@smileid/web-components 11.0.2 → 11.1.0

package/lib/components/signature-pad/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@smileid/signature-pad",
-  "version": "1.4.2",
+  "version": "11.0.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@smileid/signature-pad",
-      "version": "1.4.2",
+      "version": "11.0.2",
       "dependencies": {
         "signature_pad": "^5.0.2"
       },
@@ -16,7 +16,7 @@
         "eslint-config-prettier": "^9.1.0",
         "eslint-plugin-cypress": "^3.3.0",
         "eslint-plugin-import": "^2.29.1",
-        "eslint-plugin-jest": "^28.6.0",
+        "eslint-plugin-jest": "^28.8.3",
         "eslint-plugin-prettier": "^5.2.1",
         "prettier": "^3.3.3"
       }
@@ -1099,10 +1099,11 @@
       }
     },
     "node_modules/eslint-plugin-jest": {
-      "version": "28.8.0",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.0.tgz",
-      "integrity": "sha512-Tubj1hooFxCl52G4qQu0edzV/+EZzPUeN8p2NnW5uu4fbDs+Yo7+qDVDc4/oG3FbCqEBmu/OC3LSsyiU22oghw==",
+      "version": "28.14.0",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.14.0.tgz",
+      "integrity": "sha512-P9s/qXSMTpRTerE2FQ0qJet2gKbcGyFTPAJipoKxmWqR6uuFqIqk8FuEfg5yBieOezVrEfAMZrEwJ6yEp+1MFQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@typescript-eslint/utils": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
@@ -1964,10 +1965,11 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },

package/lib/components/signature-pad/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smileid/signature-pad",
-  "version": "11.0.2",
+  "version": "11.1.0",
   "private": "true",
   "exports": {
     ".": "./index.js"

package/lib/components/totp-consent/src/TotpConsent.js

@@ -1,4 +1,5 @@
 import validate from 'validate.js';
+import { getDirection } from '../../../domain/localisation';
 
 function postData(url, data) {
   return fetch(url, {
@@ -284,7 +285,7 @@ function markup() {
             }
         </style>
 
-        <div class='flow center' id='id-entry'>
+        <div class='flow center' id='id-entry' dir='${this.direction}'>
             <div class="nav">
                 <div class="back-wrapper">
                     <button type='button' data-type='icon' id="back-button" class="back-button">
@@ -331,7 +332,7 @@ function markup() {
             </form>
         </div>
 
-        <div hidden class='flow center' id='select-mode'>
+        <div hidden class='flow center' id='select-mode' dir='${this.direction}'>
             <div class="nav">
                 <div class="back-wrapper">
                     <button type='button' data-type='icon' id="back-to-entry-button" class="back-button">
@@ -459,7 +460,7 @@ function markup() {
             </form>
         </div>
 
-        <div hidden class='flow center' id='otp-verification'>
+        <div hidden class='flow center' id='otp-verification' dir='${this.direction}'>
             <div class="nav justify-right">
                 <button data-type='icon' type='button' class='close-iframe'>
                     <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none">
@@ -899,6 +900,10 @@ class TotpConsent extends HTMLElement {
     return this.getAttribute('theme-color') || '#001096';
   }
 
+  get direction() {
+    return this.getAttribute('dir') || getDirection() || 'ltr';
+  }
+
   get hideBack() {
     return this.hasAttribute('hide-back');
   }

package/lib/domain/camera/src/SmartCamera.js

@@ -1,3 +1,5 @@
+import { t } from '../../localisation';
+
 class SmartCamera {
   static stream = null;
 
@@ -74,32 +76,15 @@ class SmartCamera {
     switch (e.name) {
       case 'NotAllowedError':
       case 'SecurityError':
-        return `
-              Looks like camera access was not granted, or was blocked by a browser
-              level setting / extension. Please follow the prompt from the URL bar,
-              or extensions, and enable access.
-              You may need to refresh to start all over again
-            `;
+        return t('camera.error.notAllowed');
       case 'AbortError':
-        return `
-              Oops! Something happened, and we lost access to your stream.
-              Please refresh to start all over again
-            `;
+        return t('camera.error.abort');
       case 'NotReadableError':
-        return `
-              There seems to be a problem with your device's camera, or its connection.
-              Please check this, and when resolved, try again. Or try another device.
-            `;
+        return t('camera.error.notReadable');
       case 'NotFoundError':
-        return `
-              We are unable to find a video stream.
-              You may need to refresh to start all over again
-            `;
+        return t('camera.error.notFound');
       case 'TypeError':
-        return `
-              This site is insecure, and as such cannot have access to your camera.
-              Try to navigate to a secure version of this page, or contact the owner.
-            `;
+        return t('camera.error.insecure');
       default:
         return e.message;
     }

