@flonkid/kyc 1.8.0 → 1.8.2

package/dist/index.cjs

@@ -4,7 +4,7 @@ var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
 // src/shared/constants.ts
-var SDK_VERSION = "1.8.0";
+var SDK_VERSION = "1.8.2";
 var DEFAULT_WIDGET_URL = "https://widget.flonk.id";
 var DEFAULT_API_BASE = "https://api.flonk.id/v1";
 var WIDGET_EVENTS = {
@@ -90,21 +90,31 @@ async function fetchWithTimeout(url, init = {}, timeoutMs = DEFAULT_FETCH_TIMEOU
     clearTimeout(timer);
   }
 }
+var widgetTokenInflight = /* @__PURE__ */ new Map();
 async function fetchWidgetToken(pk, apiBase) {
-  const res = await fetchWithTimeout(`${apiBase}/public/widget-token`, {
-    headers: { "x-kyc-pk": pk },
-    credentials: "include"
-  });
-  if (!res.ok) {
-    let message = `Widget token request failed (${res.status})`;
-    try {
-      const b = await res.json();
-      message = b.error || b.message || message;
-    } catch {
+  const key = `${apiBase}|${pk}`;
+  const existing = widgetTokenInflight.get(key);
+  if (existing) return existing;
+  const promise = (async () => {
+    const res = await fetchWithTimeout(`${apiBase}/public/widget-token`, {
+      headers: { "x-kyc-pk": pk },
+      credentials: "include"
+    });
+    if (!res.ok) {
+      let message = `Widget token request failed (${res.status})`;
+      try {
+        const b = await res.json();
+        message = b.error || b.message || message;
+      } catch {
+      }
+      throw new Error(message);
     }
-    throw new Error(message);
-  }
-  return res.json();
+    return res.json();
+  })().finally(() => {
+    widgetTokenInflight.delete(key);
+  });
+  widgetTokenInflight.set(key, promise);
+  return promise;
 }
 var BRANDING_CACHE_TTL_MS = 5 * 60 * 1e3;
 var brandingCache = /* @__PURE__ */ new Map();
@@ -159,43 +169,35 @@ function validateServerUrl(url) {
     throw new Error(`Invalid serverUrl: ${url}`);
   }
 }
+var sessionCreateInflight = /* @__PURE__ */ new Map();
 async function fetchSessionFromServer(serverUrl, clientMetadata, requestHeaders) {
   validateServerUrl(serverUrl);
-  const res = await fetchWithTimeout(serverUrl, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", ...requestHeaders },
-    credentials: "include",
-    body: JSON.stringify({ clientMetadata })
-  });
-  if (!res.ok) {
-    let message = `Session request failed (${res.status})`;
-    try {
-      const body = await res.json();
-      if (body.error) message = body.error;
-      else if (body.message) message = body.message;
-    } catch {
-    }
-    throw new Error(message);
-  }
-  return res.json();
-}
-async function fetchPublicSession(apiBase, sessionId, embedToken) {
-  const res = await fetchWithTimeout(`${apiBase}/public/session/${sessionId}`, {
-    headers: {
-      "Content-Type": "application/json",
-      "Authorization": `Bearer ${embedToken}`
+  const key = `${serverUrl}|${JSON.stringify(clientMetadata ?? null)}`;
+  const existing = sessionCreateInflight.get(key);
+  if (existing) return existing;
+  const promise = (async () => {
+    const res = await fetchWithTimeout(serverUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...requestHeaders },
+      credentials: "include",
+      body: JSON.stringify({ clientMetadata })
+    });
+    if (!res.ok) {
+      let message = `Session request failed (${res.status})`;
+      try {
+        const body = await res.json();
+        if (body.error) message = body.error;
+        else if (body.message) message = body.message;
+      } catch {
+      }
+      throw new Error(message);
     }
+    return res.json();
+  })().finally(() => {
+    sessionCreateInflight.delete(key);
   });
-  if (!res.ok) {
-    let message = `Failed to fetch session (${res.status})`;
-    try {
-      const b = await res.json();
-      message = b.error || b.message || message;
-    } catch {
-    }
-    throw new Error(message);
-  }
-  return res.json();
+  sessionCreateInflight.set(key, promise);
+  return promise;
 }
 async function exchangeSessionForToken(apiBase, sessionId) {
   const res = await fetchWithTimeout(`${apiBase}/public/session/${sessionId}/token`, {
@@ -876,20 +878,7 @@ var FlonkKYC = class {
       const finalTokens = designTokens ?? await fetchDesignTokens(this.apiBase, { sessionId });
       const finalColor = primaryFrom(finalTokens);
       if (finalColor !== primaryColor) loader.updateColor(finalColor);
-      const sessionData = await fetchPublicSession(this.apiBase, sessionId, embedToken);
-      const session = {
-        id: sessionData.id,
-        allowManualUpload: sessionData.allowManualUpload ?? config.allowManualUpload ?? true,
