@sanctum-key/react-native-sdk 1.0.57 → 1.0.59

package/src/modules/api/CardAuthentification.ts

@@ -284,6 +284,7 @@ export async function backVerification(
 
     logger.log("Framing, Country, and Match verified successfully. Proceeding to Data Extraction.");
     let extractionResult: any = {};
+    let mrzCardObb: any;
 
     if (result.code === 'CA') {
       try {
@@ -331,6 +332,9 @@ export async function backVerification(
           throw new Error(mrz?.parsed_data?.status_message || 'Lecture MRZ échouée');
         }
         extractionResult.mrz = mrz;
+        if (mrz?.card_obb) {
+          mrzCardObb = mrz.card_obb;
+        }
       } catch (mrzError: any) {
         logger.log(`MRZ échoué: ${mrzError?.message}`);
         throw new Error(`Lecture MRZ invalide: ${mrzError?.message || 'Veuillez nettoyer l\'objectif et réessayer'}`);
@@ -339,9 +343,13 @@ export async function backVerification(
 
     let bbox: IBbox | undefined;
     let croppedBase64: string | undefined;
+    // For MRZ-backed documents, extract_mrz sees the final verified back image
+    // and provides the authoritative card bounds. Keep the template OBB as a
+    // fallback for barcode-only and non-MRZ document backs.
+    const finalCardObb = mrzCardObb || templateResponse.card_obb;
 
     try {
-      const crop = await cropByObb(result?.path || '', templateResponse.card_obb);
+      const crop = await cropByObb(result?.path || '', finalCardObb);
       bbox = crop.bbox;
       croppedBase64 = crop.base64;
     } catch {
@@ -352,7 +360,7 @@ export async function backVerification(
       ...extractionResult,
       bbox,
       croppedBase64,
-      card_obb: templateResponse.card_obb
+      card_obb: finalCardObb
     };
 
   } catch (e: any) {
@@ -443,4 +451,4 @@ export async function checkTemplateType(
 
     throw new Error(typeof e === 'string' ? e : (e?.message || 'Erreur de vérification du template'));
   }
-}
+}

package/src/utils/cropByObb.ts

@@ -4,6 +4,22 @@ import * as ImageManipulator from "expo-image-manipulator";
 
 type Point = [number, number];
 
+type PixelBbox = {
+  minX: number;
+  minY: number;
+  width: number;
+  height: number;
+};
+
+type BboxOrientation = 'direct' | 'clockwise' | 'counter-clockwise' | 'upside-down';
+
+type OrientedBboxCandidate = {
+  bbox: PixelBbox;
+  orientation: BboxOrientation;
+  inFrameRatio: number;
+  score: number;
+};
+
 export const OBB_CONFIDENCE_THRESHOLD = 0.85;
 
 
@@ -84,6 +100,105 @@ function computeAabb(points: Point[]) {
   return { minX, minY, maxX, maxY, width: maxX - minX, height: maxY - minY };
 }
 
