@paykka/card-checkout-ui 0.21.0 → 0.22.0

package/dist/es/api/modules/apple-pay/index.js

@@ -1,7 +1,14 @@
 import { apiPrefix } from "../../../config.js";
 import { http } from "../../http.js";
-const getMerchantSession = async (options) => {
-  return http.post(`${apiPrefix}/apple-pay/create-session`, options);
+const getMerchantSession = async (params, options) => {
+  return http.post(
+    `${apiPrefix}/apple-pay/create-session`,
+    {
+      merchant_id: params.merchantId,
+      merchant_product_id: params.merchantProductId
+    },
+    options
+  );
 };
 export {
   getMerchantSession

package/dist/es/api/modules/checkout/map.js

@@ -69,6 +69,7 @@ const checkoutMap = (res = {}) => {
   return {
     country: res.country,
     merchantId: res.merchant_id,
+    merchantProductId: res.merchant_product_id,
     sessionId: res.session_id,
     clientKey: res.client_key,
     status: res.status,

package/dist/es/api/modules/get-browser-params.js

@@ -35,7 +35,7 @@ const getBaseBrowserParams = async (params = {}) => {
     terminal_type: terminalType,
     fraud_detection_id: fraudDetectionId,
     // 当前组件库版本（构建时由 define 注入）
-    app_version: "0.21.0"
+    app_version: "0.22.0"
   };
 };
 const getBrowserParams = async (params = {}) => {

package/dist/es/api/modules/risk/index.js

@@ -29,7 +29,8 @@ const reportUrls = async (params) => {
   return http.post("/pub/fraud-detection/report/urls", {
     client_key: params.clientKey,
     fraud_detection_mode: params.fraudDetectionMode,
-    data: params.data
+    data: params.data,
+    browser: params.browser
   });
 };
 export {

package/dist/es/components/ApplePay/index.js

@@ -370,7 +370,13 @@ const ApplePay = w((props) => {
       onValidate: async () => {
         var _a2;
         onEvent == null ? void 0 : onEvent(ApplePayEventType.APPLE_PAY_VALIDATE_MERCHANT);
-        const merchantSession = await getMerchantSession();
+        const checkout = session == null ? void 0 : session.checkout;
+        const merchantSession = await getMerchantSession({
+          // 仅 DROP_IN / COMPONENT 收银台需要传 merchantId，HOSTED 不传
+          merchantId: (checkout == null ? void 0 : checkout.sessionMode) === SessionMode.HOSTED ? void 0 : checkout == null ? void 0 : checkout.merchantId,
+          // 没有 merchantProductId 时用 sessionId 兜底
+          merchantProductId: (checkout == null ? void 0 : checkout.merchantProductId) || (checkout == null ? void 0 : checkout.sessionId)
+        });
         (_a2 = applePaySession.current) == null ? void 0 : _a2.completeMerchantValidation(merchantSession);
       },
       onAuthorized: async (event) => {

