@smileid/usesmileid 12.0.1 → 12.0.2

package/src/presentation/flow/__tests__/flow_navigation_manager.test.ts

@@ -21,7 +21,12 @@ import {
 } from "../../../core/models/result";
 import { JobType } from "../../../core/models/job_type";
 import { DocumentType } from "../../../core/models/document_type";
-import { MissingRequiredFieldException } from "../../../core/exception";
+import { GlobalPrivacyControl } from "../../../core/models/global_privacy_control";
+import {
+  MissingJobTypeException,
+  MissingRequiredFieldException,
+  UseSmileIDErrorCode,
+} from "../../../core/exception";
 import type { UseSmileIDAnalyticsEvent } from "../analytics/use_smile_id_analytics_event";
 
 function buildScreens(block: (s: ScreensBuilder) => void): ScreensConfig {
@@ -528,6 +533,41 @@ describe("FlowNavigationManager — submission lifecycle", () => {
     expect(manager.jobSubmissionState.kind).toBe("failure");
   });
 
+  it("an unrecognised jobType fails submission with the typed builder exception", async () => {
+    const repository = new StubRepository();
+    const manager = makeManager(
+      buildScreens((screens) => screens.processing()),
+      vi.fn(),
+      {
+        userDetails: SAMPLE_USER_DETAILS,
+        network: {
+          config: {
+            jobType: 99 as JobType,
+            token: "k",
+            partnerConfig: {
+              partnerId: "p",
+              callbackUrl: "",
+              useSandbox: true,
+            },
+          },
+        },
+      },
+      repository,
+    );
+
+    manager.beginSubmissionIfNeeded();
+    await flushMicrotasks();
+    expect(manager.jobSubmissionState.kind).toBe("failure");
+    if (manager.jobSubmissionState.kind === "failure") {
+      expect(manager.jobSubmissionState.error).toBeInstanceOf(
+        MissingJobTypeException,
+      );
+      expect(
+        (manager.jobSubmissionState.error as MissingJobTypeException).errorCode,
+      ).toBe(UseSmileIDErrorCode.Builder.MissingJobType);
+    }
+  });
+
   it("beginSubmissionIfNeeded is idempotent — second call while loading is a no-op", async () => {
     const repository = new StubRepository();
     repository.manual = true;
@@ -938,6 +978,288 @@ describe("FlowNavigationManager — request assembly per JobType", () => {
   });
 });
 
