@sanctum-key/react-native-sdk 1.0.19 → 1.0.21

package/src/modules/api/CardAuthentification.ts

@@ -30,19 +30,20 @@ export async function frontVerification(
         code: string,
         currentSide: string,
         templatePath?: string,
-        mrzType?: string
+        mrzType?: string,
+        issuingSubdivision?: string 
     },
     env: KycEnvironment = 'PRODUCTION'
 ) {
     try {
         console.log("Front verification START", JSON.stringify({ result }, null, 2));
         logger.log("Front verification", JSON.stringify({ result }, null, 2));
-
+        
         const authMethods = Array.isArray(result.regionMapping?.authMethod)
             ? result.regionMapping.authMethod.map(m => String(m).toUpperCase())
             : [];
         const hasMrz = authMethods.some(m => m.includes('MRZ'));
-
+        
         if (env === 'SANDBOX') {
             console.log("SANDBOX mode: Skipping AI verification for front document");
             const mockBbox: IBbox = { minX: 400, minY: 800, width: 2200, height: 1400 };
@@ -69,25 +70,25 @@ export async function frontVerification(
             };
             return mockResponse;
         }
-
+        
         const token = await authentification();
         const detected = await kycService.detectFaceOnId(
             result?.path || '', token, result?.selectedDocumentType || '', env
         ) as ApiVerificationResponse;
-
+        
         if (!detected.result) {
             throw new Error('Aucun visage détecté sur la carte. Veuillez reprendre.');
         }
-
+        
         const cardData = detected.card_obb && Array.isArray(detected.card_obb) && detected.card_obb.length > 0
             ? detected.card_obb[0]
             : null;
-
+            
         let points: number[][] | null = null;
+        console.log(points)
         let isCardInFrame = true;
         let hasCroppedSides = false;
-        console.log(points)
-
+        
         if (cardData) {
             points = cardData.obb;
             if (typeof cardData.card_in_frame !== 'undefined') {
@@ -95,27 +96,45 @@ export async function frontVerification(
                 hasCroppedSides = Array.isArray(cardData.cropped_sides) && cardData.cropped_sides.length > 0;
             }
         }
-
+        
         if (!isCardInFrame || hasCroppedSides) {
             logger.log(`Front Framing failed. Cropped sides detected by backend.`);
             throw new Error('CARD_NOT_FULLY_IN_FRAME');
         }
-
+        
         const obbConfidence = getObbConfidence(detected.card_obb);
         if (obbConfidence !== null && obbConfidence < OBB_CONFIDENCE_THRESHOLD) {
             throw new Error('Carte non entièrement visible. Positionnez toute la carte dans le cadre.');
         }
-
+        
         let croppedBase64: string | undefined;
         let bbox: IBbox | undefined;
         let mrz: any | undefined;
-
+        let documentData: any | undefined;
+        
         try {
             const crop = await cropByObb(result?.path || '', detected.card_obb);
             croppedBase64 = crop.base64;
             bbox = crop.bbox;
         } catch { }
 
+        if (result.code === 'CA') {
+            try {
+                logger.log("Tentative d'extraction OCR (Front) - Canada Only");
+                documentData = await kycService.extractDocumentInformation({
+                    fileUri: result.path || '',
+                    docType: result.selectedDocumentType,
+                    docRegion: result.code,
+                    templatePath: result.templatePath || '',
+                    issuingSubdivision: result.issuingSubdivision, 
+                    token: token,
+                    postfix: result.currentSide || 'front'
+                });
+            } catch (err: any) {
+                logger.log("Front OCR Extraction Error:", err?.message || err);
+            }
+        }
+        
         if (hasMrz) {
             try {
                 logger.log("Tentative d'extraction MRZ (Front)");
@@ -131,11 +150,11 @@ export async function frontVerification(
                     },
                     env
                 );
-
+                
                 mrz = typeof mrzResponse === 'string' ? JSON.parse(mrzResponse) : mrzResponse;
-
+                
                 if (mrz?.parsed_data?.status === 'FAILURE' || mrz?.success === false) {
-                    logger.log("🛑 Front MRZ Extraction Failed:", mrz?.parsed_data?.status_message);
+                    logger.log("Front MRZ Extraction Failed:", mrz?.parsed_data?.status_message);
                     throw new Error(`MRZ illisible: ${mrz?.parsed_data?.status_message || 'Veuillez nettoyer l\'objectif et réessayer'}`);
                 }
             } catch (err: any) {
@@ -143,9 +162,10 @@ export async function frontVerification(
                 throw new Error(err?.message || "Erreur lors de l'extraction MRZ. Veuillez reprendre la photo.");
             }
         }
-
-        return { ...detected, croppedBase64, bbox, ...(mrz ? { mrz } : {}) };
-
+        
+        // Return detected frame, crop, MRZ, AND the new extracted OCR documentData
+        return { ...detected, croppedBase64, bbox, ...(mrz ? { mrz } : {}), ...(documentData ? { documentData } : {}) };