+function getInFrameRatio(bbox: PixelBbox, imageWidth: number, imageHeight: number): number {
+  const left = Math.max(0, bbox.minX);
+  const top = Math.max(0, bbox.minY);
+  const right = Math.min(imageWidth, bbox.minX + bbox.width);
+  const bottom = Math.min(imageHeight, bbox.minY + bbox.height);
+  const intersectionArea = Math.max(0, right - left) * Math.max(0, bottom - top);
+  const bboxArea = bbox.width * bbox.height;
+
+  return bboxArea > 0 ? intersectionArea / bboxArea : 0;
+}
+
+/**
+ * The API can return OBB coordinates in the camera sensor's pixel space while
+ * ImageManipulator returns an EXIF-normalized image. On phones held sideways,
+ * those spaces are 90 degrees apart. Select the representation which best fits
+ * the normalized image instead of applying the server coordinates blindly.
+ */
+function resolveBboxOrientation(
+  bbox: PixelBbox,
+  imageWidth: number,
+  imageHeight: number,
+  preferredCardOrientation: 'landscape' | 'portrait' | 'either' = 'landscape',
+): OrientedBboxCandidate {
+  const candidates: Array<{ bbox: PixelBbox; orientation: BboxOrientation; priority: number }> = [
+    {
+      bbox,
+      orientation: 'direct',
+      priority: 0.75,
+    },
+    {
+      // Source canvas is imageHeight x imageWidth and is rotated clockwise.
+      bbox: {
+        minX: imageWidth - bbox.minY - bbox.height,
+        minY: bbox.minX,
+        width: bbox.height,
+        height: bbox.width,
+      },
+      orientation: 'clockwise',
+      priority: 0,
+    },
+    {
+      // Source canvas is imageHeight x imageWidth and is rotated counter-clockwise.
+      bbox: {
+        minX: bbox.minY,
+        minY: imageHeight - bbox.minX - bbox.width,
+        width: bbox.height,
+        height: bbox.width,
+      },
+      orientation: 'counter-clockwise',
+      priority: 0,
+    },
+    {
+      bbox: {
+        minX: imageWidth - bbox.minX - bbox.width,
+        minY: imageHeight - bbox.minY - bbox.height,
+        width: bbox.width,
+        height: bbox.height,
+      },
+      orientation: 'upside-down',
+      priority: -0.25,
+    },
+  ];
+
+  const scoredCandidates = candidates.map((candidate) => {
+    const candidateBbox = candidate.bbox;
+    const inFrameRatio = getInFrameRatio(candidateBbox, imageWidth, imageHeight);
+    const centerX = candidateBbox.minX + candidateBbox.width / 2;
+    const centerY = candidateBbox.minY + candidateBbox.height / 2;
+    const normalizedCenterDistance = Math.hypot(
+      (centerX - imageWidth / 2) / Math.max(1, imageWidth / 2),
+      (centerY - imageHeight / 2) / Math.max(1, imageHeight / 2),
+    );
+    const centerScore = 1 - Math.min(1, normalizedCenterDistance);
+
+    const isLandscapeCard = candidateBbox.width >= candidateBbox.height;
+    const preferredOrientationScore = preferredCardOrientation === 'either'
+      ? 0
+      : ((preferredCardOrientation === 'landscape') === isLandscapeCard ? 1 : 0);
+    const areaRatio = (candidateBbox.width * candidateBbox.height) / Math.max(1, imageWidth * imageHeight);
+    const plausibleAreaScore = Math.min(1, areaRatio / 0.08);
+
+    return {
+      bbox: candidateBbox,
+      orientation: candidate.orientation,
+      inFrameRatio,
+      score:
+        inFrameRatio * 100
+        + centerScore * 3
+        + preferredOrientationScore * 2
+        + plausibleAreaScore
+        + candidate.priority,
+    };
+  });
+
+  return scoredCandidates.reduce((best, candidate) => (
+    candidate.score > best.score ? candidate : best
+  ));
+}
+
 async function cropWeb(uri: string, points: Point[]): Promise<string> {
   return new Promise((resolve, reject) => {
     const img = new Image();
@@ -159,7 +274,12 @@ async function normalizeOrientationAndGetDimensions(
 }
 
 
-export async function cropImageWithBBoxWithTolerance(uri: string, bbox: any, tolerance: number = 0.02): Promise<string> {
+export async function cropImageWithBBoxWithTolerance(
+  uri: string,
+  bbox: any,
+  tolerance: number = 0.02,
+  preferredCardOrientation: 'landscape' | 'portrait' | 'either' = 'landscape',
+): Promise<string> {
   return new Promise<string>((resolve) => {
     let isResolved = false;
 
@@ -195,10 +315,44 @@ export async function cropImageWithBBoxWithTolerance(uri: string, bbox: any, tol
           pixelWidth = bbox.width * actualWidth;
           pixelHeight = bbox.height * actualHeight;
         } else {
-          pixelMinX = bbox.minX;
-          pixelMinY = bbox.minY;
-          pixelWidth = bbox.width;
-          pixelHeight = bbox.height;
+          const resolvedBbox = resolveBboxOrientation(
+            {
+              minX: bbox.minX,
+              minY: bbox.minY,
+              width: bbox.width,
+              height: bbox.height,
+            },
+            actualWidth,
+            actualHeight,
+            preferredCardOrientation,
+          );
+
+          if (resolvedBbox.inFrameRatio < 0.6) {
+            if (!isResolved) {
+              isResolved = true;
+              clearTimeout(timeout);
+              console.warn('OBB does not match the normalized image bounds; returning the full image.', {
+                bbox,
+                imageSize: { width: actualWidth, height: actualHeight },
+                bestOrientation: resolvedBbox.orientation,
+                inFrameRatio: resolvedBbox.inFrameRatio,
+              });
+              resolve(normalizedUri);
+            }
+            return;
+          }
+
+          if (resolvedBbox.orientation !== 'direct') {
+            console.info('Adjusted OBB coordinates for the normalized camera orientation.', {
+              orientation: resolvedBbox.orientation,
+              imageSize: { width: actualWidth, height: actualHeight },
+            });
+          }
+
+          pixelMinX = resolvedBbox.bbox.minX;
+          pixelMinY = resolvedBbox.bbox.minY;
+          pixelWidth = resolvedBbox.bbox.width;
+          pixelHeight = resolvedBbox.bbox.height;
         }
 
