@payrails/web-sdk 5.44.0-RC.0 → 5.44.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payrails/web-sdk",
-  "version": "5.44.0-RC.0",
+  "version": "5.44.0",
   "description": "SDK providing tokenization options on the client for merchants",
   "main": "index.js",
   "types": "payrails.d.ts",
@@ -9,7 +9,7 @@
   "license": "MIT",
   "dependencies": {
     "@payrails/fraud-sdk": "1.4.2",
-    "@payrails/web-cse": "1.2.3",
+    "@payrails/web-cse": "1.2.4",
     "@rollup/plugin-html": "2.0.0",
     "@types/applepayjs": "14.0.9",
     "@types/googlepay": "0.7.5",

package/payrails.d.ts

@@ -1258,6 +1258,7 @@ declare class PaymentInstallmentsDropdown extends PayrailsElement {
     private INSTALLMENT_STORAGE_KEY;
     private installmentOptions;
     constructor(options: PaymentInstallmentsElementOptions);
+    private getDefaultInstallment;
     private generateOptionsHTML;
     private renderOptions;
     updateOptions(installmentOptions: BaseInstallmentOption[]): void;
@@ -1627,6 +1628,15 @@ interface CrediCardDropinOptions {
     } & CardFormOptions['translations'];
 }
 
+type RevolutPayButtonTheme = 'dark' | 'light' | 'lightOutline';
+declare const REVOLUT_PAY_DEFAULT_THEME: RevolutPayButtonTheme;
+declare const REVOLUT_PAY_DEFAULT_LABEL = "Pay with Revolut Pay";
+interface RevolutPayStyles {
+    theme?: RevolutPayButtonTheme;
+    width?: string;
+    borderRadius?: string;
+}
+
 interface ButtonOptions {
     id: string;
     events?: PayrailsSDKEvents & {
@@ -1642,7 +1652,7 @@ interface ButtonOptions {
     };
 }
 interface GenericRedirectButtonOptions {
-    styles?: ButtonOptions['styles'];
+    styles?: ButtonOptions['styles'] | RevolutPayStyles;
     translations?: {
         label?: string;
     };
@@ -1651,14 +1661,18 @@ interface GenericRedirectButtonOptions {
     openInNewTab?: boolean;
     returnInfo?: ReturnInfo;
 }
+type NormalisedOptions = Omit<GenericRedirectButtonOptions, 'styles'> & {
+    styles?: ButtonOptions['styles'];
+};
 declare class GenericRedirectButton extends PayrailsElement {
-    protected options: GenericRedirectButtonOptions;
     private readonly returnInfo?;
     private popup;
     private readonly paymentExecutor;
     private isDisabled;
     private isLoading;
-    constructor(options: GenericRedirectButtonOptions, returnInfo?: ReturnInfo | undefined);
+    private readonly isRevolutPay;
+    protected options: NormalisedOptions;
+    constructor(rawOptions: GenericRedirectButtonOptions, returnInfo?: ReturnInfo | undefined);
     private setStyles;
     private removeStyles;
     private triggerLoading;
@@ -1673,7 +1687,7 @@ declare class GenericRedirectButton extends PayrailsElement {
     private updateTranslations;
     private updateEvents;
     update(options: {
-        styles?: ButtonOptions['styles'];
+        styles?: ButtonOptions['styles'] | RevolutPayStyles;
         translations?: ButtonOptions['translations'];
         events?: ButtonOptions['events'];
     }): void;
@@ -1687,7 +1701,7 @@ interface GenericRedirectDropinOptions {
     };
     styles?: {
         element?: DropinElementStyles;
-        button: ButtonOptions['styles'];
+        button: ButtonOptions['styles'] | RevolutPayStyles;
     };
     translations?: {
         label?: string;
@@ -1829,6 +1843,7 @@ interface DropinOptions {
     paymentMethodsConfiguration?: {
         [key: string]: any;
         mercadoPago?: GenericRedirectDropinOptions['config'];
+        revolutPay?: GenericRedirectDropinOptions['config'];
         preselectFirstPaymentOption?: boolean;
         showPaymentMethodLogo?: boolean;
         cards?: {
@@ -1862,6 +1877,7 @@ interface DropinOptions {
         };
         paypalButton?: PaypalDropinOptions['translations'];
         mercadoPago?: GenericRedirectDropinOptions['translations'];
+        revolutPay?: GenericRedirectDropinOptions['translations'];
         addressSelector?: AddressSelectorElementOptions['translations'];
         applePayButton?: ApplePayDropinOptions['translations'];
         leanButton?: LeanDropinOptions['translations'];
@@ -1884,6 +1900,7 @@ interface DropinOptions {
         loadingScreen?: LoadingScreenStyles;
         addressSelector?: AddressSelectorElementOptions['styles'];
         mercadoPago?: GenericRedirectDropinOptions['styles'];
+        revolutPay?: GenericRedirectDropinOptions['styles'];
     };
     fonts?: FontDescriptor[];
     configuration?: {
@@ -2001,8 +2018,31 @@ interface ApiConfig<TReq> {
     body?: TReq;
 }
 
