@neofaceid/web-sdk 1.4.2 → 1.6.1

package/dist/neoface-id-sdk.es.js

@@ -1118,6 +1118,7 @@ var ErrorType = /* @__PURE__ */ ((ErrorType2) => {
   ErrorType2["PERSON_NOT_FOUND"] = "PersonNotFoundError";
   ErrorType2["INITIALIZATION_ERROR"] = "InitializationError";
   ErrorType2["CAMERA_ERROR"] = "CameraError";
+  ErrorType2["NO_CAMERA"] = "NoCameraError";
   ErrorType2["CAPTURE_ERROR"] = "CaptureError";
   ErrorType2["NOT_FOUND"] = "NotFoundError";
   ErrorType2["UNKNOWN"] = "UnknownError";
@@ -1528,7 +1529,7 @@ const recognizeBiometric = async (image, applicationToken, livenessCheck = true,
     const data = await response.json();
     return {
       success: data.success,
-      personId: data.person_id,
+      // personId is intentionally NOT returned for security reasons
       confidenceScore: data.confidence_score,
       accessToken: data.access_token,
       payload: data.payload
@@ -1592,7 +1593,8 @@ const simpleIdentification = async (documentType, documentNumber, applicationTok
     throw new NeoFaceError("Unknown error occurred", ErrorType.NETWORK_ERROR);
   }
 };
-const recognizeByPurpose = async (image, applicationToken, purpose, confidenceThreshold = 0.8) => {
+const recognizeByPurpose = async (image, applicationToken, purpose, confidenceThreshold = 0.8, signature, sessionData) => {
+  var _a2;
   ensureSecureContext();
   const controller = createTimeoutController();
   const compressedImage = await compressImage(image);
@@ -1606,18 +1608,22 @@ const recognizeByPurpose = async (image, applicationToken, purpose, confidenceTh
     reader.readAsDataURL(compressedImage);
   });
   try {
+    const requestBody = {
+      biometric_data: base64Image,
+      type_of_identification: "FACE",
+      purpose,
+      confidence_threshold: confidenceThreshold
+    };
+    if (signature) {
+      requestBody.signature = signature;
+    }
     const response = await fetch(`${API_BASE_URL}/api/v1/external/recognition/purpose/`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         "X-App-Token": applicationToken
       },
-      body: JSON.stringify({
-        biometric_data: base64Image,
-        type_of_identification: "FACE",
-        purpose,
-        confidence_threshold: confidenceThreshold
-      }),
+      body: JSON.stringify(requestBody),
       signal: controller.signal
     });
     if (!response.ok) {
@@ -1629,10 +1635,16 @@ const recognizeByPurpose = async (image, applicationToken, purpose, confidenceTh
     const data = await response.json();
     return {
       success: data.success,
-      personId: data.person_id,
+      personName: data.person_name || ((_a2 = data.person) == null ? void 0 : _a2.name),
+      email: data.email || (sessionData == null ? void 0 : sessionData.email),
+      cpf: data.cpf || (sessionData == null ? void 0 : sessionData.cpf),
       confidenceScore: data.confidence_score,
       accessToken: data.access_token,
-      payload: data.payload
+      payload: data.payload,
+      // Return signature and sessionId for external integrations
+      signature,
+      sessionId: sessionData == null ? void 0 : sessionData.sessionId
+      // Note: personId is intentionally NOT returned for security reasons
     };
   } catch (error) {
     if (error instanceof Error) {
@@ -1915,6 +1927,79 @@ const identifyPerson = async (image, applicationToken) => {
     throw new NeoFaceError("Unknown error occurred", ErrorType.NETWORK_ERROR);
   }
 };
+const registerBiometric = async (personId, faceImage, applicationToken) => {
+  ensureSecureContext();
+  if (!personId) {
+    throw new NeoFaceError("Person ID is required", ErrorType.VALIDATION_ERROR);
+  }
+  if (!faceImage) {
+    throw new NeoFaceError("Face image is required", ErrorType.VALIDATION_ERROR);
+  }
+  const controller = createTimeoutController();
+  const compressedImage = await compressImage(faceImage);
+  const base64Image = await new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onload = () => {
+      const result = reader.result;
+      resolve(result.split(",")[1]);
+    };
+    reader.onerror = reject;
+    reader.readAsDataURL(compressedImage);
+  });
+  try {
+    const response = await fetch(`${API_BASE_URL}/api/v1/identity-data/`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-App-Token": applicationToken
+      },
+      body: JSON.stringify({
+        person: personId,
+        type_of_identification: "FACE",
+        biometric_data: base64Image
+      }),
+      signal: controller.signal
+    });
+    if (!response.ok) {
+      if (response.status === 401 || response.status === 403) {
