cordova-digital-onboarding 1.0.1 → 1.1.0

package/lib/index.js

@@ -135,14 +135,85 @@ var WDOLogger = /** @class */ (function () {
  *
  * SPDX-License-Identifier: Apache-2.0
  */
-// TODO: add ERROR codes
+/** Represent error thrown from a WDO library */
 var WDOError = /** @class */ (function () {
-    function WDOError(message, additionalInfo) {
+    /* @internal */
+    function WDOError(reason, message, additionalInfo) {
+        /** Helper to identify this object as a WDOError */
+        this.isWdoError = true;
+        this.reason = reason;
         this.message = message;
         this.additionalInfo = additionalInfo;
     }
+    Object.defineProperty(WDOError.prototype, "allowOnboardingOtpRetry", {
+        /**
+         * Whether retrying OTP is allowed based on remaining attempts.
+         *
+         * This may be filled only when the error reason is `WDOErrorReason.activationFailed`.
+         */
+        get: function () { return this.onboardingOtpRemainingAttempts !== undefined && this.onboardingOtpRemainingAttempts > 0; },
+        enumerable: false,
+        configurable: true
+    });
+    Object.defineProperty(WDOError.prototype, "onboardingOtpRemainingAttempts", {
+        /**
+         * Number of remaining OTP attempts during onboarding
+         *
+         * This may be filled only when the error reason is `WDOErrorReason.activationFailed`.
+         */
+        get: function () {
+            var _a, _b, _c, _d;
+            if ((_c = (_b = (_a = this.additionalInfo) === null || _a === void 0 ? void 0 : _a.originalException) === null || _b === void 0 ? void 0 : _b.userInfo) === null || _c === void 0 ? void 0 : _c.responseBody) {
+                try {
+                    var parsedResponse = JSON.parse(this.additionalInfo.originalException.userInfo.responseBody);
+                    return (_d = parsedResponse.remainingAttempts) !== null && _d !== void 0 ? _d : undefined;
+                }
+                catch (_e) {
+                    WDOLogger.error("WDOError.onboardingOtpRemainingAttempts: failed to parse response body");
+                    return undefined;
+                }
+            }
+            else {
+                return undefined;
+            }
+        },
+        enumerable: false,
+        configurable: true
+    });
     return WDOError;
 }());
+/** Reasons for WDO errors */
+exports.WDOErrorReason = void 0;
+(function (WDOErrorReason) {
+    /** Network error occurred */
+    WDOErrorReason["networkError"] = "NETWORK_ERROR";
+    /** Activation failed */
+    WDOErrorReason["activationFailed"] = "ACTIVATION_FAILED";
+    /** Process is already in progress - happens when start() is called twice */
+    WDOErrorReason["processAlreadyInProgress"] = "PROCESS_ALREADY_IN_PROGRESS";
+    /** No process is in progress - happens when an operation requires an active process */
+    WDOErrorReason["processNotInProgress"] = "PROCESS_NOT_IN_PROGRESS";
+    /** The PowerAuth instance is already activated when trying to activate it again */
+    WDOErrorReason["powerauthAlreadyActivated"] = "POWERAUTH_ALREADY_ACTIVATED";
+    /** The PowerAuth instance is not activated when trying to use it */
+    WDOErrorReason["powerauthNotActivated"] = "POWERAUTH_NOT_ACTIVATED";
+    /** OTP verification failed */
+    WDOErrorReason["otpFailed"] = "OTP_FAILED";
+})(exports.WDOErrorReason || (exports.WDOErrorReason = {}));
+
+/**
+ * Copyright Wultra s.r.o.
+ *
+ * This source code is licensed under the Apache License, Version 2.0 license
+ * found in the LICENSE file in the root directory of this source tree.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var WDODefaultCache = /** @class */ (function () {
+    function WDODefaultCache() {
+    }
+    return WDODefaultCache;
+}());
 
 /**
  * Copyright Wultra s.r.o.
@@ -163,17 +234,20 @@ var WDOError = /** @class */ (function () {
 var WDOBaseActivationService = /** @class */ (function () {
     function WDOBaseActivationService() {
     }
-    Object.defineProperty(WDOBaseActivationService.prototype, "hasActiveProcess", {
-        /**
-         * If the activation process is in progress.
-         *
-         * Note that even if this property is `true` it can be already discontinued on the server.
-         * Calling `status()` for example after the app is launched in this case is recommended.
-         */
-        get: function () { return !!this.processData; },
-        enumerable: false,
-        configurable: true
-    });
+    /**
+     * If the activation process is in progress.
+     *
+     * Note that even if this property is `true` it can be already discontinued on the server.
+     * Calling `status()` for example after the app is launched in this case is recommended.
+     */
+    WDOBaseActivationService.prototype.hasActiveProcess = function () {
+        return __awaiter(this, void 0, void 0, function () { return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, this.getCachedProcessData()];
+                case 1: return [2 /*return*/, !!(_a.sent())];
+            }
+        }); });
+    };
     /**
      * Accept language for the outgoing requests headers.
      * Default value is "en".
@@ -185,12 +259,47 @@ var WDOBaseActivationService = /** @class */ (function () {
     WDOBaseActivationService.prototype.changeAcceptLanguage = function (language) {
         this.changeAcceptLanguageImpl(language);
     };
-    Object.defineProperty(WDOBaseActivationService.prototype, "processId", {
-        /* @internal  */
-        get: function () { var _a; return (_a = this.processData) === null || _a === void 0 ? void 0 : _a.processId; },
-        enumerable: false,
-        configurable: true
-    });
+    /* @internal  */
+    WDOBaseActivationService.prototype.cacheKey = function () { return "wdopd_".concat(this.getPAInstanceId()); };
+    /* @internal  */
+    WDOBaseActivationService.prototype.setCachedProcessData = function (data) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, WDODefaultCache.instance.set(this.cacheKey(), JSON.stringify(data))];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /* @internal  */
+    WDOBaseActivationService.prototype.getCachedProcessData = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var data;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, WDODefaultCache.instance.get(this.cacheKey())];
+                    case 1:
+                        data = _a.sent();
+                        if (!data) {
+                            return [2 /*return*/, undefined];
+                        }
+                        return [2 /*return*/, JSON.parse(data)];
+                }
+            });
+        });
+    };
+    /* @internal  */
+    WDOBaseActivationService.prototype.processId = function () {
+        return __awaiter(this, void 0, void 0, function () { var _a; return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, this.getCachedProcessData()];
+                case 1: return [2 /*return*/, (_a = (_b.sent())) === null || _a === void 0 ? void 0 : _a.processId];
+            }
+        }); });
+    };
     // PUBLIC API
     /**
      * Retrieves status of the onboarding activation.