+        
     } catch (e: any) {
         logger.log('Error front verification:', e?.message);
         throw new Error(e?.message || 'Erreur de détection du visage');
@@ -161,22 +181,23 @@ export async function backVerification(
         currentSide: string,
         templatePath?: string,
         mrzType?: string,
-        templateResponse?: ApiVerificationResponse
+        templateResponse?: ApiVerificationResponse,
+        issuingSubdivision?: string, // Capture province/state
+        frontTemplatePath?: string   // Capture the front template to compare against
     },
     env: KycEnvironment = 'PRODUCTION'
 ) {
     try {
         if (!result.path) throw new Error('No path provided');
         logger.log("result.regionMapping", result.regionMapping, result.currentSide, result.code);
-        logger.log('result object', result)
-
+        
         const authMethods = Array.isArray(result.regionMapping?.authMethod)
             ? result.regionMapping.authMethod.map(m => String(m).toUpperCase())
             : [];
-
-        const hasMrz = authMethods.some(m => m.includes('MRZ'))
+            
+        const hasMrz = authMethods.some(m => m.includes('MRZ'));
         const hasBarcode = authMethods.some(m => m.includes('BARCODE') || m.includes('2D'));
-
+        
         if (env === 'SANDBOX') {
             console.log("SANDBOX mode: Skipping AI verification for back document");
             const mockBbox: IBbox = { minX: 400, minY: 800, width: 2200, height: 1400 };
@@ -211,34 +232,34 @@ export async function backVerification(
             }
             return { success: true, bbox: mockBbox, card_obb: mockCardObb };
         }
-
+        
         const token = await authentification();
         logger.log("1. Checking template and framing for back document...");
-
+        
         const templateResponse: ApiVerificationResponse = result.templateResponse ||
             await kycService.checkTemplateType({
                 fileUri: result.path,
                 docType: result.selectedDocumentType as any,
                 docRegion: result.code,
                 postfix: 'back',
-                token: token
+                token: token,
             }, env);
-
+            
         if (templateResponse.success === false || templateResponse.Error) {
             throw new Error('Impossible de lire le document. Veuillez vous rapprocher et stabiliser la caméra.');
         }
-
+        
         const cardData = templateResponse?.card_obb && Array.isArray(templateResponse.card_obb) && templateResponse.card_obb.length > 0
             ? templateResponse.card_obb[0]
             : null;
-
+            
         if (!cardData) throw new Error('CARD_NOT_FULLY_IN_FRAME');
-
+        
         let points: number[][] | null = null;
+        console.log(points)
         let isCardInFrame = false;
         let hasCroppedSides = true;
-        console.log(points)
-
+        
         if (cardData.obb) {
             points = cardData.obb;
             if (typeof cardData.card_in_frame !== 'undefined') {
@@ -250,33 +271,86 @@ export async function backVerification(
             isCardInFrame = true;
             hasCroppedSides = false;
         }
-
+        
         if (!isCardInFrame || hasCroppedSides) {
             logger.log(`Back Framing failed. Backend reported document out of bounds.`);
             throw new Error('CARD_NOT_FULLY_IN_FRAME');
         }
-
+        
         const obbConf = getObbConfidence(templateResponse?.card_obb);
         if (obbConf !== null && obbConf < OBB_CONFIDENCE_THRESHOLD) {
             throw new Error('Carte non entièrement visible. Positionnez toute la carte dans le cadre.');
         }
-
+        
         const activeTemplatePath = templateResponse.template_path || result.templatePath || '';
+        
         if (activeTemplatePath) {
             const expectedCountryName = countryData[result.code]?.name_en || '';
             const hasCodeMatch = activeTemplatePath.includes(`_${result.code}_`);
             const hasNameMatch = expectedCountryName && activeTemplatePath.toLowerCase().includes(expectedCountryName.toLowerCase());
-
+            
             if (!hasCodeMatch && !hasNameMatch) {
                 logger.log(`Template mismatch! Expected: ${result.code} (${expectedCountryName}), Detected: ${activeTemplatePath}`);
                 throw new Error(`Le document ne correspond pas au pays sélectionné (${result.code}).`);
             }
         }
 
-        logger.log("Framing and Country Template verified successfully. Proceeding to Data Extraction.");
-
+        // 🚨 FRONT VS BACK TEMPLATE VALIDATION 🚨
+        if (result.frontTemplatePath && activeTemplatePath) {
+            try {
+                const frontPy = result.frontTemplatePath.split("/").pop()?.replace(/\.(jpg|png)$/i, ".py");
+                const backPy = activeTemplatePath.split("/").pop()?.replace(/\.(jpg|png)$/i, ".py");
+                
+                if (frontPy && backPy) {
+                    logger.log(`Validating Front (${frontPy}) vs Back (${backPy}) for region ${result.code}`);
+                    
+                    // 🚨 THE FIX: Only populate subRegion for Canadian 'hic' documents. Empty for all others.