+        throw new NeoFaceError("Invalid or expired application token, or insufficient permissions", ErrorType.INVALID_TOKEN);
+      }
+      if (response.status === 400) {
+        try {
+          const errorData = await response.json();
+          const errorMessage = errorData.message || errorData.error || "Invalid biometric data";
+          throw new NeoFaceError(errorMessage, ErrorType.VALIDATION_ERROR);
+        } catch (parseError) {
+          if (parseError instanceof NeoFaceError) {
+            throw parseError;
+          }
+          throw new NeoFaceError("Invalid biometric data", ErrorType.VALIDATION_ERROR);
+        }
+      }
+      throw new NeoFaceError(`Server returned status ${response.status}`, ErrorType.NETWORK);
+    }
+    const data = await response.json();
+    return {
+      success: true,
+      message: "Biometric data registered successfully",
+      identity_data_id: data.id,
+      type_of_identification: data.type_of_identification,
+      have_biometric_data: data.have_biometric_data,
+      created_at: data.created_at
+    };
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.name === "AbortError") {
+        throw new NeoFaceError("Request timed out", ErrorType.NETWORK);
+      }
+      if (error instanceof NeoFaceError) {
+        throw error;
+      }
+      throw new NeoFaceError(error.message, ErrorType.NETWORK);
+    }
+    throw new NeoFaceError("Unknown error occurred", ErrorType.NETWORK_ERROR);
+  }
+};
 const modalReducer$1 = (state, action) => {
   switch (action.type) {
     case "PERMISSION_GRANTED":
@@ -4669,6 +4754,116 @@ class EmailPasswordModal {
 }
 const MAX_ATTEMPTS = 3;
 const RETRY_DELAY = 500;
+async function captureFaceSilently() {
+  return new Promise((resolve, reject) => {
+    const video = document.createElement("video");
+    video.style.position = "fixed";
+    video.style.top = "-9999px";
+    video.style.left = "-9999px";
+    video.style.width = "1px";
+    video.style.height = "1px";
+    video.style.opacity = "0";
+    video.setAttribute("autoplay", "");
+    video.setAttribute("muted", "");
+    video.setAttribute("playsinline", "");
+    const canvas = document.createElement("canvas");
+    canvas.style.display = "none";
+    let stream = null;
+    let faceDetectionAttempts = 0;
+    const MAX_FACE_DETECTION_ATTEMPTS = 10;
+    const cleanup = () => {
+      if (stream) {
+        stream.getTracks().forEach((track) => track.stop());
+      }
+      if (video.parentElement) {
+        video.parentElement.removeChild(video);
+      }
+      if (canvas.parentElement) {
+        canvas.parentElement.removeChild(canvas);
+      }
+    };
+    document.body.appendChild(video);
+    document.body.appendChild(canvas);
+    navigator.mediaDevices.getUserMedia({
+      video: {
+        width: { ideal: 640 },
+        height: { ideal: 480 },
+        facingMode: "user"
+      },
+      audio: false
+    }).then((mediaStream) => {
+      stream = mediaStream;
+      video.srcObject = stream;
+      video.play();
+      const tryCapture = () => {
+        if (!video.videoWidth || !video.videoHeight) {
+          if (faceDetectionAttempts < MAX_FACE_DETECTION_ATTEMPTS) {
+            faceDetectionAttempts++;
+            setTimeout(tryCapture, 100);
+            return;
+          }
+          cleanup();
+          reject(new NeoFaceError("Câmera não está pronta", ErrorType.CAMERA_ERROR));
+          return;
+        }
+        canvas.width = video.videoWidth;
+        canvas.height = video.videoHeight;
+        const ctx = canvas.getContext("2d");
+        if (!ctx) {
+          cleanup();
+          reject(new Error("Failed to get canvas context"));
+          return;
+        }
+        const detectFace2 = async () => {
+          try {
+            const detection = await faceapi.detectSingleFace(
+              video,
+              new faceapi.TinyFaceDetectorOptions({ inputSize: 160, scoreThreshold: 0.4 })
+            );
+            return !!detection;
+          } catch {
+            return false;
+          }
+        };
+        detectFace2().then((hasFace) => {
+          if (!hasFace && faceDetectionAttempts < MAX_FACE_DETECTION_ATTEMPTS) {
+            faceDetectionAttempts++;
+            setTimeout(tryCapture, 200);
+            return;
+          }
+          ctx.drawImage(video, 0, 0, canvas.width, canvas.height);
+          canvas.toBlob(
+            (blob) => {
+              cleanup();
+              if (blob) {
+                resolve(blob);
+              } else {
+                reject(new Error("Failed to capture image"));
+              }
+            },
+            "image/jpeg",
