@trustchex/react-native-sdk 1.488.0 → 1.490.1

package/src/Shared/Libs/sendDiagnosticReport.ts

@@ -1,58 +1,30 @@
 /**
- * Assembles and shares the support diagnostic report.
+ * Assembles and uploads the support diagnostic report to the backend.
  *
- * `react-native-share` is an OPTIONAL dependency: the host app opts into the
- * diagnostic feature by installing it. When it's present we open the OS share
- * sheet with the full report (the user picks email / WhatsApp / Drive / etc. and
- * reviews before sending); when it's absent the feature is silently unavailable
- * — `isDiagnosticSharingAvailable()` returns false and the result-screen button
- * renders nothing, so apps that don't want it incur no dependency.
+ * This runs from the SDK's DEMO flow only, which is simulated client-side and
+ * has no real verification session or account — so there's no session key to
+ * encrypt with and nothing to authenticate against. The report is POSTed
+ * unauthenticated to the global demo-diagnostics endpoint over HTTPS (encrypted
+ * in transit); the backend encrypts the PII fields at rest. Internal developers
+ * view and download the reports from a hidden dashboard page.
  *
- * Attached files (staged to a temp dir via react-native-fs, already an SDK dep):
- *  - `diagnostics.json` — technical signals (device, camera, MRZ, NFC steps),
- *  - `scan-data.json`   — the scanned identity data (PII; user reviews it),
- *  - the captured document/face images.
- *
- * The readable summary rides as the share `message` so it's visible in the
- * draft regardless of the chosen app.
+ * Uploaded payload (one JSON body):
+ *  - non-PII technical metadata (platform, sdkVersion, documentType,
+ *    nfcErrorCode, paceFallbackReason, succeeded) for the list/filter,
+ *  - `diagnosticsJson` — technical signals (device, camera, MRZ, NFC steps),
+ *  - `scanDataJson`   — the scanned identity data (PII),
+ *  - `images`         — the captured document/face images (base64, PII).
  */
-import RNFS from 'react-native-fs';
+import 'react-native-get-random-values';
 import { diagnostics } from './diagnostics';
 import { gatherDeviceDetails } from './native-device-info.utils';
 import {
   buildDiagnosticReport,
   type ScanDataForReport,
 } from './diagnosticReport';
+import { signDiagnosticBody } from './diagnosticAuth';
 import { logError } from './debug.utils';
 
-// `react-native-share` is OPTIONAL. Load it softly so the SDK bundles and runs
-// without it; only host apps that installed it get the diagnostic feature. A
-// static `import` would make Metro fail to resolve the module when it's absent,
-// so we use a guarded require and keep the reference typed loosely.
-type ShareModule = {
-  open: (options: Record<string, unknown>) => Promise<unknown>;
-};
-
-let shareModule: ShareModule | null | undefined;
-
-const loadShare = (): ShareModule | null => {
-  if (shareModule !== undefined) return shareModule;
-  try {
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const mod = require('react-native-share');
-    shareModule = (mod?.default ?? mod) as ShareModule;
-  } catch {
-    shareModule = null; // not installed — feature unavailable
-  }
-  return shareModule;
-};
-
-/**
- * Whether diagnostic sharing is available (i.e. `react-native-share` is
- * installed in the host app). The result-screen button hides itself when false.
- */
-export const isDiagnosticSharingAvailable = (): boolean => loadShare() != null;
-
 export interface DiagnosticImage {
   /** Stable file name without extension, e.g. "mrz-side". */
   name: string;
@@ -61,105 +33,106 @@ export interface DiagnosticImage {
 }
 
 export interface SendDiagnosticParams {
+  /** Backend base URL (same value the SDK was initialised with). */
+  baseUrl: string;
+  /** Demo session id (informational; the endpoint is unauthenticated). */
+  sessionId?: string;
   scan: ScanDataForReport;
   sdkVersion: string;
-  sessionId?: string;
   /** base64 images to attach (MRZ side / front / face / NFC chip face). */
   images?: DiagnosticImage[];
 }
 
-
-const writeTemp = async (
-  dir: string,
-  name: string,
-  data: string,
-  encoding: 'utf8' | 'base64'
-): Promise<string> => {
-  const path = `${dir}/${name}`;
-  await RNFS.writeFile(path, data, encoding);
-  return path.startsWith('file://') ? path : `file://${path}`;
-};
-
 export interface SendResult {
-  shared: boolean;
-  /** True when the user dismissed the share sheet (not an error). */
-  dismissed?: boolean;
+  /** True when the report was uploaded and stored. */
+  uploaded: boolean;
 }
 
