@ideem/zsm-client-sdk 2.8.0 → 2.8.1

package/CHANGELOG.md

@@ -12,7 +12,11 @@ and Universal MFA into a browser application.
 
 ----
 
-## Release 2.8.0 - April 15, 2026 [ NPM PACKAGE RELEASE ] **latest release**
+## Release 2.8.1 - Mat 8, 2026 [ NPM PACKAGE RELEASE ] **latest release**
+- Minor bug fixes and improvements
+- Alters Webauthn object to provide Passkeys+ support Android WebViews
+
+## Release 2.8.0 - April 15, 2026 [ NPM PACKAGE RELEASE ]
 - Migrates all Passkeys+ functionality into the Core package
 - "Zeroes out" the Passkeys+ Plug-In package (basically now throws a warning in the console explaining it is now unnecessary, and that it can be removed, along with instructions on how to do so.
 - Includes "wrapper" function stub for userIdentifier (encodeUserIdentifier.js) for future hashing operations.

package/PasskeysPlusClient.js

@@ -83,6 +83,11 @@ class PasskeysPlusClient {
         if(publicKey?.excludeCredentials && (!Array.isArray(publicKey?.excludeCredentials)
             || publicKey?.excludeCredentials?.length > 0 && !publicKey?.excludeCredentials[0].id))                      throw new Error(`[PK+ PasskeysPlus] :: pkpCreatePasskeyCredential :: Invalid credential ID in excludeCredentials! It must be an ArrayBuffer. Received: ${publicKey?.excludeCredentials[0]?.id}`);
 
+        publicKey.authenticatorSelection = {
+                ...publicKey.authenticatorSelection,
+                residentKey: "required",       // was "discouraged"
+                requireResidentKey: true,      // was false
+        }
         const pkpCredential = await this.passkeyAPI.create({ publicKey: {...publicKey, userVerification} });
 
         return pkpCredential;

package/WebAuthnClientBase.js

@@ -209,11 +209,9 @@ class WebAuthnClientBase {
         }
 
         let passkeySupported = false;                                                                                                                                                              // [J] Best-effort detection of platform authenticator support
-        try {
-            passkeySupported = !!(typeof window !== 'undefined' && window.PublicKeyCredential
-                                   && navigator?.credentials
-                                   && await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable());
-        } catch { /* unsupported environment */ }
+        // try {
+        passkeySupported = !!navigator?.credentials;
+        // } catch { /* unsupported environment */ }
 
         this.credentialID = localData['zsm_credential_id']??null;
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name"          : "@ideem/zsm-client-sdk",
-    "version"       : "2.8.0",
+    "version"       : "2.8.1",
     "description"   : "ZSM makes 2FA easy and invisible for everyone, all the time, using advanced cryptography like MPC to establish cryptographic proof of the origin of any transaction or login attempt, while eliminating opportunities for social engineering. ZSM has no reliance on specific hardware. Our cryptographic module has completed FIPS 140-3 NIST approved lab testing, is FIDO2-ready, and is on the Modules In Progress (MIP) list. Superior Usability. no opt-in, no codes, no downloads, no authenticator apps. Better Security.",
     "keywords"      : [ "ideem", "zsm", "zsm-client-sdk", "umfaclient", "fido2client", "library", "umfa", "fido", "fido2", "client", "javascript", "multifactor", "multi-factor", "webauthn", "authentication", "security", "cryptography", "mpc", "fips", "nist", "mip", "passkeys" ],
     "author"        : "Jason Jurusz <jj@useideem.com>",