package/dist/es/core/logger.js

@@ -1,13 +1,19 @@
 var _a;
 import { origin2Env, DEV_ORIGIN, FAT_ORIGIN, SANDBOX_ORIGIN, HK_ORIGIN, EU_ORIGIN, loggerEnvInfoMap } from "./environment.js";
 import { STRIPE_RADAR_SCRIPT_ORIGIN, WORLDPAY_JSC_ORIGIN } from "../out/config.js";
+import { EnvEventType } from "../types/event.js";
 import "../utils/card-brand/brands.js";
+import { getFingerprint } from "../utils/system-info/finger-print.js";
 import "../utils/system-info/get-browser-info.js";
 import { parseUrl } from "../utils/location.js";
+import { encodeBase64, decodeBase64 } from "../utils/base64.js";
 import "../core.js";
 import "./context.js";
 import "../out/fraud-detection.js";
 const COMPONENT_PID = "71667dde4a0247c187c1c26bdc3aadcf";
+const LOGGER_TAG_PREFIX = "tr";
+const LOGGER_TAG_STORAGE_KEY = "paykka_buic";
+const LOGGER_TAG_TABLE = "BFOZkRHwuCJ8Gr1sThX5PpLb-MUIxjdn0oY3DilAtva7ySKzNmVQ6WE9_ef42gqc";
 const REPORT_ORIGINS = [
   DEV_ORIGIN,
   FAT_ORIGIN,
@@ -43,14 +49,25 @@ class PayKKaLogger {
     if (options.sid) {
       (_a2 = window.sessionStorage) == null ? void 0 : _a2.setItem("felogger_sid", options.sid);
     }
+    const tag = await this.getTag();
     (_b = window.JlFeLogger) == null ? void 0 : _b.init({
       pid: options.pid || COMPONENT_PID,
       env: loggerEnvInfo.env,
-      release: "0.21.0",
+      release: "0.22.0",
       imgUrl: loggerEnvInfo.imgUrl,
       postUrl: loggerEnvInfo.postUrl,
+      tag,
       beforeSend: this.beforeSendEvent
     });
+    this.reportEnvInfo();
+  }
+  reportEnvInfo() {
+    this.reportCustomEvent(EnvEventType.ENV_INFO, {
+      itg: "npm",
+      benv: "npm",
+      ifr: window.self !== window.top,
+      v: "0.22.0"
+    });
   }
   /** 上报自定义事件 */
   reportCustomEvent(event, data) {
@@ -79,6 +96,32 @@ class PayKKaLogger {
     var _a2;
     (_a2 = window.JlFeLogger) == null ? void 0 : _a2.setOptions(options);
   }
+  async getTag() {
+    var _a2;
+    const fingerprint = this.getCachedFingerprint() || await getFingerprint();
+    if (!fingerprint) {
+      return "";
+    }
+    const tag = `${LOGGER_TAG_PREFIX}_${fingerprint}_${Date.now()}`;
+    try {
+      (_a2 = window.localStorage) == null ? void 0 : _a2.setItem(LOGGER_TAG_STORAGE_KEY, encodeBase64(tag, LOGGER_TAG_TABLE));
+    } catch {
+    }
+    return tag;
+  }
+  /** 读取缓存中的设备指纹段，缓存缺失或损坏时返回空串 */
+  getCachedFingerprint() {
+    var _a2;
+    try {
+      const [prefix, fingerprint] = decodeBase64(
+        ((_a2 = window.localStorage) == null ? void 0 : _a2.getItem(LOGGER_TAG_STORAGE_KEY)) || "",
+        LOGGER_TAG_TABLE
+      ).split("_");
+      return prefix === LOGGER_TAG_PREFIX && fingerprint ? fingerprint : "";
+    } catch {
+      return "";
+    }
+  }
   /**
    * 在日志上报前执行，拦截部分日志上报
    * 1. 过滤接口日志，只上报收银台相关接口，用接口域名判断

package/dist/es/index.js

@@ -87,7 +87,7 @@ import "./out/fraud-detection.js";
 import "./core/logger.js";
 import { ECollMode } from "./types/fraud-detection.js";
 import { MessageAction } from "./types/message.js";
-import { ApplePayEventType, FraudDetectionEventType, GooglePayEventType, LoggerEventType, PaymentEventType, SecurityIframeEventType, ThreeDSEventType, WechatPayEventType } from "./types/event.js";
+import { ApplePayEventType, EnvEventType, FraudDetectionEventType, GooglePayEventType, PaymentEventType, SecurityIframeEventType, ThreeDSEventType, WechatPayEventType } from "./types/event.js";
 export {
   Alipay,
   AlipayHK,
@@ -119,6 +119,7 @@ export {
   EPS,
   EPayKKaEnv,
   EncryptedCard,
+  EnvEventType,
   Fpx,
   FraudDetectionEventType,
   GCash,
@@ -133,7 +134,6 @@ export {
   LinePay,
   LinkAja,
   LocaleKey,
-  LoggerEventType,
   MayBankQRPay,
   MbWay,
   MessageAction,