+            0.85
+          );
+        });
+      };
+      video.onloadedmetadata = () => {
+        setTimeout(tryCapture, 800);
+      };
+      video.onerror = () => {
+        cleanup();
+        reject(new NeoFaceError("Erro ao acessar câmera", ErrorType.CAMERA_ERROR));
+      };
+    }).catch((error) => {
+      cleanup();
+      reject(
+        new NeoFaceError(
+          "Não foi possível acessar a câmera: " + error.message,
+          ErrorType.CAMERA_ERROR
+        )
+      );
+    });
+  });
+}
 async function detectFaceContinuously(video, minDetectionTime = 3e3, detectionInterval = 200) {
   return new Promise((resolve) => {
     let faceDetectedCount = 0;
@@ -4891,6 +5086,11 @@ async function executeBiometricLoginFlow(options) {
     tryLogin();
   }, 300);
 }
+const biometricLoginFlow = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+  __proto__: null,
+  captureFaceSilently,
+  executeBiometricLoginFlow
+}, Symbol.toStringTag, { value: "Module" }));
 async function startFaceLogin(options) {
   try {
     const isValidToken = await validateToken(options.applicationToken);
@@ -5218,8 +5418,8 @@ const biometricDetection = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.
   initializeBiometricDetection,
   isAdvancedDetectionAvailable
 }, Symbol.toStringTag, { value: "Module" }));
-const VERSION = "1.4.2";
-const RELEASE_DATE = "2025-11-23";
+const VERSION = "1.6.1";
+const RELEASE_DATE = "2025-12-01";
 class OnboardingCaptureModal {
   constructor(options) {
     __publicField(this, "overlay", null);
@@ -5443,6 +5643,284 @@ const startOnboarding = async (options) => {
     onError(new NeoFaceError(message, ErrorType.UNKNOWN));
   }
 };
+class NeoFaceID {
+  /**
+   * Creates a new NeoFaceID instance
+   * @param config Configuration object
+   * @throws NeoFaceError if signature format is invalid
+   */
+  constructor(config) {
+    __publicField(this, "appToken");
+    __publicField(this, "baseUrl");
+    __publicField(this, "signature");
+    __publicField(this, "sessionData");
+    var _a2;
+    this.appToken = config.appToken;
+    this.baseUrl = config.baseUrl || (((_a2 = { "BASE_URL": "/", "MODE": "production", "DEV": false, "PROD": true, "SSR": false }) == null ? void 0 : _a2.VITE_API_BASE_URL) || "http://localhost:8000");
+    this.signature = config.signature;
+    this.sessionData = config.sessionData;
+    if (this.signature && !this.validateSignatureFormat(this.signature)) {
+      throw new NeoFaceError(
+        "Invalid signature format. Expected HMAC-SHA256 hex string (minimum 64 characters)",
+        ErrorType.VALIDATION_ERROR
+      );
+    }
+    if (this.sessionData) {
+      if (!this.sessionData.email || !this.sessionData.cpf || !this.sessionData.sessionId) {
+        throw new NeoFaceError(
+          "Session data must include email, cpf, and sessionId",
+          ErrorType.VALIDATION_ERROR
+        );
+      }
+    }
+  }
+  /**
+   * Validates the format of a signature
+   * HMAC-SHA256 produces a 64-character hexadecimal string
+   * @param signature The signature to validate
+   * @returns true if valid, false otherwise
+   */
+  validateSignatureFormat(signature) {
+    return /^[a-f0-9]{64,}$/i.test(signature);
+  }
+  /**
+   * Captures multiple face frames for biometric recognition
+   * @param options Capture options
+   * @returns Promise that resolves to an array of image blobs
+   * @throws NeoFaceError if capture fails
+   */
+  async captureFaceFrames(options) {
+    const { numFrames, livenessCheck } = options;
+    if (numFrames < 1 || numFrames > 10) {
+      throw new NeoFaceError(
+        "Number of frames must be between 1 and 10",
+        ErrorType.VALIDATION_ERROR
+      );
+    }
+    const frames = [];
+    try {
+      const { captureFaceSilently: captureFaceSilently2 } = await Promise.resolve().then(() => biometricLoginFlow);
+      for (let i = 0; i < numFrames; i++) {
+        const frame = await captureFaceSilently2();
+        frames.push(frame);
+        if (livenessCheck && i < numFrames - 1) {
+          await new Promise((resolve) => setTimeout(resolve, 300));
+        }
+      }
+      return frames;
+    } catch (error) {
+      if (error instanceof NeoFaceError) {
+        throw error;
+      }
+      throw new NeoFaceError(
+        `Failed to capture face frames: ${error instanceof Error ? error.message : "Unknown error"}`,
+        ErrorType.CAPTURE_ERROR
+      );
+    }
+  }
+  /**
+   * Performs login recognition using biometric data
+   * 
+   * This method is designed for external integrations that require
+   * signature validation and session management.