package/lib/domain/constants/src/Constants.js

@@ -23,5 +23,33 @@ export const IMAGE_TYPE = {
 };
 
 export const DEFAULT_NO_OF_LIVENESS_FRAMES = 8;
+
+/**
+ * JPEG compression quality for captured images (selfies, liveness frames, ID documents).
+ *
+ * Value: 0.92 (92% quality)
+ *
+ * This value is optimized for identity verification and biometric matching:
+ * - Preserves fine facial details needed for accurate facial recognition
+ * - Maintains skin tone gradients without JPEG blocking artifacts
+ * - Ensures ID document text remains readable for OCR processing
+ * - Provides minimal compression artifacts that could affect liveness detection
+ *
+ * Quality comparison:
+ * - 1.0:  No compression, very large files
+ * - 0.95: Virtually lossless, larger files
+ * - 0.92: Good quality, reasonable file size
+ * - 0.85: Visible artifacts in gradients and skin tones
+ * - 0.80: Noticeable blocking artifacts that hurt matching accuracy
+ *
+ * WARNING: DO NOT LOWER THIS VALUE BELOW 0.92
+ * Reducing JPEG quality can negatively impact downstream systems:
+ * - Facial recognition matching accuracy may decrease
+ * - Liveness detection anti-spoofing checks may fail
+ * - ID document OCR text extraction may produce errors
+ * - Overall verification success rates may drop
+ *
+ */
+export const JPEG_QUALITY = 0.92;
 export const PORTRAIT_ID_PREVIEW_WIDTH = 396;
 export const PORTRAIT_ID_PREVIEW_HEIGHT = 527;

package/lib/domain/file-upload/src/SmartFileUpload.js

@@ -1,3 +1,5 @@
+import { t, tHtml } from '../../localisation';
+
 class SmartFileUpload {
   static memoryLimit = 10240000;
 
@@ -27,11 +29,7 @@ class SmartFileUpload {
         resolve(e.target.result);
       };
       reader.onerror = () => {
-        reject(
-          new Error(
-            'An error occurred reading the file. Please check the file, and try again',
-          ),
-        );
+        reject(new Error(t('fileUpload.error.readingFile')));
       };
       reader.readAsDataURL(file);
     });
@@ -39,20 +37,21 @@ class SmartFileUpload {
 
   static async retrieve(files) {
     if (files.length > 1) {
-      throw new Error('Only one file upload is permitted at a time');
+      throw new Error(t('fileUpload.error.multipleFiles'));
     }
 
     const file = files[0];
 
     if (!SmartFileUpload.supportedTypes.includes(file.type)) {
-      throw new Error(
-        'Unsupported file format. Please ensure that you are providing a JPG or PNG image',
-      );
+      throw new Error(t('fileUpload.error.unsupportedFormat'));
     }
 
     if (file.size > SmartFileUpload.memoryLimit) {
       throw new Error(
-        `${file.name} is too large. Please ensure that the file is less than ${SmartFileUpload.getHumanSize(SmartFileUpload.memoryLimit)}.`,
+        tHtml('fileUpload.error.fileTooLarge', {
+          filename: file.name,
+          size: SmartFileUpload.getHumanSize(SmartFileUpload.memoryLimit),
+        }),
       );
     }
 