+                    const isCanadianHic = result.code === 'CA' && result.selectedDocumentType === 'hic';
+                    const safeSubRegion = isCanadianHic ? (result.issuingSubdivision || "") : "";
+
+                    const matchValidation = await kycService.validateBackTemplate({
+                        region: result.code,
+                        docType: result.selectedDocumentType,
+                        frontTemplateName: frontPy,
+                        backTemplateName: backPy,
+                        subRegion: safeSubRegion,
+                        token: token
+                    }, env);
+                    
+                    // If the API succeeds but explicitly returns false, stop immediately.
+                    if (!matchValidation || matchValidation.is_match === false) {
+                        logger.log(`Front/Back Mismatch: ${matchValidation?.status_message}`);
+                        throw new Error(`Le verso ne correspond pas au recto fourni. Vous avez scanné un document différent.`);
+                    }
+                }
+            } catch (err: any) {
+                // Throw hard errors (like the mismatch). Ignore harmless 400s if a template mapping doesn't exist yet
+                if (err?.message?.includes('ne correspond pas')) throw err;
+                logger.log("Template matching validation skipped/failed internally:", err?.message);
+            }
+        }
+        
+        logger.log("Framing, Country, and Match verified successfully. Proceeding to Data Extraction.");
         let extractionResult: any = {};
 
+        if (result.code === 'CA') {
+            try {
+                logger.log("Tentative d'extraction OCR (Back) - Canada Only");
+                const documentData = await kycService.extractDocumentInformation({
+                    fileUri: result.path!,
+                    docType: result.selectedDocumentType,
+                    docRegion: result.code,
+                    templatePath: activeTemplatePath,
+                    issuingSubdivision: result.issuingSubdivision,
+                    token: token,
+                    postfix: result.currentSide || 'back'
+                });
+                extractionResult.documentData = documentData;
+            } catch (err: any) {
+                logger.log("Back OCR Extraction Error:", err?.message || err);
+            }
+        }
+        
         if (hasMrz) {
             try {
                 logger.log("Tentative d'extraction MRZ (Back)");
@@ -289,35 +363,31 @@ export async function backVerification(
                     template_path: activeTemplatePath,
                     mrz_type: result?.mrzType || 'TD1'
                 }, env);
-
+                
                 const mrz = typeof mrzResponse === 'string' ? JSON.parse(mrzResponse) : mrzResponse;
-
+                
                 if (mrz?.parsed_data?.status === 'FAILURE' || mrz?.success === false) {
                     throw new Error(mrz?.parsed_data?.status_message || 'Lecture MRZ échouée');
                 }
-
-                extractionResult.mrz = mrz; // Attaching securely to result object
-
+                extractionResult.mrz = mrz; 
             } catch (mrzError: any) {
                 logger.log(`MRZ échoué: ${mrzError?.message}`);
-                // If MRZ fails, we MUST throw an error so the user is forced to retake it!