package/dist/es/out/fraud-detection.js

@@ -28,6 +28,7 @@ import { getChannelSDKConfig } from "../api/modules/risk/index.js";
 import { setApiUrl, setCDNUrl, setApiPrefix } from "../config.js";
 import { ChannelCode } from "../constant.js";
 import { apiEnv, cdnEnv } from "../core/environment.js";
+import { PayKKaLogger } from "../core/logger.js";
 import { ECollMode } from "../types/fraud-detection.js";
 import { FraudDetectionEventType } from "../types/event.js";
 import { difference } from "../utils/array.js";
@@ -36,14 +37,36 @@ import { PayKKaDetection } from "./paykka-detection.js";
 import { StripeRadar } from "./stripe-radar.js";
 import { WorldpayDDCManager } from "./worldpay-ddc-manager.js";
 import { WorldpayJSC } from "./worldpay-jsc.js";
+const isIIFE = typeof __IS_IIFE__ !== "undefined" && __IS_IIFE__;
 const DEFAULT_ENV = "eu";
 const DEFAULT_MODES = [ECollMode.SR, ECollMode.WP, ECollMode.WJ];
 let instance = null;
 function getFraudDetectionInstance(config, options) {
+  const env = config.env || DEFAULT_ENV;
+  const logger = isIIFE ? new PayKKaLogger() : void 0;
+  const loggerReady = logger == null ? void 0 : logger.init({ env }).catch(() => void 0);
+  loggerReady == null ? void 0 : loggerReady.then(() => logger == null ? void 0 : logger.reportCustomEvent(FraudDetectionEventType.FRAUD_DETECTION_CDN));
   if (!instance) {
-    instance = new FraudDetection(config, options);
+    instance = new FraudDetection(config, {
+      ...options,
+      // 保留原有事件回调，同时将同一批事件转发给 CDN logger。
+      onEvent: (event, data) => {
+        var _a;
+        (_a = options == null ? void 0 : options.onEvent) == null ? void 0 : _a.call(options, event, data);
+        logger == null ? void 0 : logger.reportCustomEvent(event, data);
+      }
+    });
   }
-  return instance;
+  return {
+    async getFraudDetectionId(options2) {
+      await loggerReady;
+      return instance.getFraudDetectionId(options2);
+    },
+    async createFraudDetection() {
+      await loggerReady;
+      return instance.createFraudDetection();
+    }
+  };
 }
 class FraudDetection {
   constructor(config, options) {
@@ -60,7 +83,7 @@ class FraudDetection {
     __publicField(this, "channelConfig");
     __publicField(this, "channelConfigPromise");
     /** 是否是 IIFE 模式，在 build 时通过 define 定义，如果 IIFE 为 true，说明商户是直接引入 SDK，用于 API 支付 */
-    __publicField(this, "isIIFE", typeof __IS_IIFE__ !== "undefined" && __IS_IIFE__);
+    __publicField(this, "isIIFE", isIIFE);
     __privateAdd(this, _sessionMode, void 0);
     const { env, clientKey, modes } = config;
     this.modes = (modes == null ? void 0 : modes.length) ? [...modes] : DEFAULT_MODES;

package/dist/es/out/paykka-detection.js

@@ -10,6 +10,7 @@ import "../core/context.js";
 import "./fraud-detection.js";
 import { ChannelCode } from "../constant.js";
 import "../core/logger.js";
+import { getBrowserParams } from "../api/modules/get-browser-params.js";
 import { reportUrls } from "../api/modules/risk/index.js";
 import { encryptAES } from "../utils/encrypt.js";
 import { BaseFraudDetection } from "./base-fraud-detection.js";
@@ -41,6 +42,7 @@ const _PayKKaDetection = class _PayKKaDetection extends BaseFraudDetection {
     const res = await reportUrls({
       clientKey,
       fraudDetectionMode: sessionMode,
+      browser: await getBrowserParams(),
       data: await encryptAES(clientKey, JSON.stringify(data))
     });
     return res;

