@trustchex/react-native-sdk 1.500.2 → 1.501.0

package/src/Shared/Types/identificationInfo.ts

@@ -1,5 +1,6 @@
 import type { MRZFields } from './mrzFields';
 import type { LivenessInstructionType } from './livenessIntructionType';
+import type { ChipVizMatchResult } from '../Libs/chipVizMatch';
 
 export interface IdentificationInfo {
   sessionId: string;
@@ -7,8 +8,21 @@ export interface IdentificationInfo {
   consent: {
     contractIds: string[];
     deviceInfo: string;
+    /**
+     * Coarse device geolocation ("lat,lng"), captured when a workflow step
+     * enables collectGeolocation (MASAK §4/C(1)(e) technical data). Optional —
+     * null/absent when not collected or unavailable.
+     */
+    geolocation?: string | null;
+    /**
+     * True when the workflow step required geolocation (collectGeolocation). Lets
+     * the server raise a suspicion signal if geolocation came back null.
+     */
+    geolocationExpected?: boolean;
   };
   scannedDocument?: ScannedIdentityDocument;
+  /** Captured address + proof document (MASAK 4/C(1)(d) ADDRESS_CAPTURE step). */
+  address?: CapturedAddress;
   livenessDetection?: LivenessDetection;
   locale: string;
   authToken?: string;
@@ -36,6 +50,25 @@ export interface ScannedIdentityDocument {
   barcodeValue?: string;
   mrzText?: string;
   mrzFields?: MRZFields;
+  /**
+   * The printed/VIZ MRZ from the camera scan, preserved separately from
+   * mrzFields (which the EID path overwrites with the chip MRZ). Sent to the
+   * backend so it can independently re-derive the chip↔VIZ match (MASAK 4/C).
+   */
+  vizMrzFields?: MRZFields;
+  /**
+   * The client-side chip↔VIZ match verdict. Advisory — the server re-derives
+   * the authoritative verdict. Recorded for every EID scan as a security signal.
+   */
+  chipVizMatch?: ChipVizMatchResult;
+  /**
+   * Passive Authentication artifacts (ICAO 9303-11 §5.1), present only when the
+   * eID step ran with passiveAuth. `paSodBase64` is the raw EF.SOD for
+   * server-side signature + CSCA chaining; `paIntegrityStatus` is the
+   * on-device DG-hash check.
+   */
+  paSodBase64?: string | null;
+  paIntegrityStatus?: 'MATCH' | 'TAMPERED' | 'INCOMPLETE' | null;
 }
 
 export interface LivenessDetection {
@@ -43,6 +76,23 @@ export interface LivenessDetection {
   videoPath: string;
 }
 
+/**
+ * Address captured in the ADDRESS_CAPTURE step (MASAK 4/C(1)(d)). The text may
+ * be pre-filled from the chip's DG11 address and edited by the user. The proof
+ * image is a photo/scan of a supporting document (residence cert, utility bill
+ * ≤3 months, public-authority doc).
+ */
+export interface CapturedAddress {
+  /** Free-form address line(s) as entered/confirmed by the user. */
+  addressText: string;
+  /** True when the addressText was pre-filled from the chip's DG11 address. */
+  fromChip: boolean;
+  /** Base64 proof-document image (no data-URI prefix), if captured. */
+  proofImage?: string;
+  /** MIME type of proofImage, e.g. "image/jpeg". */
+  proofImageMimeType?: string;
+}
+
 export interface WorkflowStep {
   id?: string;
   type:
@@ -52,7 +102,8 @@ export interface WorkflowStep {
     | 'LIVENESS_CHECK'
     | 'VERBAL_CONSENT'
     | 'AML_CHECK'
-    | 'VIDEO_CALL';
+    | 'VIDEO_CALL'
+    | 'ADDRESS_CAPTURE';
   data?: {
     contracts?: {
       en: {
@@ -67,11 +118,55 @@ export interface WorkflowStep {
       };
     };
     allowedDocumentTypes?: ('I' | 'P')[] | null;
-    allowedCountries?: 'TUR'[] | null;
+    /** ICAO-3 allow-list of accepted document issuers/nationalities. Empty/unset
+     * = all allowed. Server-driven, so the client treats these as opaque codes. */
+    allowedCountries?: string[] | null;
     allowedLivenessInstructionTypes?: LivenessInstructionType[] | null;
     voiceGuidanceActive?: boolean;
     verbalConsentTitle?: string | null;
     verbalConsentText?: string | null;
+    /**
+     * Collect coarse device geolocation during this step (MASAK 4/C(1)(e)
+     * technical data). Server-driven per-step config; defaults to off.
+     */
+    collectGeolocation?: boolean;
+    /**
+     * Terminal-reject the identification server-side when the chip↔VIZ verdict
+     * is not MATCH (MASAK 4/C(1)(b)). Enforcement is SERVER-SIDE only — the
+     * client never blocks or surfaces the verdict to the user; it computes the
+     * verdict and sends it to the backend, which decides. Defaults to off.
+     */
+    enforceChipVizMatch?: boolean;
+    /**
+     * Whether a proof document is required in the ADDRESS_CAPTURE step
+     * (MASAK 4/C(1)(d)). Defaults to true; set false to allow address-only.
+     */
+    addressProofRequired?: boolean;
+    /**
+     * Run Passive Authentication on the eID scan (ICAO 9303-11 §5.1 / MASAK
+     * 4/C(1)(b),(c)): read EF.SOD, verify on-device DG-hash integrity, and send
+     * the SOD for server-side signature + CSCA chaining. Adds NFC time (re-reads
+     * SOD + DGs); defaults to off.
+     */
+    passiveAuth?: boolean;
+    /**
+     * Risky-country block (MASAK 4/C(3)): 3-letter ICAO nationality codes the
+     * obligated party may not accept via the remote-passport flow. Enforced
+     * server-side — a document whose nationality is on this list is rejected.
+     */
+    blockedNationalities?: string[];
+    /**
+     * Require a trained operator in the video interview (MASAK 4/C(1)(a)): the
+     * VIDEO_CALL step must have had an operator connected, not just completed.
+     * Enforced server-side. Defaults to off.
+     */
+    requireOperator?: boolean;
+    /**
+     * Terminal-reject the identification server-side when Passive Authentication
+     * comes back TAMPERED. Defaults to off (the verdict is recorded and
+     * withholds the step score, but does not hard-reject unless enabled).
+     */
+    enforcePassiveAuth?: boolean;
   };
   required: boolean;
 }