+   * 
+   * @param options Recognition options
+   * @returns Promise that resolves to recognition result
+   * @throws NeoFaceError if recognition fails
+   * 
+   * @example
+   * ```typescript
+   * const result = await sdk.loginRecognition({
+   *   biometricData: await sdk.captureFaceFrames({
+   *     numFrames: 5,
+   *     livenessCheck: true
+   *   }),
+   *   typeOfIdentification: 'FACE',
+   *   purpose: 'LOGIN',
+   *   confidenceThreshold: 0.8
+   * });
+   * 
+   * // Result includes signature and sessionId for callback validation
+   * console.log(result.signature, result.sessionId);
+   * ```
+   */
+  async loginRecognition(options) {
+    const {
+      biometricData,
+      typeOfIdentification,
+      purpose,
+      confidenceThreshold = 0.8
+    } = options;
+    const imageBlobs = Array.isArray(biometricData) ? biometricData : [biometricData];
+    if (imageBlobs.length === 0) {
+      throw new NeoFaceError(
+        "At least one biometric data frame is required",
+        ErrorType.VALIDATION_ERROR
+      );
+    }
+    const primaryImage = imageBlobs[0];
+    try {
+      const result = await recognizeByPurpose(
+        primaryImage,
+        this.appToken,
+        purpose,
+        confidenceThreshold,
+        this.signature,
+        this.sessionData
+      );
+      if (!result.success) {
+        throw new NeoFaceError(
+          "Recognition failed",
+          ErrorType.RECOGNITION_FAILED
+        );
+      }
+      if (!result.personName || !result.email || !result.cpf) {
+        throw new NeoFaceError(
+          "Incomplete recognition result: missing personName, email, or cpf",
+          ErrorType.RECOGNITION_FAILED
+        );
+      }
+      return {
+        success: true,
+        personName: result.personName,
+        email: result.email,
+        cpf: result.cpf,
+        signature: result.signature,
+        sessionId: result.sessionId,
+        confidenceScore: result.confidenceScore,
+        accessToken: result.accessToken
+      };
+    } catch (error) {
+      if (error instanceof NeoFaceError) {
+        throw error;
+      }
+      throw new NeoFaceError(
+        `Login recognition failed: ${error instanceof Error ? error.message : "Unknown error"}`,
+        ErrorType.RECOGNITION_FAILED
+      );
+    }
+  }
+}
+const PHOTO_INSTRUCTIONS = [
+  "Olhe diretamente para a câmera",
+  "Vire levemente a cabeça para a esquerda",
+  "Vire levemente a cabeça para a direita",
+  "Mostre o polegar para cima (👍) e olhe para a câmera"
+];
+const TOTAL_PHOTOS = 4;
+const authorizeOperation = async (applicationToken, cpf, options) => {
+  if (!applicationToken) {
+    throw new NeoFaceError("Application token is required", ErrorType.VALIDATION_ERROR);
+  }
+  if (!cpf) {
+    throw new NeoFaceError("CPF is required", ErrorType.VALIDATION_ERROR);
+  }
+  const cpfClean = cpf.replace(/\D/g, "");
+  if (cpfClean.length !== 11) {
+    throw new NeoFaceError("Invalid CPF format", ErrorType.VALIDATION_ERROR);
+  }
+  const capturedPhotos = [];
+  const captureDelay = (options == null ? void 0 : options.captureDelay) || 2e3;
+  try {
+    if (!navigator.mediaDevices || !navigator.mediaDevices.getUserMedia) {
+      throw new NeoFaceError("Camera not available", ErrorType.NO_CAMERA);
+    }
+    const stream = await navigator.mediaDevices.getUserMedia({
+      video: {
+        facingMode: "user",
+        width: { ideal: 1280 },
+        height: { ideal: 720 }
+      }