+describe("FlowNavigationManager — token-provided user details & consent (assembly)", () => {
+  // Mint a structurally valid JWT with a caller-supplied payload — only
+  // the base64url-encoded middle segment is decoded.
+  function makeJwt(payload: Record<string, unknown>): string {
+    const payloadSegment = Buffer.from(JSON.stringify(payload)).toString(
+      "base64url",
+    );
+    return `eyJhbGciOiJub25lIn0.${payloadSegment}.stub-sig`;
+  }
+
+  const completeConsentClaim = {
+    granted: true,
+    granted_at: "2026-01-01T09:00:00.000Z",
+    notice_language: "EN",
+    notice_privacy_policy_url: "https://partner.test/privacy",
+  } as const;
+
+  const fullBindingToken = makeJwt({
+    payload: {
+      given_names: "pii_abc",
+      last_name: "pii_def",
+      email: "pii_ghi",
+      phone_number: "pii_jkl",
+      consent: completeConsentClaim,
+    },
+  });
+
+  // Real tokens minted by the /v3/token deployment (same fixtures as
+  // use_smile_id_token_decoder.test.ts): ES256-signed, expired minutes
+  // after minting, PII values as opaque vault references. Decoded through
+  // the production decoder so the whole flow — decode, screen skip,
+  // assembly reduction — runs exactly as in production.
+  const MINTED_FULL_BINDING_TOKEN =
+    "eyJhbGciOiJFUzI1NiIsImtpZCI6ImtleV8wMWtibWd6bXczZXloOW5jdjlqcG1kNDlqZiIsInR5cCI6IkpXVCJ9." +
+    "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." +
+    "cuZgo64eEt5vNvND_RvCVpJyTv4rqax9ebkLV4i4uI4raz6fBhazxspbaoErYC0wxwRmn5EhPAdAdDnNKI6tEQ";
+
+  const MINTED_NAMES_AND_EMAIL_TOKEN =
+    "eyJhbGciOiJFUzI1NiIsImtpZCI6ImtleV8wMWtibWd6bXczZXloOW5jdjlqcG1kNDlqZiIsInR5cCI6IkpXVCJ9." +
+    "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." +
+    "s5BFthU2B1aKxYDYyyWYDmRpLoHibH34r2Lk4OS-wZQC8pmYROjWBiORx6n2_0srmxz_SA2eZo_FHyAr-ew_Zg";
+
+  function assemble(
+    token: string,
+    extraConfig: Partial<FlowConfigurationSnapshot> = {},
+    seedManager: (m: FlowNavigationManager) => void = () => {},
+  ): {
+    readonly repository: StubRepository;
+    readonly manager: FlowNavigationManager;
+  } {
+    const repository = new StubRepository();
+    const manager = makeManager(
+      buildScreens((screens) => screens.processing()),
+      vi.fn(),
+      {
+        enhancedKYCParams: {
+          idType: "PASSPORT",
+          idNumber: "X1",
+          country: "NG",
+        },
+        ...extraConfig,
+        network: {
+          config: {
+            jobType: JobType.enhancedKyc,
+            token,
+            partnerConfig: {
+              partnerId: "p",
+              callbackUrl: "",
+              useSandbox: true,
+            },
+          },
+        },
+      },
+      repository,
+    );
+    seedManager(manager);
+    manager.beginSubmissionIfNeeded();
+    return { repository, manager };
+  }
+
+  it("assembles without userDetails when the token binds names + a contact field", () => {
+    const { repository } = assemble(fullBindingToken);
+    expect(repository.received).toHaveLength(1);
+    const request = repository.received[0]!;
+    expect(request.userDetails).toBeUndefined();
+  });
+
+  it("omits the consent record when token consent is complete and no local source exists", () => {
+    // The DEFAULT_CONSENT granted:false placeholder must NOT be emitted
+    // on the token-complete path — the server injects the token's consent.
+    const { repository } = assemble(fullBindingToken, {
+      userDetails: SAMPLE_USER_DETAILS,
+    });
+    const request = repository.received[0]!;
+    expect(request.consent).toBeUndefined();
+  });
+
+  it("still throws MissingRequiredFieldException(userDetails) when the token binds names only", async () => {
+    const namesOnlyToken = makeJwt({
+      payload: { given_names: "pii_abc", last_name: "pii_def" },
+    });
+    const { repository, manager } = assemble(namesOnlyToken);
+    await flushMicrotasks();
+    expect(repository.received).toHaveLength(0);
+    const state = manager.jobSubmissionState;
+    expect(state.kind).toBe("failure");
+    if (state.kind === "failure") {
+      expect(state.error).toBeInstanceOf(MissingRequiredFieldException);
+      expect(
+        (state.error as MissingRequiredFieldException).errorDetails,
+      ).toEqual({ fieldName: "userDetails" });
+    }
+  });
+
+  it("keeps the granted:false placeholder when token consent is only partial", () => {
+    const partialConsentToken = makeJwt({
+      payload: {
+        given_names: "pii_abc",
+        last_name: "pii_def",
+        email: "pii_ghi",
+        consent: { granted: true, granted_at: "2026-01-01T09:00:00.000Z" },
+      },
+    });
+    const { repository } = assemble(partialConsentToken);
+    const request = repository.received[0]!;
+    expect(request.consent).toEqual({
+      granted: false,
+      grantedAt: "",
+      noticeLanguage: "",
+      noticePrivacyPolicyUrl: "",
+    });
+  });
+
+  it("a complete token consent omits the consent record even when a local one exists", () => {
+    // Token data always wins: even a captured local consent is not sent —
+    // the part is omitted and the server injects the token's record.