package/src/Translation/Resources/en.ts

@@ -15,6 +15,8 @@ export default {
   'verificationSessionCheckScreen.or': 'or',
   'general.warning': 'Warning',
   'general.error': 'Error',
+  'general.continue': 'Continue',
+  'general.cancel': 'Cancel',
   'general.yes': 'Yes',
   'general.no': 'No',
   'general.letsGo': 'Start',
@@ -33,6 +35,8 @@ export default {
   'termsOfUseAndDataPrivacyScreen.acceptAndContinue': 'Accept and Continue',
   'resultScreen.submitting': 'Submitting your information...',
   'resultScreen.submissionFailed': 'An error occurred. Please try again later.',
+  'resultScreen.sessionTerminated':
+    'This verification could not be completed and has been ended. Please contact support if you believe this is an error.',
   'resultScreen.submissionFailedTitle': 'Submission failed',
   'resultScreen.submissionFailedRetryHint':
     'We could not submit your verification. Your information is saved — you can try again without re-scanning.',
@@ -120,10 +124,27 @@ export default {
     'Connection to the document was lost. Keep the document still against the device and try again.',
   'eidScannerScreen.nfcTimeout':
     'Reading the chip timed out. Hold the document steady against the device and try again.',
+  'addressCaptureScreen.title': 'Confirm your address',
+  'addressCaptureScreen.subtitle':
+    'Enter your current residential address and provide a supporting document.',
+  'addressCaptureScreen.prefilledFromChip':
+    'We pre-filled your address from your document chip. Please review and correct it if needed.',
+  'addressCaptureScreen.addressLabel': 'Address',
+  'addressCaptureScreen.addressPlaceholder': 'Street, number, city, country',
+  'addressCaptureScreen.proofLabel': 'Proof of address',
+  'addressCaptureScreen.proofHint':
+    'A residence certificate, or a utility bill issued within the last 3 months, or a document from a public authority.',
+  'addressCaptureScreen.captureProof': 'Capture proof document',
+  'addressCaptureScreen.retakeProof': 'Retake proof document',
+  'addressCaptureScreen.proofCameraHint':
+    'Position the document within the frame and capture.',
+  'addressCaptureScreen.capture': 'Capture',
   'eidScannerScreen.faceImageNotFound': 'Photo data not found on document.',
   'eidScannerScreen.documentCode': 'Document Type',
   'eidScannerScreen.nationality': 'Nationality',
   'eidScannerScreen.personalNumber': 'Personal Number',
+  'eidScannerScreen.address': 'Address',
+  'eidScannerScreen.location': 'Location',
   'eidScannerScreen.documentNumber': 'Document Number',
   'eidScannerScreen.name': 'Name',
   'eidScannerScreen.surname': 'Surname',

