fingerprintVisitorId }, (yield getDeviceData())) }, data));
                 const operationUrl = this.isSecure ? `${this.apiUrl}/v1/secure/operations/${result.operationId}` : `${this.apiUrl}/v1/operations/${result.operationId}`;
                 this.processOperation(operationUrl, resolve, reject);
             }
@@ -108,11 +107,9 @@ export class FinteqHubProcessing {
             method: "POST",
             headers: {
                 "Content-Type": "application/json;charset=UTF-8",
-                "x-merchant-id": this.merchantId,
                 "x-request-id": uuid(),
                 "x-fingerprint": this.fingerprintVisitorId,
                 "x-session-id": this.sessionId,
-                "x-project-id": this.projectId,
                 [SDK_HEADER_NAME]: SDK_HEADER_VALUE,
             },
             body: JSON.stringify(data),

package/dist/src/utils.d.ts

@@ -19,13 +19,30 @@ declare type ConstructorArguments = {
     retryOptions: RetryOptions;
 };
 export declare function validateArguments(args: ConstructorArguments): void;
-export declare function getDeviceData(): {
+/** Returns native browser hints, falling back to low entropy values if needed. */
+export declare function getClientHints(): Promise<{
+    architecture?: string;
+    bitness?: string;
+    brands?: {
+        brand: string;
+        version: string;
+    }[];
+    formFactors?: string[];
+    fullVersionList?: {
+        brand: string;
+        version: string;
+    }[];
+    mobile?: boolean;
+    model?: string;
+    platform?: string;
+    platformVersion?: string;
+    uaFullVersion?: string;
+    wow64?: boolean;
+}>;
+export declare function getDeviceData(): Promise<{
     device: {
         type: string;
         browser: {
-            platform: string;
-            acceptHeader: string;
-            userAgent: string;
             javaEnabled: boolean;
             javaScriptEnabled: boolean;
             language: string;
@@ -38,7 +55,29 @@ export declare function getDeviceData(): {
             windowInnerWidth: number;
             timeZoneOffset: number;
             timeZoneName: string;
+            clientHints?: {
+                architecture?: string;
+                bitness?: string;
+                brands?: {
+                    brand: string;
+                    version: string;
+                }[];
+                formFactors?: string[];
+                fullVersionList?: {
+                    brand: string;
+                    version: string;
+                }[];
+                mobile?: boolean;
+                model?: string;
+                platform?: string;
+                platformVersion?: string;
+                uaFullVersion?: string;
+                wow64?: boolean;
+            };
+            platform: string;
+            acceptHeader: string;
+            userAgent: string;
         };
     };
-};
+}>;
 export {};