@@ -199,18 +308,24 @@ var WDOBaseActivationService = /** @class */ (function () {
      */
     WDOBaseActivationService.prototype.status = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var pid, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            var _a, _b, _c, pid, result;
+            return __generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
-                        WDOLogger.debug("Getting activation status for processId=".concat(this.processId));
-                        return [4 /*yield*/, this.verifyCanStartProcess()];
+                        _b = (_a = WDOLogger).debug;
+                        _c = "Getting activation status for processId=".concat;
+                        return [4 /*yield*/, this.processId()];
                     case 1:
-                        _a.sent();
-                        pid = this.verifyHasActiveProcess();
-                        return [4 /*yield*/, this.api.activationGetStatus(pid)];
+                        _b.apply(_a, [_c.apply("Getting activation status for processId=", [_d.sent()])]);
+                        return [4 /*yield*/, this.verifyCanStartActivation()];
                     case 2:
-                        result = _a.sent();
+                        _d.sent();
+                        return [4 /*yield*/, this.verifyHasActiveProcess()];
+                    case 3:
+                        pid = _d.sent();
+                        return [4 /*yield*/, this.api.activationGetStatus(pid)];
+                    case 4:
+                        result = _d.sent();
                         return [2 /*return*/, result.onboardingStatus];
                 }
             });
@@ -236,18 +351,22 @@ var WDOBaseActivationService = /** @class */ (function () {
                 switch (_a.label) {
                     case 0:
                         WDOLogger.debug("Starting activation with credentials: ".concat(JSON.stringify(credentials)));
-                        if (this.processId) {
-                            throw new WDOError("Cannot start the process - processId already obtained, cancel first.");
-                        }
-                        return [4 /*yield*/, this.verifyCanStartProcess()];
+                        return [4 /*yield*/, this.processId()];
                     case 1:
+                        if (_a.sent()) {
+                            throw new WDOError(exports.WDOErrorReason.processAlreadyInProgress, "Cannot start the process - processId already obtained, cancel first.");
+                        }
+                        return [4 /*yield*/, this.verifyCanStartActivation()];
+                    case 2:
                         _a.sent();
                         return [4 /*yield*/, this.api.activationStart(credentials, processType)];
-                    case 2:
+                    case 3:
                         result = _a.sent();
                         WDOLogger.info("WDOActivationService.start success");
                         WDOLogger.debug(" - processId: ".concat(result.processId));
-                        this.processData = { processId: result.processId, activationCode: result.activationCode };
+                        return [4 /*yield*/, this.setCachedProcessData({ processId: result.processId, activationCode: result.activationCode })];
+                    case 4:
+                        _a.sent();
                         return [2 /*return*/];
                 }
             });
@@ -260,41 +379,58 @@ var WDOBaseActivationService = /** @class */ (function () {
      */
     WDOBaseActivationService.prototype.cancel = function () {
         return __awaiter(this, arguments, void 0, function (forceCancel) {
-            var pid, error_1;
+            var _a, _b, _c, pid, error_1;
             if (forceCancel === void 0) { forceCancel = true; }
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            return __generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
-                        WDOLogger.debug("Canceling activation for processId=".concat(this.processId, ", forceCancel=").concat(forceCancel));
-                        pid = this.verifyHasActiveProcess();
-                        _a.label = 1;
+                        _b = (_a = WDOLogger).debug;
+                        _c = "Canceling activation for processId=".concat;
+                        return [4 /*yield*/, this.processId()];
                     case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.api.activationCancel(pid)];
+                        _b.apply(_a, [_c.apply("Canceling activation for processId=", [_d.sent(), ", forceCancel="]).concat(forceCancel)]);
+                        return [4 /*yield*/, this.verifyHasActiveProcess()];
                     case 2:
-                        _a.sent();
-                        this.processData = undefined;
-                        WDOLogger.info("WDOActivationService.cancel success");
-                        return [3 /*break*/, 4];
+                        pid = _d.sent();
+                        _d.label = 3;
                     case 3:
-                        error_1 = _a.sent();
-                        if (forceCancel) {
-                            // pretend it was successful and just log the error
-                            WDOLogger.debug("Process canceled (but the request failed) - ".concat(error_1, "."));
-                            this.processData = undefined;
-                        }
-                        else {
-                            throw error_1; // rethrow
-                        }
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
+                        _d.trys.push([3, 6, , 10]);
+                        return [4 /*yield*/, this.api.activationCancel(pid)];
+                    case 4:
+                        _d.sent();
+                        return [4 /*yield*/, this.setCachedProcessData(undefined)];
+                    case 5:
+                        _d.sent();
+                        WDOLogger.info("WDOActivationService.cancel success");
+                        return [3 /*break*/, 10];
+                    case 6:
+                        error_1 = _d.sent();
+                        if (!forceCancel) return [3 /*break*/, 8];
+                        // pretend it was successful and just log the error
+                        WDOLogger.debug("Process canceled (but the request failed) - ".concat(error_1, "."));
+                        return [4 /*yield*/, this.setCachedProcessData(undefined)];
+                    case 7:
+                        _d.sent();
+                        return [3 /*break*/, 9];
+                    case 8: throw error_1; // rethrow
+                    case 9: return [3 /*break*/, 10];
+                    case 10: return [2 /*return*/];
                 }
             });
         });
     };
     /** Clear the stored data (without networking call). */
     WDOBaseActivationService.prototype.clear = function () {
-        this.processData = undefined;
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.setCachedProcessData(undefined)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
     };
     /**
      * OTP resend request.
@@ -309,12 +445,14 @@ var WDOBaseActivationService = /** @class */ (function () {
                 switch (_a.label) {
                     case 0:
                         WDOLogger.debug("Activation: resending OTP");
-                        pid = this.verifyHasActiveProcess();
-                        return [4 /*yield*/, this.verifyCanStartProcess()];
+                        return [4 /*yield*/, this.verifyHasActiveProcess()];
                     case 1:
+                        pid = _a.sent();
+                        return [4 /*yield*/, this.verifyCanStartActivation()];
+                    case 2:
                         _a.sent();
                         return [4 /*yield*/, this.api.activationResendOTP(pid)];
-                    case 2:
+                    case 3:
                         _a.sent();
                         return [2 /*return*/];
                 }
@@ -334,9 +472,11 @@ var WDOBaseActivationService = /** @class */ (function () {
                 switch (_a.label) {
                     case 0:
                         WDOLogger.debug("Activation: getting OTP from server (only for testing purposes)");
-                        pid = this.verifyHasActiveProcess();
+                        return [4 /*yield*/, this.verifyHasActiveProcess()];
+                    case 1:
+                        pid = _a.sent();
                         return [4 /*yield*/, this.api.activationGetOTP(pid, "ACTIVATION")];
-                    case 1: return [2 /*return*/, (_a.sent()).otpCode];
+                    case 2: return [2 /*return*/, (_a.sent()).otpCode];
                 }
             });
         });
@@ -344,39 +484,53 @@ var WDOBaseActivationService = /** @class */ (function () {
     /**
      * Activate the PowerAuth instance that was passed in the initializer.
      *
-     * @param activationName Name of the activation. Device name by default (usually something like John's iPhone or similar).
+     * @param activationName Name of the activation. Usually something like John's iPhone or similar.
      * @param otp OTP code received by the user (via SMS or email). Optional when not required.
      * @return Promise resolved with activation result.