                 throw new Error(`Lecture MRZ invalide: ${mrzError?.message || 'Veuillez nettoyer l\'objectif et réessayer'}`);
             }
         }
-
+        
         if (hasBarcode) {
             try {
                 logger.log("Tentative d'extraction barcode");
                 const barcode = await kycService.extractBarcode({ fileUri: result.path!, token: token }, env);
                 extractionResult.barcode = barcode;
             } catch (e: any) {
-                // Only throw barcode error if MRZ wasn't already successfully extracted
                 if (!extractionResult.mrz) {
                     throw new Error(`Lecture Barcode échouée: ${e?.message}`);
                 }
             }
         }
-
+        
         let bbox: IBbox | undefined;
         let croppedBase64: string | undefined;
         try {
@@ -325,7 +395,7 @@ export async function backVerification(
             bbox = crop.bbox;
             croppedBase64 = crop.base64;
         } catch { }
-
+        
         return {
             success: true,
             ...extractionResult,
@@ -333,15 +403,21 @@ export async function backVerification(
             croppedBase64,
             card_obb: templateResponse.card_obb
         };
-
+        
     } catch (e: any) {
-        if (e?.message === 'CARD_NOT_FULLY_IN_FRAME') throw e; 
+        if (e?.message === 'CARD_NOT_FULLY_IN_FRAME') throw e;
         throw new Error(e?.message || 'Erreur de détection des données');
     }
 }
 
 export async function checkTemplateType(
-    result: { path?: string, docType: string, docRegion: string, postfix: string },
+    result: { 
+         path?: string, 
+         docType: string, 
+         docRegion: string, 
+         postfix: string,
+         issuingSubdivision?: string 
+    },
     env: KycEnvironment = 'PRODUCTION'
 ) {
     try {
@@ -356,32 +432,36 @@ export async function checkTemplateType(
                 }]
             };
         }
-
+        
         const token = await authentification();
+        const isCanada = result.docRegion?.toUpperCase() === 'CA';
+        
         const templateType = await kycService.checkTemplateType({
             fileUri: result.path || '',
             docType: result?.docType as GovernmentDocumentType,
             docRegion: result?.docRegion || "",
             postfix: result?.postfix,
-            token: token
+            token: token,
+            // 🚨 Pass the subdivision strictly if the region is Canada
+            issuingSubdivision: isCanada ? result.issuingSubdivision : undefined
         }, env);
-
+        
         if (templateType.success === false || templateType.Error) {
             logger.log("Backend returned an error:", templateType.Error);
             throw new Error('Impossible de lire le document. Veuillez vous rapprocher et stabiliser la caméra.');
         }
-
+        
         const cardData = templateType.card_obb && Array.isArray(templateType.card_obb) && templateType.card_obb.length > 0
             ? templateType.card_obb[0]
             : null;
-
+            
         if (!cardData) throw new Error('CARD_NOT_FULLY_IN_FRAME');
-
+        
         let points: number[][] | null = null;
+        console.log(points);
         let isCardInFrame = false;
         let hasCroppedSides = true;
-        console.log(points)
-
+        
         if (cardData.obb) {
             points = cardData.obb;
             if (typeof cardData.card_in_frame !== 'undefined') {
@@ -392,25 +472,25 @@ export async function checkTemplateType(
             points = cardData[0];
             isCardInFrame = true;
             hasCroppedSides = false;
-            // 🚨 ARTIFICIAL CHECK REMOVED HERE
         }
-
+        
         if (!isCardInFrame || hasCroppedSides) {
             logger.log(`Template Framing failed by backend check.`);
             throw new Error('CARD_NOT_FULLY_IN_FRAME');
         }
-
+        
         const LPIPS_THRESHOLD = 0.75;
         if (templateType.lpips_score !== undefined && templateType.lpips_score > LPIPS_THRESHOLD) {
             logger.log(`🛑 Country Mismatch! LPIPS: ${templateType.lpips_score}`);
             throw new Error(`Le document présenté ne correspond pas au pays sélectionné (${result.docRegion}).`);
         }
-
+        
         logger.log("templateType result", JSON.stringify(truncateFields(templateType), null, 2));
         return templateType;
+        
     } catch (e: any) {
-        logger.log('Errorrr checking template type:', JSON.stringify(errorMessage(e), null, 2));
-        if (e?.message === 'CARD_NOT_FULLY_IN_FRAME' || e?.message?.includes('ne correspond pas')) throw e; 
+        logger.log('Error checking template type:', JSON.stringify(errorMessage(e), null, 2));
+        if (e?.message === 'CARD_NOT_FULLY_IN_FRAME' || e?.message?.includes('ne correspond pas')) throw e;
         throw new Error(e?.message || 'Erreur de vérification du template');
     }
 }