         // STEP 3: Add tolerance and clamp to image bounds.
@@ -309,4 +463,4 @@ export async function cropToCenterScanArea(
       }
     })();
   });
-}
+}

package/src/utils/logger.ts

@@ -1,6 +1,13 @@
 import { Platform, AppState, AppStateStatus } from 'react-native';
-import axios from 'axios';
-import KYCConfig from '../config/KYCConfig';
+import PostHog from 'posthog-react-native';
+
+const posthogClient = new PostHog('phc_qjCHjCgkdVniammXrrfLrmNPoPH5uAmkzoQMhrEhGaYR', {
+  host: 'https://eu.i.posthog.com',
+  disabled: false,
+  captureAppLifecycleEvents: false,
+  flushAt: 1,
+  flushInterval: 1000,  // Backup: flush automatically every 1 second
+});
 
 const isProduction = (): boolean => {
   if (typeof __DEV__ !== 'undefined') {
@@ -11,7 +18,6 @@ const isProduction = (): boolean => {
   }
   return false;
 };
-
 const IS_PROD = isProduction();
 
 export const logger = {
@@ -23,32 +29,16 @@ export const logger = {
 };
 
 // ==========================================
-// 2. SDK TELEMETRY LOGGER (REMOTE)
+// 2. SDK TELEMETRY LOGGER (POSTHOG ONLY)
 // ==========================================
-// 🚨 FIX 1: Changed 'warn' to 'warning' to match backend enums
-type LogLevel = 'info' | 'warning' | 'error' | 'debug'; 
-
-interface LogEntry {
-  level: LogLevel;
-  message: string;
-  timestamp: string;
-  session_id?: string;
-  metadata?: any;
-}
+type LogLevel = 'info' | 'warning' | 'error' | 'debug';
 
 class SDKTelemetryLogger {
-  private queue: LogEntry[] = [];
-  private isFlushing = false;
-  private maxQueueSize = 3;
-  private flushIntervalMs = 3000;
   private sessionId: string | undefined;
-  private apiKey: string | undefined;
-  private timerId?: ReturnType<typeof setInterval>;
   private appStateSubscription: any;
 
   constructor() {
-    this.timerId = setInterval(() => this.flush(), this.flushIntervalMs);
-
+    // Flush PostHog when the app goes into the background
     if (Platform.OS !== 'web') {
       this.appStateSubscription = AppState.addEventListener('change', this.handleAppStateChange);
     }
@@ -62,29 +52,33 @@ class SDKTelemetryLogger {
 
   public setSessionId(id: string) {
     this.sessionId = id;
-    
-    this.queue = this.queue.map(log => {
-      if (!log.session_id) {
-        return { ...log, session_id: id };
-      }
-      return log;
+    posthogClient.identify(id, {
+      kyc_session_id: id,
     });
-
-    this.flush();
   }
 
   public clearSessionId() {
     this.sessionId = undefined;
+    posthogClient.reset(); // Clears identity
   }
 
-  public setApiKey(key: string) {
-    this.apiKey = key;
+  // Kept as a no-op just in case your SDK still calls this somewhere
+  public setApiKey(_key: string) {
+    // No longer needed for PostHog
+  }
+
+  public track(eventName: string, properties?: Record<string, any>) {
+    posthogClient.capture(`[SanctumKey] ${eventName}`, {
+      session_id: this.sessionId || null,
+      os: Platform.OS,
+      osVersion: Platform.Version,
+      ...properties,
+    });
   }
 
   private parseArgs(args: any[]): { message: string, metadata: any } {
     let message = '';
     let metadata: any = {};
-
     args.forEach(arg => {
       if (typeof arg === 'string') {
         message += (message ? ' ' : '') + arg;
@@ -97,7 +91,6 @@ class SDKTelemetryLogger {
         message += (message ? ' ' : '') + String(arg);
       }
     });
-
     return { message: message || 'No message provided', metadata };
   }
 
@@ -107,77 +100,33 @@ class SDKTelemetryLogger {
     if (!IS_PROD) {
       const devPrefix = `[SDK_TELEMETRY_${level.toUpperCase()}]`;
       if (level === 'error') console.error(devPrefix, message, metadata);
-      else if (level === 'warning') console.warn(devPrefix, message, metadata); // Match updated level
+      else if (level === 'warning') console.warn(devPrefix, message, metadata);
       else console.log(devPrefix, message, metadata);
     }
 
