@phygitallabs/phygital-consent 1.0.2 → 1.0.3

package/src/helpers/sha256.ts

@@ -1,29 +1,33 @@
 /**
  * Hash user_id or device_id with SHA-256 for the two POST consent hooks
  * (createUserConsent, createDeviceCookieConsent).
+ * Input: string, encoded as UTF-8 before hashing.
+ * Output: lowercase hex string.
  * Uses Web Crypto when available; falls back to pure-JS SHA-256 for old devices.
- * Returns lowercase hex string.
  */
 
+/** Encode hash digest bytes as lowercase hex string. */
 function arrayBufferToHex(buffer: ArrayBuffer): string {
   return Array.from(new Uint8Array(buffer))
     .map((b) => b.toString(16).padStart(2, "0"))
-    .join("");
+    .join("")
+    .toLowerCase();
 }
 
 /**
  * SHA-256 via Web Crypto (modern browsers, Node 19+).
+ * Input encoded as UTF-8; output lowercase hex.
  */
 async function sha256WebCrypto(value: string): Promise<string> {
-  const buffer = new TextEncoder().encode(value);
-  const hashBuffer = await crypto.subtle.digest("SHA-256", buffer);
+  const utf8 = new TextEncoder().encode(value);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", utf8);
   return arrayBufferToHex(hashBuffer);
 }
 
 /**
  * Pure-JS SHA-256 fallback for environments without crypto.subtle
  * (e.g. old browsers, insecure context, Node < 19).
- * UTF-8 input, hex output.
+ * Input encoded as UTF-8; output lowercase hex.
  */
 function sha256Fallback(value: string): string {
   const bytes = utf8Encode(value);
@@ -94,13 +98,14 @@ function sha256Fallback(value: string): string {
       ((v >>> 4) & 0xf).toString(16) +
       (v & 0xf).toString(16);
   }
-  return out;
+  return out.toLowerCase();
 }
 
 function rotr(n: number, b: number): number {
   return (n >>> b) | (n << (32 - b));
 }
 
+/** Encode string to UTF-8 bytes (with SHA-256 padding for block processing). */
 function utf8Encode(s: string): Uint8Array {
   const n = s.length;
   const bytes: number[] = [];
@@ -155,7 +160,8 @@ function hasWebCrypto(): boolean {
 }
 
 /**
- * Hash a string with SHA-256. Returns lowercase hex string.
+ * Hash a string with SHA-256.
+ * Input: encoded as UTF-8. Output: lowercase hex string.
  * Use for user_id and device_id before calling createUserConsent / createDeviceCookieConsent.
  * Uses Web Crypto when available; falls back to pure-JS for old devices (no crypto.subtle).
  */

package/src/provider/PhygitalConsentProvider.tsx

@@ -5,6 +5,7 @@ import { getConsentPreferenceCookie } from "../helpers/cookie";
 import { ConsentServiceProvider, ConsentServiceProviderProps } from "./ConsentServiceProvider";
 
 export interface PhygitalConsentContextValue {
+  deviceId: string;
   /** True when cookie phygital_cookie_consent exists and has valid deviceId + selected_preferences. Use to show/hide cookie banner. */
   hasConsentPreference: boolean;
   /** Re-read cookie and update hasConsentPreference. Call after storing preference (e.g. from CookieConsentBanner onSuccess). */
@@ -14,6 +15,7 @@ export interface PhygitalConsentContextValue {
 const PhygitalConsentContext = createContext<PhygitalConsentContextValue | undefined>(undefined);
 
 export interface PhygitalConsentProviderProps extends ConsentServiceProviderProps {
+  deviceId: string;
   children: React.ReactNode;
 }
 
@@ -23,7 +25,7 @@ export interface PhygitalConsentProviderProps extends ConsentServiceProviderProp
  * the cookie banner based on whether the user has already chosen a preference.
  */
 export function PhygitalConsentProvider(props: PhygitalConsentProviderProps) {
-  const { children, ...consentServiceProps } = props;
+  const { children, deviceId,  ...consentServiceProps } = props;
   const [hasConsentPreference, setHasConsentPreference] = useState(false);
 
   const refreshConsentPreference = useCallback(() => {
@@ -34,8 +36,9 @@ export function PhygitalConsentProvider(props: PhygitalConsentProviderProps) {
   useEffect(() => {
     refreshConsentPreference();
   }, [refreshConsentPreference]);
-  
+
   const value: PhygitalConsentContextValue = {
+    deviceId,
     hasConsentPreference,
     refreshConsentPreference,
   };