+declare enum ThirdPartySDK {
+    ApplePay = "https://applepay.cdn-apple.com/jsapi/v1.3.2/apple-pay-sdk.js",
+    GooglePay = "https://pay.google.com/gp/p/js/pay.js",
+    PayPal = "paypal-sdk",
+    Lean = "https://cdn.leantech.me/link/loader/prod/ae/latest/lean-link-loader.min.js"
+}
 declare class SdkLoader {
     private static readonly scriptMap;
+    /**
+     * Per-SDK HTML attributes applied to dynamically injected script elements.
+     *
+     * Apple Pay: Pinned to semantic version v1.3.7 with an SRI integrity hash
+     * so the browser rejects any tampered payload.  `crossorigin` is required
+     * for SRI enforcement (see https://applepaydemo.apple.com/).
+     * When upgrading, fetch the new version, recompute the sha384 hash, and
+     * update both the enum URL and the integrity value below.
+     *
+     * Google Pay: Google's `pay.js` build process does not produce stable
+     * hashes so SRI cannot be used.  `crossorigin` is deliberately NOT set:
+     * adding it breaks pay.js loading because Google's CDN does not return
+     * the matching CORS headers on that response.  Full PCI DSS v4 isolation
+     * requires loading pay.js inside a sandboxed iframe (see Google's
+     * guidance on PCI DSS v4 compliance with sandboxed iframes).
+     */
+    private static readonly sdkScriptAttributes;
     static load<T = void>(sdk: ThirdPartySDK, params?: PayPalScriptConfig): Promise<T>;
     static reset(): void;
     static invalidate(sdk: ThirdPartySDK): void;
@@ -2024,12 +2064,6 @@ interface PayPalScriptConfig {
     intent: 'tokenize' | 'capture' | 'authorize';
     locale?: string;
 }
-declare enum ThirdPartySDK {
-    ApplePay = "https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js",
-    GooglePay = "https://pay.google.com/gp/p/js/pay.js",
-    PayPal = "paypal-sdk",
-    Lean = "https://cdn.leantech.me/link/loader/prod/ae/latest/lean-link-loader.min.js"
-}
 
 interface QueryDefinition<T> {
     path: string[];
@@ -2207,5 +2241,5 @@ interface PayrailsClientOptions {
     };
 }
 
-export { AuthorizationFailureReasons, ElementType, INTEGRATION_TYPE, PAYMENT_METHOD_CODES, Payrails, PayrailsCollectContainer, PayrailsEnvironment };
-export type { ApplePayButtonOptions, CardFormOptions, CardListOptions, CardPaymentButtonOptions, CollectContainerOptions, DropinOptions, ExecutionMeta, ExecutionMetaCustomer, ExecutionMetaKey, GenericRedirectButtonOptions, GooglePayButtonOptions, InitOptions, LeanButtonOptions, PaymentEvents, PaypalButtonOptions, PayrailsAmount, PayrailsClientOptions, PayrailsContainerType, PayrailsSecureField, PayrailsSecureFieldEvent, ReturnInfo, SaveInstrumentResponse, StorablePaymentCompositionOption, WorkflowExecutionResponse };
+export { AuthorizationFailureReasons, ElementType, INTEGRATION_TYPE, PAYMENT_METHOD_CODES, Payrails, PayrailsCollectContainer, PayrailsEnvironment, REVOLUT_PAY_DEFAULT_LABEL, REVOLUT_PAY_DEFAULT_THEME };
+export type { ApplePayButtonOptions, CardFormOptions, CardListOptions, CardPaymentButtonOptions, CollectContainerOptions, DropinOptions, ExecutionMeta, ExecutionMetaCustomer, ExecutionMetaKey, GenericRedirectButtonOptions, GooglePayButtonOptions, InitOptions, LeanButtonOptions, PaymentEvents, PaypalButtonOptions, PayrailsAmount, PayrailsClientOptions, PayrailsContainerType, PayrailsSecureField, PayrailsSecureFieldEvent, ReturnInfo, RevolutPayButtonTheme, RevolutPayStyles, SaveInstrumentResponse, StorablePaymentCompositionOption, WorkflowExecutionResponse };