package/src/Translation/Resources/tr.ts

@@ -14,6 +14,8 @@ export default {
   'verificationSessionCheckScreen.or': 'veya',
   'general.warning': 'Uyarı',
   'general.error': 'Hata',
+  'general.continue': 'Devam Et',
+  'general.cancel': 'İptal',
   'general.yes': 'Evet',
   'general.no': 'Hayır',
   'general.letsGo': 'Başla',
@@ -33,6 +35,8 @@ export default {
   'resultScreen.submitting': 'Bilgileriniz gönderiliyor...',
   'resultScreen.submissionFailed':
     'Bir hata oluştu. Lütfen daha sonra tekrar deneyin.',
+  'resultScreen.sessionTerminated':
+    'Bu doğrulama tamamlanamadı ve sonlandırıldı. Bir hata olduğunu düşünüyorsanız lütfen destek ekibiyle iletişime geçin.',
   'resultScreen.submissionFailedTitle': 'Gönderim başarısız',
   'resultScreen.submissionFailedRetryHint':
     'Doğrulamanız gönderilemedi. Bilgileriniz kaydedildi — yeniden taramadan tekrar deneyebilirsiniz.',
@@ -120,10 +124,27 @@ export default {
     'Belge ile bağlantı kesildi. Belgeyi cihaza sabit tutun ve tekrar deneyin.',
   'eidScannerScreen.nfcTimeout':
     'Çip okuması zaman aşımına uğradı. Belgeyi cihaza sabit tutup tekrar deneyin.',
+  'addressCaptureScreen.title': 'Adresinizi doğrulayın',
+  'addressCaptureScreen.subtitle':
+    'Güncel yerleşim adresinizi girin ve destekleyici bir belge sağlayın.',
+  'addressCaptureScreen.prefilledFromChip':
+    'Adresiniz belge yongasından önceden dolduruldu. Lütfen kontrol edin ve gerekirse düzeltin.',
+  'addressCaptureScreen.addressLabel': 'Adres',
+  'addressCaptureScreen.addressPlaceholder': 'Cadde, numara, şehir, ülke',
+  'addressCaptureScreen.proofLabel': 'Adres kanıtı',
+  'addressCaptureScreen.proofHint':
+    'Yerleşim yeri belgesi veya son 3 ay içinde düzenlenmiş bir fatura ya da bir kamu kurumu tarafından verilen belge.',
+  'addressCaptureScreen.captureProof': 'Kanıt belgesini çek',
+  'addressCaptureScreen.retakeProof': 'Kanıt belgesini yeniden çek',
+  'addressCaptureScreen.proofCameraHint':
+    'Belgeyi çerçeveye yerleştirin ve fotoğraf çekin.',
+  'addressCaptureScreen.capture': 'Çek',
   'eidScannerScreen.faceImageNotFound': 'Belgede fotoğraf verisi bulunamadı.',
   'eidScannerScreen.documentCode': 'Belge Türü',
   'eidScannerScreen.nationality': 'Uyruk',
   'eidScannerScreen.personalNumber': 'Vatandaşlık No',
+  'eidScannerScreen.address': 'Adres',
+  'eidScannerScreen.location': 'Konum',
   'eidScannerScreen.documentNumber': 'Belge No',
   'eidScannerScreen.name': 'Ad',
   'eidScannerScreen.surname': 'Soyad',

package/src/Trustchex.tsx

@@ -23,6 +23,7 @@ import VerificationSessionCheckScreen from './Screens/Static/VerificationSession
 import QrCodeScanningScreen from './Screens/Static/QrCodeScanningScreen';
 import VideoCallScreen from './Screens/Dynamic/VideoCallScreen';
 import VerbalConsentScreen from './Screens/Dynamic/VerbalConsentScreen';
+import AddressCaptureScreen from './Screens/Dynamic/AddressCaptureScreen';
 import OTPVerificationScreen from './Screens/Static/OTPVerificationScreen';
 import MRZTestScreen from './Screens/Debug/MRZTestScreen';
 import BarcodeTestScreen from './Screens/Debug/BarcodeTestScreen';
@@ -328,6 +329,10 @@ const Trustchex: React.FC<TrustchexProps> = ({
                   name="VerbalConsentScreen"
                   component={VerbalConsentScreen}
                 />
+                <Stack.Screen
+                  name="AddressCaptureScreen"
+                  component={AddressCaptureScreen}
+                />
                 <Stack.Screen name="MRZTestScreen" component={MRZTestScreen} />
                 <Stack.Screen
                   name="BarcodeTestScreen"

package/src/version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.500.2';
+export const SDK_VERSION = '1.501.0';