      */
     WDOBaseActivationService.prototype.activate = function (activationName, otp) {
         return __awaiter(this, void 0, void 0, function () {
-            var pid, code, result, identityAttributes;
+            var pid, code, result, identityAttributes, error_2;
             var _a;
             return __generator(this, function (_b) {
                 switch (_b.label) {
                     case 0:
                         WDOLogger.debug("Activating the PowerAuth with activation name '".concat(activationName, "'"));
-                        return [4 /*yield*/, this.verifyCanStartProcess()];
+                        return [4 /*yield*/, this.verifyCanStartActivation()];
                     case 1:
                         _b.sent();
-                        pid = this.verifyHasActiveProcess();
-                        code = (_a = this.processData) === null || _a === void 0 ? void 0 : _a.activationCode;
-                        if (!code) return [3 /*break*/, 3];
+                        return [4 /*yield*/, this.verifyHasActiveProcess()];
+                    case 2:
+                        pid = _b.sent();
+                        return [4 /*yield*/, this.getCachedProcessData()];
+                    case 3:
+                        code = (_a = (_b.sent())) === null || _a === void 0 ? void 0 : _a.activationCode;
+                        _b.label = 4;
+                    case 4:
+                        _b.trys.push([4, 9, , 10]);
+                        if (!code) return [3 /*break*/, 6];
                         WDOLogger.info("Activating PowerAuth using activation code from the onboarding process");
                         return [4 /*yield*/, this.activatePowerAuthWithCode(code, otp, activationName)];
-                    case 2:
+                    case 5:
                         result = _b.sent();
-                        return [3 /*break*/, 5];
-                    case 3:
+                        return [3 /*break*/, 8];
+                    case 6:
                         WDOLogger.info("Activating PowerAuth using identity attributes from the onboarding process");
                         identityAttributes = { processId: pid, otpCode: otp, credentialsType: "ONBOARDING" };
                         return [4 /*yield*/, this.activatePowerAuth(identityAttributes, activationName)];
-                    case 4:
+                    case 7:
                         result = _b.sent();
-                        _b.label = 5;
-                    case 5:
+                        _b.label = 8;
+                    case 8: return [3 /*break*/, 10];
+                    case 9:
+                        error_2 = _b.sent();
+                        throw new WDOError(exports.WDOErrorReason.activationFailed, "Activation failed", error_2);
+                    case 10: 
+                    // Clear process ID after activation attempt
+                    return [4 /*yield*/, this.setCachedProcessData(undefined)];
+                    case 11:
                         // Clear process ID after activation attempt
-                        this.processData = undefined;
+                        _b.sent();
                         return [2 /*return*/, result];
                 }
             });
@@ -384,30 +538,40 @@ var WDOBaseActivationService = /** @class */ (function () {
     };
     // PRIVATE METHODS
     /* @internal */
-    WDOBaseActivationService.prototype.verifyCanStartProcess = function () {
+    WDOBaseActivationService.prototype.verifyCanStartActivation = function () {
         return __awaiter(this, void 0, void 0, function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0: return [4 /*yield*/, this.api.canStartActivation()];
                     case 1:
-                        if (!(_a.sent())) {
-                            WDOLogger.error("PowerAuth is already activated - Activation cannot be started/processed.");
-                            this.processData = undefined;
-                            throw new WDOError("PowerAuth is already activated");
-                        }
-                        return [2 /*return*/];
+                        if (!!(_a.sent())) return [3 /*break*/, 3];
+                        WDOLogger.error("PowerAuth is already activated - Activation cannot be started/processed.");
+                        return [4 /*yield*/, this.setCachedProcessData(undefined)];
+                    case 2:
+                        _a.sent();
+                        throw new WDOError(exports.WDOErrorReason.powerauthAlreadyActivated, "PowerAuth is already activated");
+                    case 3: return [2 /*return*/];
                 }
             });
         });
     };
     /* @internal */
     WDOBaseActivationService.prototype.verifyHasActiveProcess = function () {
-        var pid = this.processId;
-        if (!pid) {
-            WDOLogger.warn("Cannot proceed (processId not available).");
-            throw new WDOError("No active activation process");
-        }
-        return pid;
+        return __awaiter(this, void 0, void 0, function () {
+            var pid;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.processId()];
+                    case 1:
+                        pid = _a.sent();
+                        if (!pid) {
+                            WDOLogger.warn("Cannot proceed (processId not available).");
+                            throw new WDOError(exports.WDOErrorReason.processNotInProgress, "No active activation process");
+                        }
+                        return [2 /*return*/, pid];
+                }
+            });
+        });
     };
     return WDOBaseActivationService;
 }());
@@ -484,13 +648,6 @@ var WDOVerificationEndpoints = /** @class */ (function () {
         e2eeScope: "ACTIVATION",
         returnsData: true
     };
-    // Legacy endpoint that required zip file upload
-    WDOVerificationEndpoints.submitDocuments = {
-        path: "/api/identity/document/submit",
-        tokenName: "possession_universal",
-        e2eeScope: "ACTIVATION",
-        returnsData: false
-    };
     WDOVerificationEndpoints.v2submitDocuments = {
         path: "/api/v2/identity/document/submit",
         tokenName: "possession_universal",
@@ -580,18 +737,18 @@ var WDOBaseApi = /** @class */ (function () {
         return this.callApi(requestObject, WDOVerificationEndpoints.cancel);
     };
     WDOBaseApi.prototype.verificationGetConsentText = function (processId) {
-        var requestObject = { processId: processId, consentType: "GDPR" }; // TODO: hardcoded type
+        var requestObject = { processId: processId, consentType: "GDPR" };
         return this.callApi(requestObject, WDOVerificationEndpoints.consentText);
     };
     WDOBaseApi.prototype.verificationResolveConsent = function (processId, approved) {
-        var requestObject = { processId: processId, approved: approved, consentType: "GDPR" }; // TODO: hardcoded type
+        var requestObject = { processId: processId, approved: approved, consentType: "GDPR" };
         return this.callApi(requestObject, WDOVerificationEndpoints.consentApprove);
     };
     WDOBaseApi.prototype.verificationInitScanSDK = function (processId, challenge) {
         var requestObject = { processId: processId, attributes: { 'sdk-init-token': challenge } };
         return this.callApi(requestObject, WDOVerificationEndpoints.documentScanSdkInit);
     };
-    WDOBaseApi.prototype.verificationSubmitDocumentsV2 = function (processId, resubmit, documents) {
+    WDOBaseApi.prototype.verificationSubmitDocuments = function (processId, resubmit, documents) {
         var requestObject = {
             processId: processId,
             resubmit: resubmit,
@@ -600,11 +757,6 @@ var WDOBaseApi = /** @class */ (function () {
         // TODO: there should be longer timeout!
         return this.callApi(requestObject, WDOVerificationEndpoints.v2submitDocuments);
     };
-    WDOBaseApi.prototype.verificationSubmitDocuments = function (processId, data, resubmit, documents) {
-        var requestObject = { processId: processId, data: data, resubmit: resubmit, documents: documents };
-        // TODO: there should be longer timeout!
-        return this.callApi(requestObject, WDOVerificationEndpoints.submitDocuments);
-    };
     WDOBaseApi.prototype.verificationDocumentsStatus = function (processId) {
         var requestObject = { processId: processId };
         // TODO: longer timeout?
@@ -657,14 +809,14 @@ var WDOApi = /** @class */ (function (_super) {
                 return result.responseObject;
             }
             else if (result.responseError) {
-                throw new WDOError("Server API error: ".concat(result.responseError.code, ", ").concat(result.responseError.message), result.responseError);
+                throw new WDOError(exports.WDOErrorReason.networkError, "Server API error: ".concat(result.responseError.code, ", ").concat(result.responseError.message), result.responseError);
             }
             else if (!endpoint.returnsData) {
                 // for void responses
                 return {};
             }
             else {
-                throw new WDOError("Failed to retrieve activation data");
+                throw new WDOError(exports.WDOErrorReason.networkError, "Failed to retrieve server data");
             }
         });
     };
@@ -743,6 +895,10 @@ var WDOActivationService = /** @class */ (function (_super) {
     WDOActivationService.prototype.changeAcceptLanguageImpl = function (language) {
         this.api.networking.acceptLanguage = language;
     };
+    /* @internal */
+    WDOActivationService.prototype.getPAInstanceId = function () {
+        return this.powerauth.instanceId;
+    };
     return WDOActivationService;
 }(WDOBaseActivationService));
 
@@ -788,86 +944,6 @@ var WDOPowerAuthActivationState;
     WDOPowerAuthActivationState["DEADLOCK"] = "DEADLOCK";
 })(WDOPowerAuthActivationState || (WDOPowerAuthActivationState = {}));
 
-/**
- * Copyright Wultra s.r.o.
- *
- * This source code is licensed under the Apache License, Version 2.0 license
- * found in the LICENSE file in the root directory of this source tree.
- *
- * SPDX-License-Identifier: Apache-2.0
- */
-/** Image of a document that can be sent to the backend for Identity Verification. */
-var WDODocumentFile = /** @class */ (function () {
-    /**
-     * Image of a document that can be sent to the backend for Identity Verification.
-     *
-     * @param data Raw image data. Make sure that the data aren't too big, hundreds of kbs should be enough.
-     * @param type Type of the document.
-     * @param side The side of the document that the image captures.
-     * @param originalDocumentId Original document ID In case of a reupload. If you've previously uploaded this type and side and won't specify the previous ID, the image won't be overwritten.
-     * @param dataSignature Signature of the image data. Optional, use only when the scan SDK supports this. `undefined` by default.
-     */
-    function WDODocumentFile(data, type, side, originalDocumentId, dataSignature) {
-        this.data = data;
-        this.dataSignature = dataSignature;
-        this.type = type;
-        this.side = side;
-        this.originalDocumentId = originalDocumentId;
-    }
-    /**
-     * Create the document file from an image that can be sent to the backend for Identity Verification.
-     *
-     * @param scannedDocument Document to upload.
-     * @param side The side of the document that the image captures.
-     * @param data Raw image data. Make sure that the data aren't too big, hundreds of kbs should be enough.
-     * @param dataSignature Signature of the image data. Optional, use only when the scan SDK supports this. `undefined` by default.
-     * @returns Document file to upload.
