@truly-you/trulyyou-web-sdk 0.1.13 → 0.1.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.esm.js +1 -1
- package/dist/index.esm.js.map +1 -1
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/dist/index.umd.js +1 -1
- package/dist/index.umd.js.map +1 -1
- package/package.json +1 -1
- package/src/sdk/TrulyYouSDK.ts +35 -28
package/package.json
CHANGED
package/src/sdk/TrulyYouSDK.ts
CHANGED
|
@@ -320,40 +320,47 @@ export class TrulyYouSDK {
|
|
|
320
320
|
}
|
|
321
321
|
|
|
322
322
|
const handleMessage = async (event: MessageEvent) => {
|
|
323
|
-
|
|
323
|
+
const data = event.data as any
|
|
324
324
|
|
|
325
|
-
|
|
326
|
-
|
|
327
|
-
|
|
328
|
-
|
|
329
|
-
|
|
330
|
-
|
|
331
|
-
}
|
|
325
|
+
// Log ALL messages during probe to debug
|
|
326
|
+
console.log('[SDK-PROBE-DEBUG]: Message received - type:', data?.type, 'origin:', event.origin, 'data:', data)
|
|
327
|
+
|
|
328
|
+
// Only process probe-related messages
|
|
329
|
+
if (data?.type === 'KEY_CHECK_RESULT' || data?.type === 'KEY_CHECK_FAILED') {
|
|
330
|
+
console.log('[SDK-PROBE]: Processing probe message:', event.data, 'from origin:', event.origin)
|
|
332
331
|
|
|
333
|
-
|
|
334
|
-
|
|
335
|
-
|
|
336
|
-
|
|
337
|
-
|
|
332
|
+
try {
|
|
333
|
+
const frontendOrigin = new URL(this.frontendUrl).origin
|
|
334
|
+
console.log('[SDK-PROBE]: Checking origin - expected:', frontendOrigin, 'received:', event.origin)
|
|
335
|
+
if (event.origin !== frontendOrigin) {
|
|
336
|
+
console.log('[SDK-PROBE]: Origin mismatch, ignoring message')
|
|
337
|
+
return
|
|
338
|
+
}
|
|
339
|
+
|
|
340
|
+
} catch (e) {
|
|
341
|
+
console.log('[SDK-PROBE]: Origin check failed, using hostname fallback')
|
|
342
|
+
if (!event.origin.includes(window.location.hostname)) {
|
|
343
|
+
console.log('[SDK-PROBE]: Hostname not in origin, ignoring message')
|
|
344
|
+
return
|
|
345
|
+
}
|
|
338
346
|
}
|
|
339
|
-
}
|
|
340
347
|
|
|
341
|
-
|
|
342
|
-
|
|
343
|
-
|
|
344
|
-
|
|
345
|
-
|
|
346
|
-
|
|
347
|
-
|
|
348
|
-
|
|
349
|
-
|
|
350
|
-
|
|
348
|
+
console.log('[SDK-PROBE]: Message passed origin check, type:', data?.type)
|
|
349
|
+
|
|
350
|
+
if (data?.type === 'KEY_CHECK_RESULT') {
|
|
351
|
+
console.log('[SDK-PROBE]: KEY_CHECK_RESULT received - hasKey:', data.hasKey, 'keyId:', data.keyId)
|
|
352
|
+
cleanup()
|
|
353
|
+
if (data.hasKey && data.keyId) {
|
|
354
|
+
// Key found in localStorage - it will be validated when used in /api/signatures/create
|
|
355
|
+
resolve(data.keyId)
|
|
356
|
+
} else {
|
|
357
|
+
resolve(null)
|
|
358
|
+
}
|
|
359
|
+
} else if (data?.type === 'KEY_CHECK_FAILED') {
|
|
360
|
+
console.log('[SDK-PROBE]: KEY_CHECK_FAILED received')
|
|
361
|
+
cleanup()
|
|
351
362
|
resolve(null)
|
|
352
363
|
}
|
|
353
|
-
} else if (data?.type === 'KEY_CHECK_FAILED') {
|
|
354
|
-
console.log('[SDK-PROBE]: KEY_CHECK_FAILED received')
|
|
355
|
-
cleanup()
|
|
356
|
-
resolve(null)
|
|
357
364
|
}
|
|
358
365
|
}
|
|
359
366
|
|