package/lib/domain/localisation/index.js

@@ -0,0 +1,456 @@
+/**
+ * Minimal runtime i18n module for SmileID web components.
+ * Provides simple locale registration, loading, and translation lookup.
+ */
+
+import merge from 'lodash/merge';
+
+// Bundle supported locales for offline/instant switching
+import arLocale from '../../../locales/ar-EG.json';
+import enLocale from '../../../locales/en-GB.json';
+import frLocale from '../../../locales/fr-FR.json';
+
+// Locale alias mapping for short codes
+const LOCALE_ALIASES = {
+  ar: 'ar-EG',
+  en: 'en-GB',
+  fr: 'fr-FR',
+};
+
+/**
+ * Resolve locale alias to full locale code.
+ * @param {string} lang - Language code (e.g., 'en', 'ar', 'en-GB')
+ * @returns {string} Resolved locale code
+ */
+function resolveLocale(lang) {
+  return LOCALE_ALIASES[lang] || lang;
+}
+
+const DEFAULT_LOCALE = 'en-GB';
+const FETCH_TIMEOUT_MS = 5000;
+
+let currentLocale = DEFAULT_LOCALE;
+const locales = {
+  'ar-EG': arLocale,
+  'en-GB': enLocale,
+  'fr-FR': frLocale,
+};
+
+/**
+ * Register a locale object (in-memory).
+ * @param {string} lang - Language code (e.g., 'en-GB', 'ar-EG')
+ * @param {object} data - Locale translation object
+ */
+export function registerLocale(lang, data) {
+  locales[lang] = data;
+}
+
+/**
+ * Deep merge source object into target object.
+ * Recursively merges nested objects while preserving non-overridden values.
+ * Uses lodash merge under the hood but returns a new object (does not mutate inputs).
+ * @param {object} target - Base object to merge into
+ * @param {object} source - Object with values to merge/override
+ * @returns {object} New merged object (does not mutate inputs)
+ */
+export function deepMerge(target, source) {
+  if (!source || typeof source !== 'object') {
+    return target;
+  }
+
+  if (!target || typeof target !== 'object') {
+    return source;
+  }
+
+  // Use lodash merge with empty object as first arg to avoid mutating target
+  return merge({}, target, source);
+}
+
+/**
+ * Required translation keys for a complete locale.
+ * These are the minimum keys needed for the SDK to function properly.
+ */
+const REQUIRED_LOCALE_KEYS = [
+  'direction',
+  'common.back',
+  'common.close',
+  'common.continue',
+  'common.cancel',
+  'camera.permission.description',
+  'camera.permission.requestButton',
+  'camera.error.notAllowed',
+  'selfie.instructions.title',
+  'selfie.capture.button.takeSelfie',
+  'selfie.review.title',
+  'selfie.review.acceptButton',
+  'selfie.review.retakeButton',
+  'document.capture.captureButton',
+  'document.review.acceptButton',
+  'document.review.retakeButton',
+];
+
+/**
+ * Fetch with timeout wrapper.
+ * @param {string} url - URL to fetch
+ * @param {number} timeout - Timeout in milliseconds
+ * @returns {Promise<Response>} Fetch response
+ */
+async function fetchWithTimeout(url, timeout = FETCH_TIMEOUT_MS) {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeout);
+
+  try {
+    const response = await fetch(url, { signal: controller.signal });
+    return response;
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}
+
+/**
+ * Register a locale by URL (fetch and cache).
+ * @param {string} lang - Language code
+ * @param {string} url - URL to locale JSON file
+ * @returns {Promise<object>} Loaded locale data
+ */
+export async function registerLocaleUrl(lang, url) {
+  try {
+    const response = await fetchWithTimeout(url);
+    if (!response.ok) {
+      throw new Error(`Failed to load locale from ${url}: ${response.status}`);
+    }
+    const data = await response.json();
+    registerLocale(lang, data);
+    return data;
+  } catch (error) {
+    const errorMessage =
+      error.name === 'AbortError'
+        ? `Timeout loading locale '${lang}' from ${url}`
+        : `Error loading locale '${lang}' from ${url}: ${error.message}`;
+    console.error(errorMessage);
+
+    // Fallback to default locale if available
+    if (lang !== DEFAULT_LOCALE && locales[DEFAULT_LOCALE]) {
+      console.warn(`Falling back to default locale '${DEFAULT_LOCALE}'`);
+      return locales[DEFAULT_LOCALE];
+    }
+    throw error;
+  }
+}
+
+/**
+ * Load a locale (supports both inline registration and URL fetch).
+ * @param {string} lang - Language code
+ * @param {string} [url] - Optional URL to fetch locale from
+ * @returns {Promise<object>} Loaded locale data
+ */
+export async function loadLocale(lang, url) {
+  const resolvedLang = resolveLocale(lang);