-        clientMetadata: sessionData.clientMetadata || config.clientMetadata,
-        qrCodeUrl: sessionData.qrCodeUrl,
-        testMode: sessionData.testMode || false,
-        poaEnabled: sessionData.poaEnabled || false,
-        poaRequired: sessionData.poaRequired || false,
-        mlAutoCaptureEnabled: sessionData.mlAutoCaptureEnabled || false,
-        mlCropEnabled: sessionData.mlCropEnabled ?? true,
-        mlVerifyEnabled: sessionData.mlVerifyEnabled || false
-      };
-      return this.buildWidget(embedToken, session, config, loader, finalTokens);
+      return this.buildWidget(embedToken, sessionId, config, loader, finalTokens);
     } catch (err) {
       const msg = err.message || "Failed to create session";
       loader.showError(msg, config.lang);
@@ -903,32 +892,12 @@ var FlonkKYC = class {
   async initWithEmbedToken(config) {
     const pk = config.publishableKey;
     const designTokensPromise = pk ? fetchDesignTokens(this.apiBase, { pk }) : fetchDesignTokens(this.apiBase, { sessionId: config.sessionId });
-    const sessionPromise = fetchPublicSession(
-      this.apiBase,
-      config.sessionId,
-      config.embedToken
-    );
     const { loader, primaryColor } = await showLoaderWithEarlyColor(designTokensPromise, config.lang);
     try {
-      const [sessionData, designTokens] = await Promise.all([
-        sessionPromise,
-        designTokensPromise
-      ]);
+      const designTokens = await designTokensPromise;
       const finalColor = primaryFrom(designTokens);
       if (finalColor !== primaryColor) loader.updateColor(finalColor);
-      const session = {
-        id: sessionData.id,
-        allowManualUpload: sessionData.allowManualUpload ?? config.allowManualUpload ?? true,
-        clientMetadata: sessionData.clientMetadata || config.clientMetadata,
-        qrCodeUrl: sessionData.qrCodeUrl,
-        testMode: sessionData.testMode || false,
-        poaEnabled: sessionData.poaEnabled || false,
-        poaRequired: sessionData.poaRequired || false,
-        mlAutoCaptureEnabled: sessionData.mlAutoCaptureEnabled || false,
-        mlCropEnabled: sessionData.mlCropEnabled ?? true,
-        mlVerifyEnabled: sessionData.mlVerifyEnabled || false
-      };
-      return this.buildWidget(config.embedToken, session, config, loader, designTokens);
+      return this.buildWidget(config.embedToken, config.sessionId, config, loader, designTokens);
     } catch (err) {
       const msg = err.message || "Failed to initialize verification";
       loader.showError(msg, config.lang);
@@ -954,7 +923,7 @@ var FlonkKYC = class {
         exchangePromise,
         designTokensPromise
       ]);
-      return this.buildWidget(embedToken, session, config, loader, designTokens);
+      return this.buildWidget(embedToken, config.sessionId || session.id, config, loader, designTokens);
     } catch (err) {
       const msg = err.message || "Failed to initialize verification";
       loader.showError(msg, config.lang);
@@ -1001,27 +970,21 @@ var FlonkKYC = class {
     }
   }
   // ── Core widget builder ──────────────────────────────
-  buildWidget(token, session, config, loader, designTokens) {
+  buildWidget(token, sessionId, config, loader, designTokens) {
     const params = {
       mode: "embedded",
-      sessionId: config.sessionId || session.id,
-      token,
-      allowManualUpload: String(session.allowManualUpload !== false)
+      sessionId,
+      token
     };
-    if (session.testMode) params.testMode = "true";
-    if (session.poaEnabled) params.poaEnabled = "true";
-    if (session.poaRequired) params.poaRequired = "true";
-    if (session.mlAutoCaptureEnabled) params.mlAutoCaptureEnabled = "true";
-    if (session.mlCropEnabled !== false) params.mlCropEnabled = "true";
-    if (session.mlVerifyEnabled) params.mlVerifyEnabled = "true";
+    if (config.allowManualUpload !== void 0) {
+      params.allowManualUpload = String(config.allowManualUpload !== false);
+    }
     if (designTokens?.colors) {
       params.designTokens = JSON.stringify(designTokens);
     }
     if (config.embedToken) params.embedToken = config.embedToken;
-    if (session.qrCodeUrl) params.qrCodeUrl = session.qrCodeUrl;
-    const clientMetadata = session.clientMetadata || config.clientMetadata;
-    if (clientMetadata) {
-      params.clientMetadata = JSON.stringify(clientMetadata);
+    if (config.clientMetadata) {
+      params.clientMetadata = JSON.stringify(config.clientMetadata);
     }
     if (config.lang) params.lang = config.lang;
     if (config.overlayColor) params.overlayColor = config.overlayColor;