package/dist/src/utils.js

@@ -1,3 +1,12 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 export const DeviceType = {
     Unknown: "unknown",
     Computer: "computer",
@@ -13,7 +22,7 @@ export function uuid() {
         seed += performance.now();
     }
     return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, function (c) {
-        const random = (seed + Math.random() * 16) % 16 | 0;
+        const random = ((seed + Math.random() * 16) % 16) | 0;
         seed = Math.floor(seed / 16);
         return (c === "x" ? random : random & (0x3 | 0x8)).toString(16);
     });
@@ -40,7 +49,7 @@ export function getDeviceType() {
     }
     return DeviceType.Unknown;
 }
-const REQUIRED_STRINGS = ["apiUrl", "fingerprintVisitorId", "merchantId", "sessionId"];
+const REQUIRED_STRINGS = ["apiUrl", "fingerprintVisitorId", "sessionId"];
 export function validateArguments(args) {
     for (const key of REQUIRED_STRINGS) {
         if (typeof args[key] !== "string" || args[key] === "") {
@@ -62,28 +71,45 @@ export function validateArguments(args) {
         throw new TypeError("sdk-js: retryOptions.retryStatusCode must be a function");
     }
 }
+const HIGH_ENTROPY_HINTS = [
+    "architecture",
+    "bitness",
+    "formFactors",
+    "fullVersionList",
+    "model",
+    "platformVersion",
+    "uaFullVersion",
+    "wow64",
+];
+function userAgentData() {
+    return navigator.userAgentData;
+}
+/** Returns native browser hints, falling back to low entropy values if needed. */
+export function getClientHints() {
+    var _a, _b;
+    return __awaiter(this, void 0, void 0, function* () {
+        const uaData = userAgentData();
+        if (!uaData) {
+            return {};
+        }
+        const { brands, mobile, platform } = uaData;
+        try {
+            return (_b = (yield ((_a = uaData.getHighEntropyValues) === null || _a === void 0 ? void 0 : _a.call(uaData, HIGH_ENTROPY_HINTS)))) !== null && _b !== void 0 ? _b : { brands, mobile, platform };
+        }
+        catch (_c) {
+            return { brands, mobile, platform };
+        }
+    });
+}
 export function getDeviceData() {
     var _a, _b, _c;
-    return {
-        device: {
-            type: getDeviceType(),
-            browser: {
-                platform: (_c = (_b = (_a = navigator.userAgentData) === null || _a === void 0 ? void 0 : _a.platform) !== null && _b !== void 0 ? _b : navigator.platform) !== null && _c !== void 0 ? _c : "unknown",
-                acceptHeader: "application/json",
-                userAgent: navigator.userAgent,
-                javaEnabled: !!(navigator === null || navigator === void 0 ? void 0 : navigator.javaEnabled) && navigator.javaEnabled() ? navigator.javaEnabled() : false,
-                javaScriptEnabled: true,
-                language: navigator.language,
-                colorDepth: screen.colorDepth,
-                screenHeight: screen.height,
-                screenWidth: screen.width,
-                windowHeight: window.outerHeight,
-                windowWidth: window.outerWidth,
-                windowInnerHeight: window.innerHeight,
-                windowInnerWidth: window.innerWidth,
-                timeZoneOffset: new Date().getTimezoneOffset(),
-                timeZoneName: Intl.DateTimeFormat().resolvedOptions().timeZone,
+    return __awaiter(this, void 0, void 0, function* () {
+        const clientHints = yield getClientHints();
+        return {
+            device: {
+                type: getDeviceType(),
+                browser: Object.assign(Object.assign({ platform: (_c = (_b = (_a = userAgentData()) === null || _a === void 0 ? void 0 : _a.platform) !== null && _b !== void 0 ? _b : navigator.platform) !== null && _c !== void 0 ? _c : "unknown", acceptHeader: "application/json", userAgent: navigator.userAgent }, (Object.keys(clientHints).length > 0 ? { clientHints } : {})), { javaEnabled: !!(navigator === null || navigator === void 0 ? void 0 : navigator.javaEnabled) && navigator.javaEnabled() ? navigator.javaEnabled() : false, javaScriptEnabled: true, language: navigator.language, colorDepth: screen.colorDepth, screenHeight: screen.height, screenWidth: screen.width, windowHeight: window.outerHeight, windowWidth: window.outerWidth, windowInnerHeight: window.innerHeight, windowInnerWidth: window.innerWidth, timeZoneOffset: new Date().getTimezoneOffset(), timeZoneName: Intl.DateTimeFormat().resolvedOptions().timeZone }),
             },
-        },
-    };
+        };
+    });
 }

package/dist/src/version.d.ts

@@ -1,3 +1,3 @@
 export declare const SDK_HEADER_NAME = "x-pgw-sdk";
-export declare const SDK_VERSION = "0.14.0";
+export declare const SDK_VERSION = "0.16.0-beta.1";
 export declare const SDK_HEADER_VALUE: string;

package/dist/src/version.js

@@ -1,3 +1,3 @@
 export const SDK_HEADER_NAME = "x-pgw-sdk";
-export const SDK_VERSION = "0.14.0";
+export const SDK_VERSION = "0.16.0-beta.1";
 export const SDK_HEADER_VALUE = `sdk-js/${SDK_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finteqhub/sdk-js",
-  "version": "0.14.0",
+  "version": "0.16.0-beta.1",
   "description": "SDK for interacting with FinteqHub processing API",
   "main": "./dist/index.js",
   "typings": "./dist/index.d.ts",