+    const { repository } = assemble(
+      fullBindingToken,
+      { userDetails: SAMPLE_USER_DETAILS },
+      (m) => m.setConsent(consentInfo),
+    );
+    const request = repository.received[0]!;
+    expect(request.consent).toBeUndefined();
+  });
+
+  it("a complete token consent drops the consent screen from the flow", () => {
+    const repository = new StubRepository();
+    const manager = makeManager(
+      buildScreens((screens) => {
+        screens.consent((c) => {
+          c.partnerName = "Acme";
+          c.partnerPrivacyPolicyUrl = "https://example.test/privacy";
+        });
+        screens.capture((c) => {
+          c.captureType = CaptureType.selfie;
+        });
+      }),
+      vi.fn(),
+      {
+        userDetails: SAMPLE_USER_DETAILS,
+        network: {
+          config: {
+            jobType: JobType.smartSelfieEnrollment,
+            token: fullBindingToken,
+            partnerConfig: {
+              partnerId: "p",
+              callbackUrl: "",
+              useSandbox: true,
+            },
+          },
+        },
+      },
+      repository,
+    );
+    expect(manager.currentScreen?.kind).toBe("capture");
+    expect(manager.navigationPath.some((step) => step.kind === "consent")).toBe(
+      false,
+    );
+  });
+
+  it("a preset consentInformation is still sent in full when token consent is partial", () => {
+    const partialConsentToken = makeJwt({
+      payload: { consent: { granted: true } },
+    });
+    const { repository } = assemble(partialConsentToken, {
+      userDetails: SAMPLE_USER_DETAILS,
+      consentInformation: consentInfo,
+    });
+    const request = repository.received[0]!;
+    expect(request.consent).toEqual(consentInfo);
+  });
+
+  it("the minted full-binding token drives the flow end to end with nothing local", () => {
+    const repository = new StubRepository();
+    const manager = makeManager(
+      buildScreens((screens) => {
+        screens.consent((c) => {
+          c.partnerName = "Acme";
+          c.partnerPrivacyPolicyUrl = "https://example.test/privacy";
+        });
+        screens.capture((c) => {
+          c.captureType = CaptureType.selfie;
+        });
+        screens.processing();
+      }),
+      vi.fn(),
+      {
+        network: {
+          config: {
+            jobType: JobType.smartSelfieEnrollment,
+            token: MINTED_FULL_BINDING_TOKEN,
+            partnerConfig: {
+              partnerId: "p",
+              callbackUrl: "",
+              useSandbox: true,
+            },
+          },
+        },
+      },
+      repository,
+    );
+
+    expect(manager.currentScreen?.kind).toBe("capture");
+    expect(manager.navigationPath.some((step) => step.kind === "consent")).toBe(
+      false,
+    );
+
+    manager.setCapturedSelfie("file:///selfie.jpg", ["file:///l1.jpg"]);
+    manager.beginSubmissionIfNeeded();
+
+    expect(repository.received).toHaveLength(1);
+    const request = repository.received[0]!;
+    expect(request.userDetails).toBeUndefined();
+    expect(request.consent).toBeUndefined();
+  });
+
+  it("the minted names-and-email token reduces builder details to the unbound phone number", () => {
+    const { repository } = assemble(MINTED_NAMES_AND_EMAIL_TOKEN, {
+      userDetails: SAMPLE_USER_DETAILS,
+    });
+    const request = repository.received[0]!;
+    expect(request.userDetails).toEqual({ phoneNumber: "+2348000000000" });
+    expect(request.consent).toBeUndefined();
+  });
+
+  it("regression: without a payload claim the request carries userDetails and the placeholder consent", () => {
+    const legacyToken = makeJwt({ sdk_config: { livenessImageCount: 5 } });
+    const { repository } = assemble(legacyToken, {
+      userDetails: SAMPLE_USER_DETAILS,
+    });
+    const request = repository.received[0]!;
+    expect(request.userDetails).toEqual(SAMPLE_USER_DETAILS);
+    expect(request.tokenPayload).toBeUndefined();
+    expect(request.consent).toEqual({
+      granted: false,
+      grantedAt: "",
+      noticeLanguage: "",
+      noticePrivacyPolicyUrl: "",
+    });
+  });
+
+  it("allowOfflineMode skips the token decode — strict legacy assembly applies", async () => {
+    const { repository, manager } = assemble(fullBindingToken, {
+      config: {
+        enableCrashReporting: false,
+        enableDebugMode: false,
+        allowOfflineMode: true,
+        globalPrivacyControl: GlobalPrivacyControl.OptOut,
+      },
+    });
+    await flushMicrotasks();
+    // Token binds everything, but offline mode never reads it — the
+    // missing builder userDetails still fails assembly.
+    expect(repository.received).toHaveLength(0);
+    const state = manager.jobSubmissionState;
+    expect(state.kind).toBe("failure");
+    if (state.kind === "failure") {
+      expect(state.error).toBeInstanceOf(MissingRequiredFieldException);
+    }
+  });
+});
+
 describe("FlowNavigationManager — typed missing-field validation (parity)", () => {
   // Drives a submission to its failure state and returns the surfaced
   // error so we can assert the typed `MissingRequiredFieldException`