-    const entry: LogEntry = {
-      level,
-      message: message.substring(0, 500),
-      timestamp: new Date().toISOString(),
-      session_id: this.sessionId,
-      metadata: {
-        ...metadata,
-        os: Platform.OS,
-        osVersion: Platform.Version,
-      }
+    const payloadMetadata = {
+      ...metadata,
+      os: Platform.OS,
+      osVersion: Platform.Version,
     };
 
-    this.queue.push(entry);
-
-    const isError = level === 'error';
-    const hitLimit = this.queue.length >= this.maxQueueSize;
+    const levelLabel = level.toUpperCase();
+    posthogClient.capture(`[SanctumKey] ${message}`, {
+      session_id: this.sessionId || null,
+      log_level: levelLabel,
+      ...payloadMetadata,
+    });
 
-    if (isError || (this.sessionId && hitLimit)) {
+    if (level === 'error') {
       this.flush();
     }
   }
 
   public async flush() {
-    if (this.queue.length === 0 || this.isFlushing) return;
-
-    const batch = this.queue.map(log => ({
-      ...log,
-      session_id: log.session_id || 'pre-session-startup' 
-    }));
-
-    this.isFlushing = true;
-    this.queue = [];
-
-    try {
-      const url = `${KYCConfig.getBackendUrl()}/core/sdk/logs/`; 
-      
-      const headers: Record<string, string> = { 'Content-Type': 'application/json' };
-      if (this.apiKey) {
-        headers['Authorization'] = `ApiKey ${this.apiKey}`;
-      }
-
-      await axios.post(url, { logs: batch }, {
-        headers,
-        timeout: 5000 
-      });
-    } catch (error: any) {
-      // 🚨 FIX 2: Stop Infinite Loops
-      // If the backend actively rejects our payload (400-499 error code), do NOT requeue it.
-      const isClientError = error.response && error.response.status >= 400 && error.response.status < 500;
-
-      if (!isClientError) {
-        // Only retry if it's a network failure or a 5xx Server Error
-        if (this.queue.length < 50) {
-          this.queue = [...batch, ...this.queue].slice(0, 50);
-        }
-      } else {
-        if (!IS_PROD) {
-          console.error("[SDK_TELEMETRY] Backend rejected log payload. Dropping batch to prevent infinite loop.", error.response.data);
-        }
-      }
-    } finally {
-      this.isFlushing = false;
-    }
+    await posthogClient.flush();
   }
 
   public destroy() {
-    if (this.timerId) clearInterval(this.timerId);
     if (this.appStateSubscription) this.appStateSubscription.remove();
     this.flush();
   }
@@ -192,10 +141,10 @@ export const sdkLogger = {
   destroy: () => telemetryInstance.destroy(),
   setApiKey: (key: string) => telemetryInstance.setApiKey(key),
   
+  track: (eventName: string, properties?: Record<string, any>) => telemetryInstance.track(eventName, properties),
   log: (...args: any[]) => telemetryInstance.processLog('info', ...args),
   info: (...args: any[]) => telemetryInstance.processLog('info', ...args),
-  // 🚨 FIX 1 (Continued): Map warn() function to send 'warning' to backend
-  warn: (...args: any[]) => telemetryInstance.processLog('warning', ...args), 
+  warn: (...args: any[]) => telemetryInstance.processLog('warning', ...args),
   error: (...args: any[]) => telemetryInstance.processLog('error', ...args),
   debug: (...args: any[]) => telemetryInstance.processLog('debug', ...args),
 };

package/src/web/WebKYCEntry.tsx

@@ -42,7 +42,6 @@ interface VerificationSteps {
   liveness_checked?: boolean;
 }
 
-// 🚨 MODIFIED: Accepts the webhook secret to generate the signature
 const postWebhook = async (url: string, payload: unknown, secret?: string, timeoutMs: number = 5000) => {
   const body = JSON.stringify(payload);
   
@@ -50,7 +49,6 @@ const postWebhook = async (url: string, payload: unknown, secret?: string, timeo
     'Content-Type': 'application/json',
   };
 
-  // 🚨 Generate HMAC SHA-256 Signature if secret is provided
   if (secret) {
     const signature = CryptoJS.HmacSHA256(body, secret).toString(CryptoJS.enc.Hex);
     headers['x-sanctumkey-signature'] = signature;