+    });
+    const video = document.createElement("video");
+    video.srcObject = stream;
+    video.autoplay = true;
+    video.playsInline = true;
+    await new Promise((resolve) => {
+      video.onloadedmetadata = () => {
+        video.play();
+        resolve();
+      };
+    });
+    const canvas = document.createElement("canvas");
+    canvas.width = video.videoWidth;
+    canvas.height = video.videoHeight;
+    const ctx = canvas.getContext("2d");
+    if (!ctx) {
+      throw new NeoFaceError("Failed to get canvas context", ErrorType.CAPTURE_ERROR);
+    }
+    for (let i = 0; i < TOTAL_PHOTOS; i++) {
+      const instruction = PHOTO_INSTRUCTIONS[i];
+      if (options == null ? void 0 : options.onProgress) {
+        options.onProgress(i + 1, TOTAL_PHOTOS, instruction);
+      }
+      if (i > 0) {
+        await new Promise((resolve) => setTimeout(resolve, captureDelay));
+      }
+      ctx.drawImage(video, 0, 0, canvas.width, canvas.height);
+      const blob = await new Promise((resolve, reject) => {
+        canvas.toBlob(
+          (blob2) => {
+            if (blob2) {
+              resolve(blob2);
+            } else {
+              reject(new Error("Failed to capture photo"));
+            }
+          },
+          "image/jpeg",
+          0.9
+        );
+      });
+      capturedPhotos.push(blob);
+      if (options == null ? void 0 : options.onPhotoTaken) {
+        options.onPhotoTaken(i + 1, blob);
+      }
+    }
+    stream.getTracks().forEach((track) => track.stop());
+    const lastPhoto = capturedPhotos[TOTAL_PHOTOS - 1];
+    const sessionData = {
+      cpf: cpfClean,
+      email: "",
+      // Not required for authorization
+      sessionId: `auth_${Date.now()}_${Math.random().toString(36).substring(7)}`
+    };
+    const recognitionResult = await recognizeByPurpose(
+      lastPhoto,
+      applicationToken,
+      "AUTHORIZATION",
+      0.8,
+      // Confidence threshold
+      void 0,
+      // No signature for now
+      sessionData
+    );
+    if (!recognitionResult.success) {
+      throw new NeoFaceError(
+        "Authorization failed: Person not recognized",
+        ErrorType.RECOGNITION_FAILED
+      );
+    }
+    return {
+      success: true,
+      authorizationHash: sessionData.sessionId,
+      // TEMPORARY: Using sessionId as hash
+      name: recognitionResult.personName,
+      birthDate: void 0,
+      // Should come from backend
+      cpf: recognitionResult.cpf || cpfClean,
+      confidenceScore: recognitionResult.confidenceScore,
+      message: "Authorization successful"
+    };
+  } catch (error) {
+    if (error instanceof NeoFaceError) {
+      throw error;
+    }
+    if (error instanceof Error) {
+      throw new NeoFaceError(error.message, ErrorType.CAPTURE_ERROR);
+    }
+    throw new NeoFaceError("Unknown error during authorization", ErrorType.UNKNOWN);
+  }
+};
 function start(applicationToken, callbacks) {
   const container = document.createElement("div");
   container.id = "neoface-modal-container";
@@ -5513,8 +5991,10 @@ export {
   FaceCaptureModal,
   FallbackPrompt,
   NeoFaceError,
+  NeoFaceID,
   RELEASE_DATE,
   VERSION,
+  authorizeOperation,
   biometricLogin,
   biometricLoginWithFallback,
   completeOnboarding,
@@ -5527,6 +6007,7 @@ export {
   recognize,
   recognizeBiometric,
   recognizeByPurpose,
+  registerBiometric,
   registerPersonWithBiometric,
   registerPersonWithoutFace,
   simpleIdentification,