+const mimeToType = (mime: 'jpg' | 'png'): string =>
+  mime === 'png' ? 'image/png' : 'image/jpeg';
+
 /**
- * Build the report, stage attachments, and present the share sheet. Returns
- * { shared } — false on error, with `dismissed` set when the user cancelled.
+ * Build the report and upload it (over HTTPS) to the demo-diagnostics endpoint.
+ * Returns { uploaded } — false on any error (best-effort; a failed report must
+ * never disrupt the user's flow).
  */
 export const sendDiagnosticReport = async (
   params: SendDiagnosticParams
 ): Promise<SendResult> => {
-  const share = loadShare();
-  if (!share) {
-    // Optional dependency not installed — nothing to do.
-    return { shared: false };
+  const { baseUrl, sessionId, scan, sdkVersion, images = [] } = params;
+  if (!baseUrl) {
+    return { uploaded: false };
   }
-  const { scan, sdkVersion, sessionId, images = [] } = params;
+
   const now = Date.now();
   const iso = new Date(now).toISOString();
 
-  const device = await gatherDeviceDetails();
-  const report = buildDiagnosticReport({
-    diag: diagnostics.snapshot(now, iso),
-    device,
-    scan,
-    sdkVersion,
-    sessionId,
-  });
-
-  const dir = `${RNFS.TemporaryDirectoryPath}/trustchex-diagnostics-${now}`;
   try {
-    await RNFS.mkdir(dir);
-    const urls: string[] = [];
-    urls.push(
-      await writeTemp(dir, 'diagnostics.json', report.diagnosticsJson, 'utf8')
-    );
-    urls.push(
-      await writeTemp(dir, 'scan-data.json', report.scanDataJson, 'utf8')
-    );
-    for (const img of images) {
-      if (!img.base64) continue;
-      urls.push(
-        await writeTemp(dir, `${img.name}.${img.mime}`, img.base64, 'base64')
-      );
-    }
+    const device = await gatherDeviceDetails();
+    const snapshot = diagnostics.snapshot(now, iso);
+    const report = buildDiagnosticReport({
+      diag: snapshot,
+      device,
+      scan,
+      sdkVersion,
+      sessionId,
+    });
+
+    // Queryable, non-PII technical metadata for the dashboard list/filter.
+    const nfc = snapshot.nfc;
+    const failingSw = nfc.failureStep
+      ? nfc.steps.find((s) => s.step === nfc.failureStep && !s.ok)?.sw
+      : undefined;
+    const nfcErrorCode =
+      nfc.attempted && !nfc.succeeded
+        ? `NFC-${(nfc.errorCategory ?? 'reading_error').toUpperCase()}${failingSw ? `-${failingSw}` : ''}`
+        : null;
+
+    const payload = {
+      // metadata (stored in plaintext, no PII)
+      platform: device.platform,
+      osVersion: device.systemVersion,
+      sdkVersion,
+      documentType: scan.documentType ?? snapshot.documentType ?? null,
+      dataSource: scan.dataSource ?? snapshot.dataSource ?? null,
+      nfcErrorCode,
+      paceFallbackReason: nfc.paceFallbackReason ?? null,
+      succeeded: nfc.attempted ? nfc.succeeded : null,
+      // full report (PII, encrypted at rest by the backend)
+      diagnosticsJson: report.diagnosticsJson,
+      scanDataJson: report.scanDataJson,
+      images: images
+        .filter((img) => img.base64)
+        .map((img) => ({
+          name: img.name,
+          base64: img.base64,
+          mimeType: mimeToType(img.mime),
+        })),
+    };
+
+    // Sign the EXACT body bytes so the backend can verify authenticity. Use
+    // fetch directly (httpClient doesn't expose custom headers / raw body).
+    const rawBody = JSON.stringify(payload);
+    const { timestamp, nonce, signature } = signDiagnosticBody(rawBody);
+
+    const response = await fetch(`${baseUrl}/api/app/mobile/diagnostics`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Trustchex-Timestamp': timestamp,
+        'X-Trustchex-Nonce': nonce,
+        'X-Trustchex-Signature': signature,
+      },
+      body: rawBody,
+    });
 