+
+  // Return cached locale if available
+  if (locales[resolvedLang]) {
+    return locales[resolvedLang];
+  }
+
+  // Fetch from URL if provided
+  if (url) {
+    return registerLocaleUrl(lang, url);
+  }
+
+  // No URL provided and locale not cached - fallback to default
+  console.warn(
+    `Locale '${lang}' not found and no URL provided, using default '${DEFAULT_LOCALE}'`,
+  );
+  return locales[DEFAULT_LOCALE] || {};
+}
+
+/**
+ * Helper to get nested value from object using dot notation.
+ * @param {object} obj - Object to traverse
+ * @param {string} key - Dot-separated key path
+ * @returns {string|undefined} Value at path or undefined
+ */
+function getNestedValue(obj, key) {
+  if (!obj) return undefined;
+
+  const value = key.split('.').reduce((acc, k) => {
+    if (acc && typeof acc === 'object' && k in acc) {
+      return acc[k];
+    }
+    return undefined;
+  }, obj);
+
+  return typeof value === 'string' ? value : undefined;
+}
+
+/**
+ * Validate that a locale has all required translation keys.
+ * @param {object} locale - Locale data to validate
+ * @returns {{ missingKeys: string[], valid: boolean }} Validation result
+ */
+export function validateLocale(locale) {
+  if (!locale || typeof locale !== 'object') {
+    return { missingKeys: REQUIRED_LOCALE_KEYS, valid: false };
+  }
+
+  const missingKeys = REQUIRED_LOCALE_KEYS.filter((key) => {
+    if (key === 'direction') {
+      return !locale.direction;
+    }
+    return !getNestedValue(locale, key);
+  });
+
+  return {
+    missingKeys,
+    valid: missingKeys.length === 0,
+  };
+}
+
+/**
+ * Get translation for a key.
+ * Supports nested keys with dot notation (e.g., 'camera.permission.description').
+ * Fallback chain: current locale → default locale (English) → raw key.
+ * @param {string} key - Translation key
+ * @returns {string} Translated string or fallback
+ */
+export function t(key) {
+  // Try current locale first
+  const resolvedLocale = resolveLocale(currentLocale);
+  const currentLocaleData = locales[resolvedLocale];
+  const value = getNestedValue(currentLocaleData, key);
+  if (value) {
+    return value;
+  }
+
+  // Fallback to default locale if different from current
+  const resolvedDefault = resolveLocale(DEFAULT_LOCALE);
+  if (resolvedLocale !== resolvedDefault) {
+    const defaultValue = getNestedValue(locales[resolvedDefault], key);
+    if (defaultValue) {
+      return defaultValue;
+    }
+  }
+
+  // Final fallback: return the key itself
+  console.warn(`Translation key '${key}' not found in any locale`);
+  return key;
+}
+
+/**
+ * Alias for t() function.
+ * @see t
+ */
+export const translate = t;
+
+/**
+ * HTML entity map for escaping special characters.
+ */
+const HTML_ENTITIES = {
+  '"': '&quot;',
+  '&': '&amp;',
+  "'": '&#39;',
+  '<': '&lt;',
+  '>': '&gt;',
+};
+
+/**
+ * Escape HTML special characters to prevent XSS.
+ * @param {string} str - String to escape
+ * @returns {string} Escaped string
+ */
+export function escapeHtml(str) {
+  return str.replace(/[&<>"']/g, (char) => HTML_ENTITIES[char]);
+}
+
+/**
+ * Get translation with HTML interpolation for styled placeholders.
+ * Placeholders in format {{key}} will be replaced with provided values.
+ * Values can be plain strings or objects with {value, className} for styled spans.
+ * @param {string} key - Translation key
+ * @param {Object} params - Interpolation parameters
+ * @returns {string} Translated string with interpolations
+ * @example
+ * // Plain interpolation
+ * tHtml('greeting', { name: 'John' }) // "Hello, John"
+ *
+ * // Styled interpolation
+ * tHtml('consent.accessRequest', {
+ *   partnerName: { value: 'Acme', className: 'theme' }
+ * }) // "<span class="theme">Acme</span> wants to access..."
+ */
+export function tHtml(key, params = {}) {
+  let text = t(key);
+
+  Object.keys(params).forEach((paramKey) => {
+    const paramValue = params[paramKey];
+    const placeholder = `{{${paramKey}}}`;
+
+    if (paramValue && typeof paramValue === 'object' && 'value' in paramValue) {
+      // Styled interpolation: { value: 'text', className: 'theme' }
+      const escapedValue = escapeHtml(String(paramValue.value || ''));
+      const className = escapeHtml(String(paramValue.className || ''));
+      text = text
+        .split(placeholder)
+        .join(
+          className
+            ? `<span class="${className}">${escapedValue}</span>`