-     */
-    WDODocumentFile.fromScannedDocument = function (scannedDocument, side, data, dataSignature) {
-        var _a;
-        var originalDocumentId = (_a = scannedDocument.sides.find(function (s) { return s.type === side; })) === null || _a === void 0 ? void 0 : _a.serverId;
-        return new WDODocumentFile(data, scannedDocument.type, side, originalDocumentId, dataSignature);
-    };
-    return WDODocumentFile;
-}());
-/** Type of the document. */
-exports.WDODocumentType = void 0;
-(function (WDODocumentType) {
-    /** National ID card */
-    WDODocumentType["idCard"] = "idCard";
-    /** Passport */
-    WDODocumentType["passport"] = "passport";
-    /** Drivers license */
-    WDODocumentType["driversLicense"] = "driversLicense";
-})(exports.WDODocumentType || (exports.WDODocumentType = {}));
-/**
- * Available sides of the document
- *
- * Front and back for ID card.
- * For passport and drivers license front only.
- */
-function WDODocumentTypeSides(type) {
-    switch (type) {
-        case exports.WDODocumentType.idCard:
-            return [exports.WDODocumentSide.front, exports.WDODocumentSide.back];
-        case exports.WDODocumentType.passport:
-            return [exports.WDODocumentSide.front];
-        case exports.WDODocumentType.driversLicense:
-            return [exports.WDODocumentSide.front];
-    }
-}
-/** Side of the document */
-exports.WDODocumentSide = void 0;
-(function (WDODocumentSide) {
-    /** Front side of a document. Usually the one with the picture.
-     *
-     * When a document has more than one side but only one side is used (for example passport), then such side is considered to be front.
-     */
-    WDODocumentSide["front"] = "front";
-    /** Back side of a document */
-    WDODocumentSide["back"] = "back";
-})(exports.WDODocumentSide || (exports.WDODocumentSide = {}));
-
 /**
  * Copyright Wultra s.r.o.
  *
@@ -877,7 +953,7 @@ exports.WDODocumentSide = void 0;
  * SPDX-License-Identifier: Apache-2.0
  */
 /** Status of the onboarding */
-var WDOOnboardingStatus;
+exports.WDOOnboardingStatus = void 0;
 (function (WDOOnboardingStatus) {
     /** Activation part of the process is in progress */
     WDOOnboardingStatus["activationInProgress"] = "ACTIVATION_IN_PROGRESS";
@@ -887,9 +963,9 @@ var WDOOnboardingStatus;
     WDOOnboardingStatus["failed"] = "FAILED";
     /** Onboarding process is completed */
     WDOOnboardingStatus["finished"] = "FINISHED";
-})(WDOOnboardingStatus || (WDOOnboardingStatus = {}));
+})(exports.WDOOnboardingStatus || (exports.WDOOnboardingStatus = {}));
 /** Status of the current identity verification */
-var WDOIdentityVerificationStatus;
+exports.WDOIdentityVerificationStatus = void 0;
 (function (WDOIdentityVerificationStatus) {
     /** Identity verification is waiting for initialization */
     WDOIdentityVerificationStatus["notInitialized"] = "NOT_INITIALIZED";
@@ -903,9 +979,9 @@ var WDOIdentityVerificationStatus;
     WDOIdentityVerificationStatus["failed"] = "FAILED";
     /** Identity verification was rejected */
     WDOIdentityVerificationStatus["rejected"] = "REJECTED";
-})(WDOIdentityVerificationStatus || (WDOIdentityVerificationStatus = {}));
+})(exports.WDOIdentityVerificationStatus || (exports.WDOIdentityVerificationStatus = {}));
 /** Phase of the current identity verification */
-var WDOIdentityVerificationPhase;
+exports.WDOIdentityVerificationPhase = void 0;
 (function (WDOIdentityVerificationPhase) {
     /** Document upload is in progress */
     WDOIdentityVerificationPhase["documentUpload"] = "DOCUMENT_UPLOAD";
@@ -921,9 +997,9 @@ var WDOIdentityVerificationPhase;
     WDOIdentityVerificationPhase["otp"] = "OTP_VERIFICATION";
     /** Completed */
     WDOIdentityVerificationPhase["completed"] = "COMPLETED";
-})(WDOIdentityVerificationPhase || (WDOIdentityVerificationPhase = {}));
+})(exports.WDOIdentityVerificationPhase || (exports.WDOIdentityVerificationPhase = {}));
 /** Types of available documents */
-var WDODocumentSubmitFileType;
+exports.WDODocumentSubmitFileType = void 0;
 (function (WDODocumentSubmitFileType) {
     /** National ID card */
     WDODocumentSubmitFileType["idCard"] = "ID_CARD";
@@ -933,17 +1009,17 @@ var WDODocumentSubmitFileType;
     WDODocumentSubmitFileType["driversLicense"] = "DRIVING_LICENSE";
     /** Selfie photo */
     WDODocumentSubmitFileType["selfiePhoto"] = "SELFIE_PHOTO";
-})(WDODocumentSubmitFileType || (WDODocumentSubmitFileType = {}));
+})(exports.WDODocumentSubmitFileType || (exports.WDODocumentSubmitFileType = {}));
 /** Side of the file */
-var WDODocumentSubmitFileSide;
+exports.WDODocumentSubmitFileSide = void 0;
 (function (WDODocumentSubmitFileSide) {
     /** Front side of an document. Usually the one with the picture */
     WDODocumentSubmitFileSide["front"] = "FRONT";
     /** Back side of an document */
     WDODocumentSubmitFileSide["back"] = "BACK";
-})(WDODocumentSubmitFileSide || (WDODocumentSubmitFileSide = {}));
+})(exports.WDODocumentSubmitFileSide || (exports.WDODocumentSubmitFileSide = {}));
 /** Status of the document */
-var WDODocumentStatus;
+exports.WDODocumentStatus = void 0;
 (function (WDODocumentStatus) {
     /** Document was accepted */
     WDODocumentStatus["accepted"] = "ACCEPTED";
@@ -959,27 +1035,7 @@ var WDODocumentStatus;
     WDODocumentStatus["rejected"] = "REJECTED";
     /** Verification of the document failed */
     WDODocumentStatus["failed"] = "FAILED";
-})(WDODocumentStatus || (WDODocumentStatus = {}));
-/** Converts WDODocumentType to DocumentSubmitFileType */
-function WDOCreateDocumentSubmitFileType(type) {
-    switch (type) {
-        case exports.WDODocumentType.idCard:
-            return WDODocumentSubmitFileType.idCard;
-        case exports.WDODocumentType.passport:
-            return WDODocumentSubmitFileType.passport;
-        case exports.WDODocumentType.driversLicense:
-            return WDODocumentSubmitFileType.driversLicense;
-    }
-}
-/** Converts WDODocumentSide to DocumentSubmitFileSide */
-function WDOCreateDocumentSubmitFileSide(side) {
-    switch (side) {
-        case exports.WDODocumentSide.front:
-            return WDODocumentSubmitFileSide.front;
-        case exports.WDODocumentSide.back:
-            return WDODocumentSubmitFileSide.back;
-    }
-}
+})(exports.WDODocumentStatus || (exports.WDODocumentStatus = {}));
 
 /**
  * Copyright Wultra s.r.o.
@@ -995,17 +1051,9 @@ exports.WDOVerificationStateType = void 0;
     /**
      * Show the verification introduction screen where the user can start the activation.
      *
-     * The next step should be calling the `consentGet()`.
+     * The next step should be calling the `start()`.
      */
     WDOVerificationStateType["intro"] = "intro";
-    /**
-     * Show approve/cancel user consent.
-     *
-     * The content of the text depends on the server configuration and might be plain text or HTML.
-     *
-     * The next step should be calling the `consentApprove`.
-     */
-    WDOVerificationStateType["consent"] = "consent";
     /**
      * Show document selection to the user. Which documents are available and how many
      * can the user select is up to your backend configuration.
@@ -1093,6 +1141,106 @@ exports.WDOStatusCheckReason = void 0;
     WDOStatusCheckReason["verifyingPresence"] = "verifyingPresence";
 })(exports.WDOStatusCheckReason || (exports.WDOStatusCheckReason = {}));
 
+/**
+ * Copyright Wultra s.r.o.