package/dist/es/polyfill.js

@@ -1,166 +1,166 @@
-;(function (global) {
-  'use strict'
-
-  // globalThis
-  if (typeof global.globalThis === 'undefined') {
-    global.globalThis = global
-  }
-
-  // Object.values
-  if (typeof Object.values !== 'function') {
-    Object.values = function (obj) {
-      if (obj == null) {
-        throw new TypeError('Cannot convert undefined or null to object')
-      }
-
-      var target = Object(obj)
-      var keys = Object.keys(target)
-      var result = new Array(keys.length)
-
-      for (var i = 0; i < keys.length; i++) {
-        result[i] = target[keys[i]]
-      }
-
-      return result
-    }
-  }
-
-  // Object.entries
-  if (typeof Object.entries !== 'function') {
-    Object.entries = function (obj) {
-      if (obj == null) {
-        throw new TypeError('Cannot convert undefined or null to object')
-      }
-
-      var target = Object(obj)
-      var keys = Object.keys(target)
-      var result = new Array(keys.length)
-
-      for (var i = 0; i < keys.length; i++) {
-        result[i] = [keys[i], target[keys[i]]]
-      }
-
-      return result
-    }
-  }
-
-  // Promise.prototype.finally
-  if (
-    typeof global.Promise !== 'undefined' &&
-    global.Promise.prototype &&
-    typeof global.Promise.prototype.finally !== 'function'
-  ) {
-    global.Promise.prototype.finally = function (onFinally) {
-      var P = this.constructor
-
-      return this.then(
-        function (value) {
-          return P.resolve(
-            typeof onFinally === 'function' ? onFinally() : onFinally
-          ).then(function () {
-            return value
-          })
-        },
-        function (reason) {
-          return P.resolve(
-            typeof onFinally === 'function' ? onFinally() : onFinally
-          ).then(function () {
-            throw reason
-          })
-        }
-      )
-    }
-  }
-
-  // AbortController minimal shim
-  // 说明：
-  // 1. 只解决 "AbortController is not defined"
-  // 2. 不保证旧浏览器原生 fetch 一定真正中断请求
-  // 3. 但足够避免直接 ReferenceError，并让依赖 signal 的逻辑尽量工作
-  if (typeof global.AbortController === 'undefined') {
-    function AbortSignal() {
-      this.aborted = false
-      this.reason = void 0
-      this.onabort = null
-      this._listeners = []
-    }
-
-    AbortSignal.prototype.addEventListener = function (type, listener) {
-      if (type !== 'abort' || typeof listener !== 'function') return
-      this._listeners.push(listener)
-    }
-
-    AbortSignal.prototype.removeEventListener = function (type, listener) {
-      if (type !== 'abort') return
-
-      for (var i = 0; i < this._listeners.length; i++) {
-        if (this._listeners[i] === listener) {
-          this._listeners.splice(i, 1)
-          break
-        }
-      }
-    }
-
-    AbortSignal.prototype.dispatchEvent = function (event) {
-      var listeners = this._listeners.slice()
-
-      for (var i = 0; i < listeners.length; i++) {
-        try {
-          listeners[i].call(this, event)
-        } catch (e) {}
-      }
-
-      return true
-    }
-
-    function AbortController() {
-      this.signal = new AbortSignal()
-    }
-
-    AbortController.prototype.abort = function (reason) {
-      if (this.signal.aborted) return
-
-      this.signal.aborted = true
-      this.signal.reason = reason
-
-      var event = { type: 'abort' }
-
-      if (typeof this.signal.onabort === 'function') {
-        try {
-          this.signal.onabort.call(this.signal, event)
-        } catch (e) {}
-      }
-
-      this.signal.dispatchEvent(event)
-    }
-
-    global.AbortController = AbortController
-    global.AbortSignal = AbortSignal
-  }
-
-  // postMessage compatibility helper
-  // 用法：
-  // window.__postMessageCompat(targetWindow, data, targetOrigin)
-  //
-  // 说明：
-  // 旧 WebView 不支持 postMessage(message, { targetOrigin })
-  // 必须改成 postMessage(message, targetOrigin)
-  if (typeof global.__postMessageCompat !== 'function') {
-    global.__postMessageCompat = function (targetWindow, data, targetOrigin) {
-      if (!targetWindow || targetWindow === global) return
-
-      var message = typeof data === 'string' ? data : JSON.stringify(data)
-      var origin = typeof targetOrigin === 'string' ? targetOrigin : '*'
-
-      targetWindow.postMessage(message, origin)
-    }
-  }
-})(
-  typeof window !== 'undefined'
-    ? window
-    : typeof globalThis !== 'undefined'
-      ? globalThis
-      : typeof self !== 'undefined'
-        ? self