+            : escapedValue,
+        );
+    } else {
+      // Plain text interpolation
+      text = text.split(placeholder).join(escapeHtml(String(paramValue)));
+    }
+  });
+
+  return text;
+}
+
+/**
+ * Alias for tHtml() function.
+ * @see tHtml
+ */
+export const translateHtml = tHtml;
+
+/**
+ * Set the current locale.
+ * If the locale is not registered, it will attempt to load it from the provided URL.
+ * Applies RTL direction to document element if direction is specified in locale.
+ * @param {string} lang - Language code
+ * @param {Object} [options] - Configuration options
+ * @param {string} [options.url] - URL to fetch locale from if not registered
+ * @param {Object} [options.translation] - Complete locale data object (legacy)
+ * @param {Object} [options.locales] - Locale data keyed by language code (new API)
+ * @param {boolean} [options.validate] - Whether to validate locale completeness
+ * @returns {Promise<boolean>} Whether locale was successfully set
+ */
+export async function setCurrentLocale(
+  lang,
+  { url, translation, locales: customLocales, validate = false } = {},
+) {
+  currentLocale = resolveLocale(lang);
+  // Step 1: Process custom locales (new API - keyed by language code)
+  if (customLocales && typeof customLocales === 'object') {
+    Object.entries(customLocales).forEach(([localeKey, localeData]) => {
+      if (!localeData || typeof localeData !== 'object') {
+        return;
+      }
+
+      const resolvedKey = resolveLocale(localeKey);
+
+      if (locales[resolvedKey]) {
+        // Deep merge into existing bundled locale
+        locales[resolvedKey] = deepMerge(locales[resolvedKey], localeData);
+      } else {
+        // Register as new locale
+        registerLocale(resolvedKey, localeData);
+
+        // Add alias if short code provided
+        if (localeKey !== resolvedKey) {
+          LOCALE_ALIASES[localeKey] = resolvedKey;
+        }
+      }
+    });
+  }
+
+  // Step 2: Handle legacy translation option (for backward compatibility)
+  if (!locales[currentLocale]) {
+    if (translation) {
+      registerLocale(currentLocale, translation);
+    } else if (url) {
+      try {
+        await loadLocale(currentLocale, url);
+      } catch (error) {
+        console.error(
+          `Failed to load locale '${lang}', keeping current locale '${currentLocale}'`,
+        );
+        return false;
+      }
+    } else {
+      console.warn(`Locale '${lang}' not registered and no URL provided`);
+      return false;
+    }
+  }
+
+  // Step 3: Validate locale completeness if requested
+  if (validate && locales[currentLocale]) {
+    const validation = validateLocale(locales[currentLocale]);
+    if (!validation.valid) {
+      console.warn(
+        `Locale '${lang}' is missing required keys:`,
+        validation.missingKeys,
+      );
+    }
+  }
+
+  // Step 4: Apply RTL/LTR direction if specified in locale data
+  const locale = locales[currentLocale];
+  if (locale && locale.direction && document?.documentElement) {
+    document.documentElement.dir = locale.direction;
+  }
+
+  return true;
+}
+
+/**
+ * Get the current locale.
+ * @returns {string} Current language code
+ */
+export function getCurrentLocale() {
+  return currentLocale;
+}
+
+/**
+ * Get the default locale code.
+ * @returns {string} Default language code
+ */
+export function getDefaultLocale() {
+  return DEFAULT_LOCALE;
+}
+
+/**
+ * Check if a locale is registered.
+ * @param {string} lang - Language code
+ * @returns {boolean} Whether locale is registered
+ */
+export function hasLocale(lang) {
+  return lang in locales;
+}
+
+/**
+ * Set document direction based on locale direction property.
+ * @param {string} lang - Language code
+ */
+export function setDocumentDir(lang) {
+  const locale = locales[lang];
+  if (locale && locale.direction) {
+    document.documentElement.dir = locale.direction;
+  }
+}
+
+/**
+ * Get the text direction for the current locale.
+ * @returns {string} Direction ('ltr' or 'rtl'), defaults to 'ltr'
+ */
+export function getDirection() {
+  const locale = locales[currentLocale];
+  return locale?.direction || 'ltr';
+}
+
+export default {
+  deepMerge,
+  escapeHtml,
+  getCurrentLocale,
+  getDefaultLocale,
+  getDirection,
+  hasLocale,
+  loadLocale,
+  registerLocale,
+  registerLocaleUrl,
+  setCurrentLocale,
+  setDocumentDir,
+  t,
+  tHtml,
+  translate,
+  translateHtml,
+  validateLocale,
+};