+ *
+ * This source code is licensed under the Apache License, Version 2.0 license
+ * found in the LICENSE file in the root directory of this source tree.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** Image of a document that can be sent to the backend for Identity Verification. */
+var WDODocumentFile = /** @class */ (function () {
+    /**
+     * Image of a document that can be sent to the backend for Identity Verification.
+     *
+     * @param data Raw image data. Make sure that the data aren't too big, hundreds of kbs should be enough.
+     * @param type Type of the document.
+     * @param side The side of the document that the image captures.
+     * @param originalDocumentId Original document ID In case of a reupload. If you've previously uploaded this type and side and won't specify the previous ID, the image won't be overwritten.
+     * @param dataSignature Signature of the image data. Optional, use only when the scan SDK supports this. `undefined` by default.
+     */
+    function WDODocumentFile(data, type, side, originalDocumentId, dataSignature) {
+        this.data = data;
+        this.dataSignature = dataSignature;
+        this.type = type;
+        this.side = side;
+        this.originalDocumentId = originalDocumentId;
+    }
+    /**
+     * Create the document file from an image that can be sent to the backend for Identity Verification.
+     *
+     * @param scannedDocument Document to upload.
+     * @param side The side of the document that the image captures.
+     * @param data Raw image data. Make sure that the data aren't too big, hundreds of kbs should be enough.
+     * @param dataSignature Signature of the image data. Optional, use only when the scan SDK supports this. `undefined` by default.
+     * @returns Document file to upload.
+     */
+    WDODocumentFile.fromScannedDocument = function (scannedDocument, side, data, dataSignature) {
+        var _a;
+        var originalDocumentId = (_a = scannedDocument.sides.find(function (s) { return s.type === side; })) === null || _a === void 0 ? void 0 : _a.serverId;
+        return new WDODocumentFile(data, scannedDocument.type, side, originalDocumentId, dataSignature);
+    };
+    return WDODocumentFile;
+}());
+/** Type of the document. */
+exports.WDODocumentType = void 0;
+(function (WDODocumentType) {
+    /** National ID card */
+    WDODocumentType["idCard"] = "idCard";
+    /** Passport */
+    WDODocumentType["passport"] = "passport";
+    /** Drivers license */
+    WDODocumentType["driversLicense"] = "driversLicense";
+})(exports.WDODocumentType || (exports.WDODocumentType = {}));
+/**
+ * Available sides of the document
+ *
+ * Front and back for ID card.
+ * For passport and drivers license front only.
+ */
+function WDODocumentTypeSides(type) {
+    switch (type) {
+        case exports.WDODocumentType.idCard:
+            return [exports.WDODocumentSide.front, exports.WDODocumentSide.back];
+        case exports.WDODocumentType.passport:
+            return [exports.WDODocumentSide.front];
+        case exports.WDODocumentType.driversLicense:
+            return [exports.WDODocumentSide.front];
+    }
+}
+/** Side of the document */
+exports.WDODocumentSide = void 0;
+(function (WDODocumentSide) {
+    /** Front side of a document. Usually the one with the picture.
+     *
+     * When a document has more than one side but only one side is used (for example passport), then such side is considered to be front.
+     */
+    WDODocumentSide["front"] = "front";
+    /** Back side of a document */
+    WDODocumentSide["back"] = "back";
+})(exports.WDODocumentSide || (exports.WDODocumentSide = {}));
+/** Converts WDODocumentType to WDODocumentSubmitFileType */
+function WDODocumentTypeToSubmitType(type) {
+    switch (type) {
+        case exports.WDODocumentType.idCard:
+            return exports.WDODocumentSubmitFileType.idCard;
+        case exports.WDODocumentType.passport:
+            return exports.WDODocumentSubmitFileType.passport;
+        case exports.WDODocumentType.driversLicense:
+            return exports.WDODocumentSubmitFileType.driversLicense;
+    }
+}
+/** Converts WDODocumentSide to DocumentSubmitFileSide */
+function WDOCreateDocumentSubmitFileSide(side) {
+    switch (side) {
+        case exports.WDODocumentSide.front:
+            return exports.WDODocumentSubmitFileSide.front;
+        case exports.WDODocumentSide.back:
+            return exports.WDODocumentSubmitFileSide.back;
+    }
+}
+
 /**
  * Copyright Wultra s.r.o.
  *
@@ -1126,10 +1274,27 @@ var WDOVerificationScanProcess = /** @class */ (function () {
         }, new Map());
         groups.forEach(function (docs, type) {
             var _a;
-            // TODO: type mismatch?
-            (_a = _this.documents.find(function (d) { return d.type === type; })) === null || _a === void 0 ? void 0 : _a.processServerData(docs);
+            (_a = _this.documents.find(function (d) { return WDODocumentTypeToSubmitType(d.type) === type; })) === null || _a === void 0 ? void 0 : _a.processServerData(docs);
         });
     };
+    /* @internal */
+    WDOVerificationScanProcess.fromCachedData = function (data) {
+        var split = data.split(":");
+        if (split.length != 2) {
+            WDOLogger.error("WDOVerificationScanProcess.fromCachedData: invalid cached data format");
+            return undefined;
+        }
+        if (split[0] !== "v1") {
+            WDOLogger.error("WDOVerificationScanProcess.fromCachedData: unsupported cached data version");
+            return undefined;
+        }
+        var types = split[1].split(",").map(function (s) { return s; });
+        return new WDOVerificationScanProcess(types);
+    };
+    /* @internal */
+    WDOVerificationScanProcess.prototype.dataForCache = function () {
+        return "v1:".concat(this.documents.map(function (d) { return d.type; }).join(","));
+    };
     return WDOVerificationScanProcess;
 }());
 /** Document that needs to be scanned during process. */
@@ -1167,7 +1332,7 @@ var WDOScannedDocument = /** @class */ (function () {
     });
     /* @internal */
     WDOScannedDocument.prototype.processServerData = function (documents) {
-        this._sides = documents.map(function (doc) { var _a, _b; return new Side(doc.side == WDODocumentSubmitFileSide.front ? exports.WDODocumentSide.front : exports.WDODocumentSide.back, doc.id, ((_b = (_a = doc.errors) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0 ? exports.UploadState.rejected : exports.UploadState.accepted); });
+        this._sides = documents.map(function (doc) { var _a, _b; return new Side(doc.side == exports.WDODocumentSubmitFileSide.front ? exports.WDODocumentSide.front : exports.WDODocumentSide.back, doc.id, ((_b = (_a = doc.errors) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0 ? exports.UploadState.rejected : exports.UploadState.accepted); });
     };
     return WDOScannedDocument;
 }());
@@ -1200,6 +1365,16 @@ var Side = /** @class */ (function () {
  *
  * SPDX-License-Identifier: Apache-2.0
  */
+/** Possible results of the user consent. */
+exports.WDOConsentResponse = void 0;
+(function (WDOConsentResponse) {
+    /** User approved the consent. */
+    WDOConsentResponse[WDOConsentResponse["approved"] = 0] = "approved";
+    /** User declined the consent. */
+    WDOConsentResponse[WDOConsentResponse["declined"] = 1] = "declined";
+    /** Consent is not required. */
+    WDOConsentResponse[WDOConsentResponse["notRequired"] = 2] = "notRequired";
+})(exports.WDOConsentResponse || (exports.WDOConsentResponse = {}));
 /**
  * Service that can verify previously activated PowerAuth instance.
  *
@@ -1212,9 +1387,39 @@ var WDOBaseVerificationService = /** @class */ (function () {
     function WDOBaseVerificationService() {
         /* @internal */
         this.lastStatus = undefined;
-        /* @internal */
-        this.cachedProcess = undefined; // TODO: persistence?
     }
+    /* @internal */
+    WDOBaseVerificationService.prototype.cacheKey = function () { return "wdocp_".concat(this.getPAInstanceId()); };
+    /* @internal */
+    WDOBaseVerificationService.prototype.setCachedProcess = function (process) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, WDODefaultCache.instance.set(this.cacheKey(), process === null || process === void 0 ? void 0 : process.dataForCache())];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /* @internal */
+    WDOBaseVerificationService.prototype.getCachedProcess = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var data;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, WDODefaultCache.instance.get(this.cacheKey())];
+                    case 1:
+                        data = _a.sent();
+                        if (!data) {
+                            return [2 /*return*/, undefined];
+                        }
+                        return [2 /*return*/, WDOVerificationScanProcess.fromCachedData(data)];
+                }
+            });
+        });
+    };
     // PUBLIC API
     /**
      * Accept language for the outgoing requests headers.