-        : this
+;(function (global) {
+  'use strict'
+
+  // globalThis
+  if (typeof global.globalThis === 'undefined') {
+    global.globalThis = global
+  }
+
+  // Object.values
+  if (typeof Object.values !== 'function') {
+    Object.values = function (obj) {
+      if (obj == null) {
+        throw new TypeError('Cannot convert undefined or null to object')
+      }
+
+      var target = Object(obj)
+      var keys = Object.keys(target)
+      var result = new Array(keys.length)
+
+      for (var i = 0; i < keys.length; i++) {
+        result[i] = target[keys[i]]
+      }
+
+      return result
+    }
+  }
+
+  // Object.entries
+  if (typeof Object.entries !== 'function') {
+    Object.entries = function (obj) {
+      if (obj == null) {
+        throw new TypeError('Cannot convert undefined or null to object')
+      }
+
+      var target = Object(obj)
+      var keys = Object.keys(target)
+      var result = new Array(keys.length)
+
+      for (var i = 0; i < keys.length; i++) {
+        result[i] = [keys[i], target[keys[i]]]
+      }
+
+      return result
+    }
+  }
+
+  // Promise.prototype.finally
+  if (
+    typeof global.Promise !== 'undefined' &&
+    global.Promise.prototype &&
+    typeof global.Promise.prototype.finally !== 'function'
+  ) {
+    global.Promise.prototype.finally = function (onFinally) {
+      var P = this.constructor
+
+      return this.then(
+        function (value) {
+          return P.resolve(
+            typeof onFinally === 'function' ? onFinally() : onFinally
+          ).then(function () {
+            return value
+          })
+        },
+        function (reason) {
+          return P.resolve(
+            typeof onFinally === 'function' ? onFinally() : onFinally
+          ).then(function () {
+            throw reason
+          })
+        }
+      )
+    }
+  }
+
+  // AbortController minimal shim
+  // 说明：
+  // 1. 只解决 "AbortController is not defined"
+  // 2. 不保证旧浏览器原生 fetch 一定真正中断请求
+  // 3. 但足够避免直接 ReferenceError，并让依赖 signal 的逻辑尽量工作
+  if (typeof global.AbortController === 'undefined') {
+    function AbortSignal() {
+      this.aborted = false
+      this.reason = void 0
+      this.onabort = null
+      this._listeners = []
+    }
+
+    AbortSignal.prototype.addEventListener = function (type, listener) {
+      if (type !== 'abort' || typeof listener !== 'function') return
+      this._listeners.push(listener)
+    }
+
+    AbortSignal.prototype.removeEventListener = function (type, listener) {
+      if (type !== 'abort') return
+
+      for (var i = 0; i < this._listeners.length; i++) {
+        if (this._listeners[i] === listener) {
+          this._listeners.splice(i, 1)
+          break
+        }
+      }
+    }
+
+    AbortSignal.prototype.dispatchEvent = function (event) {
+      var listeners = this._listeners.slice()
+
+      for (var i = 0; i < listeners.length; i++) {
+        try {
+          listeners[i].call(this, event)
+        } catch (e) {}
+      }
+
+      return true
+    }
+
+    function AbortController() {
+      this.signal = new AbortSignal()
+    }
+
+    AbortController.prototype.abort = function (reason) {
+      if (this.signal.aborted) return
+
+      this.signal.aborted = true
+      this.signal.reason = reason
+
+      var event = { type: 'abort' }
+
+      if (typeof this.signal.onabort === 'function') {
+        try {
+          this.signal.onabort.call(this.signal, event)
+        } catch (e) {}
+      }
+
+      this.signal.dispatchEvent(event)
+    }
+
+    global.AbortController = AbortController
+    global.AbortSignal = AbortSignal
+  }
+
+  // postMessage compatibility helper
+  // 用法：
+  // window.__postMessageCompat(targetWindow, data, targetOrigin)
+  //
+  // 说明：
+  // 旧 WebView 不支持 postMessage(message, { targetOrigin })
+  // 必须改成 postMessage(message, targetOrigin)
+  if (typeof global.__postMessageCompat !== 'function') {
+    global.__postMessageCompat = function (targetWindow, data, targetOrigin) {
+      if (!targetWindow || targetWindow === global) return
+
+      var message = typeof data === 'string' ? data : JSON.stringify(data)
+      var origin = typeof targetOrigin === 'string' ? targetOrigin : '*'
+
+      targetWindow.postMessage(message, origin)
+    }
+  }
+})(
+  typeof window !== 'undefined'
+    ? window
+    : typeof globalThis !== 'undefined'
+      ? globalThis
+      : typeof self !== 'undefined'
+        ? self
+        : this
 )

