@ideem/zsm-client-sdk 2.6.3 → 2.7.1

package/CHANGELOG.md

@@ -11,7 +11,21 @@ and Universal MFA into a browser application.
 - None at this time.
 
 ----
-## Release 2.6.3 - January 6, 2026 [ NPM PACKAGE RELEASE ] **[ LATEST ]**
+
+## Release 2.7.1 - Mar 3, 2026 [ NPM PACKAGE RELEASE ] **[ LATEST ]**
+- Minor bug fixes and improvements
+- Added dynamic versioning headers
+- Updates to WASM code to remove Base64URL encoding and decoding steps for improved performance and reduced complexity
+- Updates to documentation
+
+## Release 2.7.0 - January 15, 2026 [ NPM PACKAGE RELEASE ] 
+- Minor bug fixes and improvements
+- Standardization of credential responses across all SDK platforms (browser, mobile, native)
+- Standardization of credential schema across all all UMFA workflows
+- Improved security by addition of new validation checks for webauthn attestation and assertion responses
+- Improvements to performance by removing now-unnecessary API trips during UMFA enrollment and authentication flows
+
+## Release 2.6.3 - January 6, 2026 [ NPM PACKAGE RELEASE ]
 - Minor alteration to event coordinator to support legacy versions of Safari (versions  14-18.4)
 
 ## Release 2.6.2 - December 19, 2025 [ NPM PACKAGE RELEASE ]

package/FIDO2ClientBase.js

@@ -85,7 +85,7 @@ class FIDO2ClientBase {
             if(userIdentifier == null 
                 || userIdentifier === '')     throw new Error(`[FIDO2Client] :: webauthnCreate :: A userIdentifier String is required! Received: ${userIdentifier}.`);
             
-            const createResult                = this.zsmAPI.webauthnCreate(userIdentifier); 
+            const createResult                = await this.zsmAPI.webauthnCreate(userIdentifier); 
             if(createResult instanceof Error) throw(`[FIDO2Client] :: webauthnCreate :: Unable to associate ${userIdentifier}'s identity with device profile.\nDetails:\n${createResult}`);
             return createResult;
         }catch(e) {
@@ -108,7 +108,7 @@ class FIDO2ClientBase {
             if(userIdentifier == null 
                 || userIdentifier === '')     throw new Error(`[FIDO2Client] :: webauthnGet :: A userIdentifier String is required! Received: ${userIdentifier}.`);
             let authCredential = await this.zsmAPI.webauthnGet(userIdentifier);
-            return authCredential.credential;
+            return authCredential?.credential??authCredential;
         }catch(e) {
             return new Error(e.message || e || '[FIDO2Client] :: webauthnGet :: An error occurred during credential retrieval.');
         }

package/RelyingPartyBase.js

@@ -52,6 +52,7 @@ class RelyingPartyBase {
         body = Object.assign({ customer_defined_identifier : this.customerDefinedIdentifier,  application_id : this.applicationId}, body, this.addlRelyingPartyBodyProps, tracePrimer(true));
         let fetchObj = {
             method,
+            // headers : Object.assign(this.xhrHeaders, ((!headers?.Authorization) ? {'Authorization': `Bearer ${this.apiKey}`} : {}), headers, {"X-SDK-Version": JSON.stringify(GLOBAL.ZSMVersions)}),
             headers : Object.assign(this.xhrHeaders, ((!headers?.Authorization) ? {'Authorization': `Bearer ${this.apiKey}`} : {}), headers),
             body    : JSON.stringify(body)
         };
@@ -114,6 +115,7 @@ class RelyingPartyBase {
      * @throws          {Error}                                     Throws an error if the request fails.
      */
     registrationFinish (credential) {
+        return credential;
         return  this.makePostRequest(`api/webauthn/registration/finish`, { credential })
                 .then(body => {
                     this.credentialID = credential.rawId;
@@ -153,6 +155,7 @@ class RelyingPartyBase {
      * @throws          {Error}                                     Throws an error if the request fails.
      */
     authenticationFinish (credential) {
+        return credential;
         return  this.makePostRequest("api/webauthn/authentication/finish", { credential })
                 .then(result => result)
                 .catch(error => Promise.reject(new Error(error)));
@@ -192,6 +195,7 @@ class RelyingPartyBase {
      * @throws          {Error}                                     Throws an error if the request fails.
      */
     registrationFinishAuthenticationStart (credential) {
+        return credential;
         return  this.makePostRequest(`api/webauthn/registration/finish-then-authentication-start`, { credential })
                 .then(result     => (this.credentialID = credential.rawId, result))
                 .then(credential => credential)

package/UMFAClientBase.js

@@ -99,7 +99,7 @@ class UMFAClientBase  {
             let userIsEnrolled                  = await this.checkEnrollment(userIdentifier);
             if(userIsEnrolled === false)        throw(`${userIdentifier} is not enrolled.`);
             let authCredential                  = await this.zsmAPI.webauthnPartialGet(userIdentifier);
-            return authCredential.credential;
+            return authCredential?.credential??authCredential;
         }catch(e) {
             return new Error(e.message || e || '[UMFAClient] :: authenticate :: An error occurred during authentication.');
         }