@@ -1241,50 +1446,62 @@ var WDOBaseVerificationService = /** @class */ (function () {
      */
     WDOBaseVerificationService.prototype.status = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var response, vf, _a, docsResponse, documents, cachedProcess, error_1;
-            var _b;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
+            var response, _a, vf, _b, docsResponse, documents, cachedProcess, error_1;
+            var _c, _d;
+            return __generator(this, function (_e) {
+                switch (_e.label) {
                     case 0:
-                        _c.trys.push([0, 12, , 13]);
+                        _e.trys.push([0, 17, , 18]);
                         return [4 /*yield*/, this.api.verificationStatus()];
                     case 1:
-                        response = _c.sent();
+                        response = _e.sent();
+                        response.consentRequired = (_c = response.consentRequired) !== null && _c !== void 0 ? _c : false; // when undefined, assume false
                         WDOLogger.info("Verification status successfully retrieved.");
                         WDOLogger.debug("Verification status: ".concat(JSON.stringify(response)));
-                        switch (response.identityVerificationStatus) {
-                            case WDOIdentityVerificationStatus.failed:
-                            case WDOIdentityVerificationStatus.rejected:
-                            case WDOIdentityVerificationStatus.notInitialized:
-                            case WDOIdentityVerificationStatus.accepted:
-                                WDOLogger.debug("Status ".concat(response.identityVerificationStatus, " - clearing cache"));
-                                this.cachedProcess = undefined;
-                                break;
+                        _a = response.identityVerificationStatus;
+                        switch (_a) {
+                            case exports.WDOIdentityVerificationStatus.failed: return [3 /*break*/, 2];
+                            case exports.WDOIdentityVerificationStatus.rejected: return [3 /*break*/, 2];
+                            case exports.WDOIdentityVerificationStatus.notInitialized: return [3 /*break*/, 2];
+                            case exports.WDOIdentityVerificationStatus.accepted: return [3 /*break*/, 2];
                         }
+                        return [3 /*break*/, 4];
+                    case 2:
+                        WDOLogger.debug("Status ".concat(response.identityVerificationStatus, " - clearing cache"));
+                        return [4 /*yield*/, this.setCachedProcess(undefined)];
+                    case 3:
+                        _e.sent();
+                        return [3 /*break*/, 5];
+                    case 4: 
+                    // no-op
+                    return [3 /*break*/, 5];
+                    case 5:
                         this.lastStatus = response;
                         vf = new WDOVerificationStatus(response);
                         WDOLogger.info("Verification next step: ".concat(vf.description()));
-                        _a = vf.nextStep;
-                        switch (_a) {
-                            case WDONextStep.intro: return [3 /*break*/, 2];
-                            case WDONextStep.documentScan: return [3 /*break*/, 3];
-                            case WDONextStep.presenceCheck: return [3 /*break*/, 5];
-                            case WDONextStep.otp: return [3 /*break*/, 6];
-                            case WDONextStep.statusCheck: return [3 /*break*/, 7];
-                            case WDONextStep.failed: return [3 /*break*/, 8];
-                            case WDONextStep.rejected: return [3 /*break*/, 9];
-                            case WDONextStep.success: return [3 /*break*/, 10];
+                        _b = vf.nextStep;
+                        switch (_b) {
+                            case WDONextStep.intro: return [3 /*break*/, 6];
+                            case WDONextStep.documentScan: return [3 /*break*/, 7];
+                            case WDONextStep.presenceCheck: return [3 /*break*/, 10];
+                            case WDONextStep.otp: return [3 /*break*/, 11];
+                            case WDONextStep.statusCheck: return [3 /*break*/, 12];
+                            case WDONextStep.failed: return [3 /*break*/, 13];
+                            case WDONextStep.rejected: return [3 /*break*/, 14];
+                            case WDONextStep.success: return [3 /*break*/, 15];
                         }
-                        return [3 /*break*/, 11];
-                    case 2: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.intro })];
-                    case 3:
+                        return [3 /*break*/, 16];
+                    case 6: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.intro, consentRequired: response.consentRequired })];
+                    case 7:
                         WDOLogger.debug("Verifying documents status");
                         return [4 /*yield*/, this.api.verificationDocumentsStatus(response.processId)];
-                    case 4:
-                        docsResponse = _c.sent();
+                    case 8:
+                        docsResponse = _e.sent();
                         WDOLogger.debug("Documents status: ".concat(JSON.stringify(docsResponse)));
                         documents = docsResponse.documents;
-                        cachedProcess = this.cachedProcess;
+                        return [4 /*yield*/, this.getCachedProcess()];
+                    case 9:
+                        cachedProcess = _e.sent();
                         if (cachedProcess) {
                             cachedProcess.feedServerData(docsResponse.documents);
                             if (documents.some(function (d) { return documentAction(d) === "error"; }) || documents.some(function (d) { return d.errors != undefined && d.errors.length > 0; })) {
@@ -1315,19 +1532,19 @@ var WDOBaseVerificationService = /** @class */ (function () {
                                 return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.failed })];
                             }
                         }
-                    case 5: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.presenceCheck })];
-                    case 6: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.otp })];
-                    case 7: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.processing, item: (_b = vf.statusCheckReason) !== null && _b !== void 0 ? _b : exports.WDOStatusCheckReason.unknown })];
-                    case 8: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.failed })];
-                    case 9: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.endState, reason: exports.WDOEndStateReason.rejected })];
-                    case 10: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.success })];
-                    case 11: return [3 /*break*/, 13];
-                    case 12:
-                        error_1 = _c.sent();
+                    case 10: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.presenceCheck })];
+                    case 11: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.otp })];
+                    case 12: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.processing, item: (_d = vf.statusCheckReason) !== null && _d !== void 0 ? _d : exports.WDOStatusCheckReason.unknown })];
+                    case 13: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.failed })];
+                    case 14: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.endState, reason: exports.WDOEndStateReason.rejected })];
+                    case 15: return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.success })];
+                    case 16: return [3 /*break*/, 18];
+                    case 17:
+                        error_1 = _e.sent();
                         WDOLogger.error("Error fetching verification status: ".concat(JSON.stringify(error_1)));
                         this.lastStatus = undefined;
                         throw this.processError(error_1);
-                    case 13: return [2 /*return*/];
+                    case 18: return [2 /*return*/];
                 }
             });
         });
@@ -1347,27 +1564,49 @@ var WDOBaseVerificationService = /** @class */ (function () {
                         return [4 /*yield*/, this.handleError(this.api.verificationGetConsentText(pid))];
                     case 1:
                         response = _a.sent();
-                        return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.consent, body: response.consentText })];
+                        return [2 /*return*/, response.consentText];
                 }
             });
         });
     };
     /**
-     * Approves the consent for this process and starts the activation.
+     * Start the identity verification after user approved the consent (if required)
+     *
+     * @param consentApprovedByUser Response of the user to the consent. The hint can be obtained in the `status()` call (`consentRequired` property when the result is `intro`).
      */
-    WDOBaseVerificationService.prototype.consentApprove = function () {
+    WDOBaseVerificationService.prototype.start = function (consentApprovedByUser) {
         return __awaiter(this, void 0, void 0, function () {
-            var pid;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            var pid, _a;
+            var _b, _c;
+            return __generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
                         pid = this.verifyHasActiveProcess();
-                        return [4 /*yield*/, this.handleError(this.api.verificationResolveConsent(pid, true))];
+                        _a = consentApprovedByUser;
+                        switch (_a) {
+                            case exports.WDOConsentResponse.approved: return [3 /*break*/, 1];
+                            case exports.WDOConsentResponse.declined: return [3 /*break*/, 3];
+                            case exports.WDOConsentResponse.notRequired: return [3 /*break*/, 5];
+                        }
+                        return [3 /*break*/, 6];
                     case 1:
-                        _a.sent();
-                        return [4 /*yield*/, this.handleError(this.api.verificationStart(pid))];
+                        WDOLogger.info("User approved consent - resolving on server");
+                        return [4 /*yield*/, this.handleError(this.api.verificationResolveConsent(pid, true))];
                     case 2:
-                        _a.sent();
+                        _d.sent();
+                        return [3 /*break*/, 6];
+                    case 3:
+                        WDOLogger.info("User declined consent - returning to intro state");
+                        return [4 /*yield*/, this.handleError(this.api.verificationResolveConsent(pid, false))];
+                    case 4:
+                        _d.sent();
+                        return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.intro, consentRequired: (_c = (_b = this.lastStatus) === null || _b === void 0 ? void 0 : _b.consentRequired) !== null && _c !== void 0 ? _c : true })]; // TODO: ok to assume true?