package/dist/es/types/event.js

@@ -7,6 +7,7 @@ var FraudDetectionEventType = /* @__PURE__ */ ((FraudDetectionEventType2) => {
   FraudDetectionEventType2["FRAUD_DETECTION_TIMEOUT"] = "fraudDetection:timeout";
   FraudDetectionEventType2["FRAUD_DETECTION_LOAD_ERROR"] = "fraudDetection:loadError";
   FraudDetectionEventType2["FRAUD_DETECTION_WARNING"] = "fraudDetection:warning";
+  FraudDetectionEventType2["FRAUD_DETECTION_CDN"] = "fraudDetection:cdn";
   return FraudDetectionEventType2;
 })(FraudDetectionEventType || {});
 var ApplePayEventType = /* @__PURE__ */ ((ApplePayEventType2) => {
@@ -58,16 +59,15 @@ var SecurityIframeEventType = /* @__PURE__ */ ((SecurityIframeEventType2) => {
   SecurityIframeEventType2["SECURITY_IFRAME_LOAD_ERROR"] = "securityIframe:loadError";
   return SecurityIframeEventType2;
 })(SecurityIframeEventType || {});
-var LoggerEventType = /* @__PURE__ */ ((LoggerEventType2) => {
-  LoggerEventType2["ENV"] = "logger:env";
-  LoggerEventType2["BEHAVIOR"] = "logger:behavior";
-  return LoggerEventType2;
-})(LoggerEventType || {});
+var EnvEventType = /* @__PURE__ */ ((EnvEventType2) => {
+  EnvEventType2["ENV_INFO"] = "env:info";
+  return EnvEventType2;
+})(EnvEventType || {});
 export {
   ApplePayEventType,
+  EnvEventType,
   FraudDetectionEventType,
   GooglePayEventType,
-  LoggerEventType,
   PaymentEventType,
   SecurityIframeEventType,
   ThreeDSEventType,

package/dist/es/utils/base64.js

@@ -0,0 +1,20 @@
+const BASE64_TABLE = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+const encodeBase64 = (value, table = BASE64_TABLE) => {
+  try {
+    return btoa(value).split("").map((char) => char === "=" ? "" : table[BASE64_TABLE.indexOf(char)]).join("");
+  } catch {
+    return "";
+  }
+};
+const decodeBase64 = (value, table = BASE64_TABLE) => {
+  try {
+    const base64 = value.split("").map((char) => BASE64_TABLE[table.indexOf(char)] ?? "").join("");
+    return atob(base64 + "=".repeat((4 - base64.length % 4) % 4));
+  } catch {
+    return "";
+  }
+};
+export {
+  decodeBase64,
+  encodeBase64
+};

package/dist/es/utils/system-info/finger-print.js

@@ -4,7 +4,11 @@ const loadFingerprint = async () => {
 };
 let fingerPrint = "";
 const getFingerprint = async () => {
-  return fingerPrint || (fingerPrint = (await loadFingerprint()).visitorId);
+  try {
+    return fingerPrint || (fingerPrint = (await loadFingerprint()).visitorId);
+  } catch {
+    return "";
+  }
 };
 export {
   getFingerprint