-    try {
-      await share.open({
-        title: report.subject,
-        subject: report.subject, // used by email targets
-        message: report.body,
-        urls,
-        // Per-file MIME types so targets render attachments correctly.
-        filenames: urls.map((u) => u.split('/').pop() ?? 'attachment'),
-        failOnCancel: false,
-      });
-      return { shared: true };
-    } catch (shareErr) {
-      // react-native-share throws on user cancel unless failOnCancel:false; treat
-      // a cancel as a non-error dismissal.
-      const msg =
-        shareErr instanceof Error ? shareErr.message : String(shareErr);
-      if (/cancel|dismiss|user did not share/i.test(msg)) {
-        return { shared: false, dismissed: true };
-      }
-      throw shareErr;
-    }
+    return { uploaded: response.ok };
   } catch (e) {
     logError(
       'Diagnostics',
-      'Failed to share diagnostic report',
+      'Failed to upload diagnostic report',
       e instanceof Error ? e.message : String(e)
     );
-    return { shared: false };
-  } finally {
-    // Best-effort cleanup — temp files are short-lived.
-    setTimeout(() => {
-      RNFS.unlink(dir).catch(() => {});
-    }, 60_000);
+    return { uploaded: false };
   }
 };

package/src/Translation/Resources/en.ts

@@ -54,18 +54,15 @@ export default {
   'resultScreen.demoVerbalConsentText': 'Text',
   'resultScreen.demoStartOver': 'Start Over',
   'diagnosticReport.button': 'Report a scanning issue',
-  'diagnosticReport.noticeTitle': 'Share diagnostic report',
+  'diagnosticReport.noticeTitle': 'Report a scanning issue',
   'diagnosticReport.noticeBody':
-    'This opens a draft with your scan data, document images and technical details so support can help resolve a scanning issue. Review it before sending.',
+    'This sends your scan data, document images and technical details to support so they can help resolve a scanning issue.',
   'diagnosticReport.continue': 'Continue',
   'diagnosticReport.cancel': 'Cancel',
-  'diagnosticReport.shareFailedTitle': "Couldn't open the share sheet",
-  'diagnosticReport.shareFailedBody':
-    "We couldn't attach the report to share. Send it securely to support instead?",
-  'diagnosticReport.uploadAction': 'Send to support',
-  'diagnosticReport.uploadSuccess': 'Diagnostic report sent to support.',
-  'diagnosticReport.uploadFailed':
-    "Couldn't send the report. Please try again later.",
+  'diagnosticReport.sentTitle': 'Report sent',
+  'diagnosticReport.sentBody': 'Your diagnostic report was sent to support. Thank you.',
+  'diagnosticReport.failedTitle': "Couldn't send the report",
+  'diagnosticReport.failedBody': 'Please try again later.',
   'livenessDetectionScreen.guideHeader': 'Face Verification',
   'livenessDetectionScreen.guideText':
     'Please ensure the following for best results:',

package/src/Translation/Resources/tr.ts

@@ -54,18 +54,15 @@ export default {
   'resultScreen.demoVerbalConsentText': 'Metin',
   'resultScreen.demoStartOver': 'Baştan Başla',
   'diagnosticReport.button': 'Tarama sorununu bildir',
-  'diagnosticReport.noticeTitle': 'Tanılama raporu paylaş',
+  'diagnosticReport.noticeTitle': 'Tarama sorununu bildir',
   'diagnosticReport.noticeBody':
-    'Bu işlem; tarama verilerinizi, belge görüntülerinizi ve teknik ayrıntıları içeren bir taslak açar; böylece destek ekibi tarama sorununu çözebilir. Göndermeden önce gözden geçirin.',
+    'Bu işlem; tarama verilerinizi, belge görüntülerinizi ve teknik ayrıntıları destek ekibine gönderir; böylece tarama sorununu çözebilirler.',
   'diagnosticReport.continue': 'Devam et',
   'diagnosticReport.cancel': 'İptal',
-  'diagnosticReport.shareFailedTitle': 'Paylaşım ekranı açılamadı',
-  'diagnosticReport.shareFailedBody':
-    'Raporu paylaşmak için ekleyemedik. Bunun yerine destek ekibine güvenli şekilde gönderelim mi?',
-  'diagnosticReport.uploadAction': 'Desteğe gönder',
-  'diagnosticReport.uploadSuccess': 'Tanılama raporu destek ekibine gönderildi.',
-  'diagnosticReport.uploadFailed':
-    'Rapor gönderilemedi. Lütfen daha sonra tekrar deneyin.',
+  'diagnosticReport.sentTitle': 'Rapor gönderildi',
+  'diagnosticReport.sentBody': 'Tanılama raporunuz destek ekibine gönderildi. Teşekkürler.',
+  'diagnosticReport.failedTitle': 'Rapor gönderilemedi',
+  'diagnosticReport.failedBody': 'Lütfen daha sonra tekrar deneyin.',
   'livenessDetectionScreen.guideHeader': 'Yüz Doğrulaması',
   'livenessDetectionScreen.guideText':
     'En iyi sonuç için lütfen şunları sağlayın:',

package/src/version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.488.0';
+export const SDK_VERSION = '1.490.1';