+                    case 5:
+                        WDOLogger.info("Consent not required - proceeding");
+                        _d.label = 6;
+                    case 6: return [4 /*yield*/, this.handleError(this.api.verificationStart(pid))];
+                    case 7:
+                        _d.sent();
                         return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.documentsToScanSelect })];
                 }
             });
@@ -1382,7 +1621,7 @@ var WDOBaseVerificationService = /** @class */ (function () {
      */
     WDOBaseVerificationService.prototype.documentsInitSDK = function (challenge) {
         return __awaiter(this, void 0, void 0, function () {
-            var pid, response;
+            var pid, response, blinkID, zenId;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -1391,7 +1630,9 @@ var WDOBaseVerificationService = /** @class */ (function () {
                     case 1:
                         response = _a.sent() // TODO: is "-" acceptable?
                         ;
-                        return [2 /*return*/, response];
+                        blinkID = response.attributes["license-key"];
+                        zenId = response.attributes["zenid-sdk-init-response"];
+                        return [2 /*return*/, { blinkIDKey: blinkID, zenIDToken: zenId }];
                 }
             });
         });
@@ -1406,49 +1647,20 @@ var WDOBaseVerificationService = /** @class */ (function () {
     WDOBaseVerificationService.prototype.documentsSetSelectedTypes = function (types) {
         return __awaiter(this, void 0, void 0, function () {
             var process;
-            return __generator(this, function (_a) {
-                WDOLogger.debug("Submitting selected document types: ".concat(types));
-                process = new WDOVerificationScanProcess(types);
-                this.cachedProcess = process;
-                return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.scanDocument, process: process })];
-            });
-        });
-    };
-    /**
-     * Upload document files to the server. The order of the documents is up to you.
-     * Make sure that uploaded document are reasonable size so you're not uploading large files.
-     *
-     * If you're uploading the same document file again, you need to include the `originalDocumentId` otherwise it will be rejected by the server.
-     *
-     * @param files Document files to upload.
-     */
-    WDOBaseVerificationService.prototype.documentsSubmit = function (files) {
-        return __awaiter(this, void 0, void 0, function () {
-            var pid, resubmit, submitFiles;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        pid = this.verifyHasActiveProcess();
-                        resubmit = files.some(function (f) { return f.originalDocumentId != undefined; });
-                        submitFiles = files.map(function (f) {
-                            return {
-                                filename: "".concat(f.type.toLowerCase(), "_").concat(f.side.toLowerCase(), ".jpg"), // TODO: OK?
-                                type: WDOCreateDocumentSubmitFileType(f.type),
-                                side: WDOCreateDocumentSubmitFileSide(f.side),
-                                originalDocumentId: f.originalDocumentId,
-                                data: f.data
-                            };
-                        });
-                        return [4 /*yield*/, this.handleError(this.api.verificationSubmitDocumentsV2(pid, resubmit, submitFiles))];
+                        WDOLogger.debug("Submitting selected document types: ".concat(types));
+                        process = new WDOVerificationScanProcess(types);
+                        return [4 /*yield*/, this.setCachedProcess(process)];
                     case 1:
                         _a.sent();
-                        return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.processing, item: exports.WDOStatusCheckReason.documentUpload })];
+                        return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.scanDocument, process: process })];
                 }
             });
         });
     };
     /**
-     * @internal
      * Upload document files to the server. The order of the documents is up to you.
      * Make sure that uploaded document are reasonable size so you're not uploading large files.
      *
@@ -1456,7 +1668,7 @@ var WDOBaseVerificationService = /** @class */ (function () {
      *
      * @param files Document files to upload.
      */
-    WDOBaseVerificationService.prototype.documentsSubmitDemo = function (files, zipFolderNameDemo, base64zipDemo) {
+    WDOBaseVerificationService.prototype.documentsSubmit = function (files) {
         return __awaiter(this, void 0, void 0, function () {
             var pid, resubmit, submitFiles;
             return __generator(this, function (_a) {
@@ -1466,13 +1678,14 @@ var WDOBaseVerificationService = /** @class */ (function () {
                         resubmit = files.some(function (f) { return f.originalDocumentId != undefined; });
                         submitFiles = files.map(function (f) {
                             return {
-                                filename: "".concat(zipFolderNameDemo, "/").concat(f.type.toLowerCase(), "_").concat(f.side.toLowerCase(), ".jpg"),
-                                type: WDOCreateDocumentSubmitFileType(f.type),
+                                filename: "".concat(f.type.toLowerCase(), "_").concat(f.side.toLowerCase(), ".jpg"),
+                                type: WDODocumentTypeToSubmitType(f.type),
                                 side: WDOCreateDocumentSubmitFileSide(f.side),
-                                originalDocumentId: f.originalDocumentId
+                                originalDocumentId: f.originalDocumentId,
+                                data: f.data
                             };
                         });
-                        return [4 /*yield*/, this.handleError(this.api.verificationSubmitDocuments(pid, base64zipDemo, resubmit, submitFiles))];
+                        return [4 /*yield*/, this.handleError(this.api.verificationSubmitDocuments(pid, resubmit, submitFiles))];
                     case 1:
                         _a.sent();
                         return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.processing, item: exports.WDOStatusCheckReason.documentUpload })];
@@ -1529,9 +1742,14 @@ var WDOBaseVerificationService = /** @class */ (function () {
                         return [4 /*yield*/, this.handleError(this.api.verificationCleanup(pid))];
                     case 1:
                         _a.sent();
-                        this.cachedProcess = undefined;
+                        return [4 /*yield*/, this.setCachedProcess(undefined)];
+                    case 2:
+                        _a.sent();
                         WDOLogger.info("Verification process restarted.");
-                        return [2 /*return*/, this.processSuccess({ type: exports.WDOVerificationStateType.intro })];
+                        return [4 /*yield*/, this.status()];
+                    case 3: 
+                    // return new status
+                    return [2 /*return*/, _a.sent()];
                 }
             });
         });
@@ -1550,7 +1768,9 @@ var WDOBaseVerificationService = /** @class */ (function () {
                         return [4 /*yield*/, this.handleError(this.api.verificationCleanup(pid))];
                     case 1:
                         _a.sent();
-                        this.cachedProcess = undefined;
+                        return [4 /*yield*/, this.setCachedProcess(undefined)];
+                    case 2:
+                        _a.sent();
                         WDOLogger.info("Verification process canceled.");
                         return [2 /*return*/];
                 }
@@ -1583,7 +1803,7 @@ var WDOBaseVerificationService = /** @class */ (function () {
                             }
                             else {
                                 WDOLogger.error("OTP verification failed, no remaining attempts or OTP expired");
-                                throw this.processError(new WDOError("OTP verification failed, no remaining attempts or OTP expired"));
+                                throw this.processError(new WDOError(exports.WDOErrorReason.otpFailed, "OTP verification failed, no remaining attempts or OTP expired"));
                             }
                         }
                 }
@@ -1637,7 +1857,7 @@ var WDOBaseVerificationService = /** @class */ (function () {
         var pid = (_a = this.lastStatus) === null || _a === void 0 ? void 0 : _a.processId;
         if (!pid) {
             WDOLogger.error("Process id not available - did you start the verification process and fetched the status?");
-            throw new WDOError("Process id not available - did you start the verification process and fetched the status?");
+            throw new WDOError(exports.WDOErrorReason.processNotInProgress, "Process id not available - did you start the verification process and fetched the status?");
         }
         return pid;
     };
@@ -1674,7 +1894,7 @@ var WDOBaseVerificationService = /** @class */ (function () {
                         if (status_1.state !== WDOPowerAuthActivationState.ACTIVE) {
