@smileid/usesmileid 12.4.0 → 12.4.1-SNAPSHOT.82

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -552,10 +552,10 @@ A `"captured"` result carries a `CapturedJob`:
552
552
  | `frontDocument`, `backDocument` | `string \| undefined` | Document side URIs for document jobs |
553
553
  | `visaDocument` | `string \| undefined` | The visa page URI, for Residency Document Verification |
554
554
  | `headers` | `Readonly<Record<string, string>>` | `smileid-token`, `smileid-source-sdk` and `smileid-source-sdk-version`, to send as request headers |
555
- | `encryptedPackage` | `string` | The rest of the request, sealed for Smile ID; send it as the `encrypted_package` form field |
555
+ | `encryptedPackage` | `string` | The rest of the request, sealed with a key the SDK carries; send it as the `encrypted_package` form field |
556
556
  | `packageNonce`, `packageTag` | `string` | The package's nonce and tag; send them as the `package_nonce` and `package_tag` form fields |
557
557
 
558
- To forward the job, send the job type's `/v3` request with `headers`, the images as their usual form parts, and the three package fields. The package holds everything else the SDK would have sent (the consent record, the metadata and the request signature), encrypted with AES-256-GCM for Smile ID. Forward it as is: the server rejects a package that was changed. Forward the image files byte-for-byte too: they carry an integrity seal that re-encoding invalidates. A document imported from the gallery or taken with the manual shutter is kept in the app's cache, which the OS may clear under storage pressure, so forward such a job promptly.
558
+ To forward the job, send the job type's `/v3` request with `headers`, the images as their usual form parts, and the three package fields. The package holds everything else the SDK would have sent (the consent record, the metadata and the request signature), sealed with AES-256-GCM under a key the SDK carries. Forward it as is: the server rejects a package that was changed. Forward the image files byte-for-byte too: they carry an integrity tag that re-encoding invalidates. A document imported from the gallery or taken with the manual shutter is kept in the app's cache, which the OS may clear under storage pressure, so forward such a job promptly.
559
559
 
560
560
  Send each file under the form part the SDK would have used: `selfieImage` as `selfie_image`, `livenessImages` as `liveness_images` in the list's order, `frontDocument` as `document`, `backDocument` as `document_back` and `visaDocument` as `visa`. The request signature in the package covers the images by part name and order, so the server rejects a job sent any other way. Forward the job before its access token expires: `headers` carries the token from the capture, and the server rejects the job once that token has expired.
561
561
 
@@ -12,9 +12,9 @@ import type { SealedJobRequest } from "./sealed_job_request";
12
12
  *
13
13
  * Everything else the SDK would have sent (the consent record, the metadata,
14
14
  * the signature and the other `smileid-*` headers) travels inside
15
- * `encryptedPackage`, encrypted for Smile ID: forward it as is, since the
16
- * server rejects a package that was changed. The image files must
17
- * reach the server byte-for-byte too, since they carry an integrity seal that
15
+ * `encryptedPackage`, sealed with a key the SDK carries: forward it as is,
16
+ * since the server rejects a package that was changed. The image files must
17
+ * reach the server byte-for-byte too, since they carry an integrity tag that
18
18
  * a re-encode invalidates. The SDK deletes neither the files nor
19
19
  * `sessionDirectory` in this mode: once the job has been forwarded, delete
20
20
  * every file it lists, then `sessionDirectory` and everything left in it.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@smileid/usesmileid",
3
- "version": "12.4.0",
3
+ "version": "12.4.1-SNAPSHOT.82",
4
4
  "description": "Official Smile ID React Native (Expo) SDK for identity verification: selfie capture, liveness checks, and document verification powered by on-device ML.",
5
5
  "homepage": "https://usesmileid.com",
6
6
  "repository": {
@@ -51,8 +51,8 @@
51
51
  "@smileid/kamera": "1.3.0",
52
52
  "@smileid/njia": "1.0.0",
53
53
  "zod": "^4.6.7",
54
- "@smileid/usesmileid_bridge": "12.4.0",
55
- "@smileid/usesmileid_platform_interface": "12.4.0"
54
+ "@smileid/usesmileid_bridge": "12.4.1-SNAPSHOT.82",
55
+ "@smileid/usesmileid_platform_interface": "12.4.1-SNAPSHOT.82"
56
56
  },
57
57
  "peerDependencies": {
58
58
  "@react-native-async-storage/async-storage": ">=1.21.0",