                             WDOLogger.error("PowerAuth status is not active (status".concat(status_1.state, ") - notifying the delegate and returning and error."));
                             (_b = this.listener) === null || _b === void 0 ? void 0 : _b.powerAuthActivationStatusChanged(this, status_1);
-                            return [2 /*return*/, new WDOError("PowerAuth activation is not active anymore")];
+                            return [2 /*return*/, new WDOError(exports.WDOErrorReason.powerauthNotActivated, "PowerAuth activation is not active anymore")];
                         }
                         return [3 /*break*/, 4];
                     case 3:
@@ -1702,123 +1922,123 @@ var WDOVerificationStatus = /** @class */ (function () {
         // UNDEFINED PHASE
         if (phase == undefined) {
             switch (status) {
-                case WDOIdentityVerificationStatus.notInitialized:
+                case exports.WDOIdentityVerificationStatus.notInitialized:
                     nextStep = WDONextStep.intro;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
             }
         }
         // DOCUMENT UPLOAD PHASE
-        else if (phase === WDOIdentityVerificationPhase.documentUpload) {
+        else if (phase === exports.WDOIdentityVerificationPhase.documentUpload) {
             switch (status) {
-                case WDOIdentityVerificationStatus.inProgress:
+                case exports.WDOIdentityVerificationStatus.inProgress:
                     nextStep = WDONextStep.documentScan;
                     break;
-                case WDOIdentityVerificationStatus.verificationPending:
+                case exports.WDOIdentityVerificationStatus.verificationPending:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.documentVerification;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
             }
         }
         // DOCUMENT VERIFICATION PHASE
-        else if (phase === WDOIdentityVerificationPhase.documentVerification) {
+        else if (phase === exports.WDOIdentityVerificationPhase.documentVerification) {
             switch (status) {
-                case WDOIdentityVerificationStatus.accepted:
+                case exports.WDOIdentityVerificationStatus.accepted:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.documentAccepted;
                     break;
-                case WDOIdentityVerificationStatus.inProgress:
+                case exports.WDOIdentityVerificationStatus.inProgress:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.documentVerification;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
-                case WDOIdentityVerificationStatus.rejected:
+                case exports.WDOIdentityVerificationStatus.rejected:
                     nextStep = WDONextStep.rejected;
                     break;
             }
         }
         // DOCUMENT VERIFICATION FINAL PHASE
-        else if (phase === WDOIdentityVerificationPhase.documentVerificationFinal) {
+        else if (phase === exports.WDOIdentityVerificationPhase.documentVerificationFinal) {
             switch (status) {
-                case WDOIdentityVerificationStatus.accepted:
+                case exports.WDOIdentityVerificationStatus.accepted:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.documentsCrossVerification;
                     break;
-                case WDOIdentityVerificationStatus.inProgress:
+                case exports.WDOIdentityVerificationStatus.inProgress:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.documentsCrossVerification;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
-                case WDOIdentityVerificationStatus.rejected:
+                case exports.WDOIdentityVerificationStatus.rejected:
                     nextStep = WDONextStep.rejected;
                     break;
             }
         }
         // CLIENT EVALUATION PHASE
-        else if (phase === WDOIdentityVerificationPhase.clientEvaluation) {
+        else if (phase === exports.WDOIdentityVerificationPhase.clientEvaluation) {
             switch (status) {
-                case WDOIdentityVerificationStatus.inProgress:
+                case exports.WDOIdentityVerificationStatus.inProgress:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.clientVerification;
                     break;
-                case WDOIdentityVerificationStatus.accepted:
+                case exports.WDOIdentityVerificationStatus.accepted:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.clientAccepted;
                     break;
-                case WDOIdentityVerificationStatus.rejected:
+                case exports.WDOIdentityVerificationStatus.rejected:
                     nextStep = WDONextStep.rejected;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
             }
         }
         // PRESENCE CHECK PHASE
-        else if (phase === WDOIdentityVerificationPhase.presenceCheck) {
+        else if (phase === exports.WDOIdentityVerificationPhase.presenceCheck) {
             switch (status) {
-                case WDOIdentityVerificationStatus.notInitialized:
-                case WDOIdentityVerificationStatus.inProgress:
+                case exports.WDOIdentityVerificationStatus.notInitialized:
+                case exports.WDOIdentityVerificationStatus.inProgress:
                     nextStep = WDONextStep.presenceCheck;
                     break;
-                case WDOIdentityVerificationStatus.verificationPending:
+                case exports.WDOIdentityVerificationStatus.verificationPending:
                     nextStep = WDONextStep.statusCheck;
                     statusCheckReason = exports.WDOStatusCheckReason.verifyingPresence;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
-                case WDOIdentityVerificationStatus.rejected:
+                case exports.WDOIdentityVerificationStatus.rejected:
                     nextStep = WDONextStep.rejected;
                     break;
             }
         }
         // OTP PHASE
-        else if (phase === WDOIdentityVerificationPhase.otp) {
+        else if (phase === exports.WDOIdentityVerificationPhase.otp) {
             switch (status) {
-                case WDOIdentityVerificationStatus.verificationPending:
+                case exports.WDOIdentityVerificationStatus.verificationPending:
                     nextStep = WDONextStep.otp;
                     break;
             }
         }
         // COMPLETED PHASE
-        else if (phase === WDOIdentityVerificationPhase.completed) {
+        else if (phase === exports.WDOIdentityVerificationPhase.completed) {
             switch (status) {
-                case WDOIdentityVerificationStatus.accepted:
+                case exports.WDOIdentityVerificationStatus.accepted:
                     nextStep = WDONextStep.success;
                     break;
-                case WDOIdentityVerificationStatus.failed:
+                case exports.WDOIdentityVerificationStatus.failed:
                     nextStep = WDONextStep.failed;
                     break;
-                case WDOIdentityVerificationStatus.rejected:
+                case exports.WDOIdentityVerificationStatus.rejected:
                     nextStep = WDONextStep.rejected;
                     break;
             }
@@ -1853,15 +2073,15 @@ var WDONextStep;
 })(WDONextStep || (WDONextStep = {}));
 function documentAction(document) {
     switch (document.status) {
-        case WDODocumentStatus.accepted:
+        case exports.WDODocumentStatus.accepted:
             return "proceed";
-        case WDODocumentStatus.uploadInProgress:
-        case WDODocumentStatus.inProgress:
-        case WDODocumentStatus.verificationPending:
-        case WDODocumentStatus.verificationInProgress:
+        case exports.WDODocumentStatus.uploadInProgress:
+        case exports.WDODocumentStatus.inProgress:
+        case exports.WDODocumentStatus.verificationPending:
+        case exports.WDODocumentStatus.verificationInProgress:
             return "wait";
-        case WDODocumentStatus.rejected:
-        case WDODocumentStatus.failed:
+        case exports.WDODocumentStatus.rejected:
+        case exports.WDODocumentStatus.failed:
             return "error";
     }
     WDOLogger.debug("Unknown document status: ".concat(document.status, " for document ID: ").concat(document.id));
@@ -1928,6 +2148,10 @@ var WDOVerificationService = /** @class */ (function (_super) {
     WDOVerificationService.prototype.changeAcceptLanguageImpl = function (language) {
         this.api.networking.acceptLanguage = language;
     };
+    /* @internal */
+    WDOVerificationService.prototype.getPAInstanceId = function () {
+        return this.powerauth.instanceId;
+    };
     return WDOVerificationService;
 }(WDOBaseVerificationService));
 
@@ -1989,11 +2213,53 @@ var WDOConfigurationService = /** @class */ (function (_super) {
     return WDOConfigurationService;
 }(WDOBaseConfigurationService));
 
+/**
+ * Copyright Wultra s.r.o.
+ *
+ * This source code is licensed under the Apache License, Version 2.0 license
+ * found in the LICENSE file in the root directory of this source tree.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+var WDOCordovaCache = /** @class */ (function () {
+    function WDOCordovaCache() {
+    }
+    WDOCordovaCache.prototype.set = function (key, value) {
+        if (value) {
+            return PowerAuthStorageUtils.setString(key, value, PowerAuthStorageType.SECURE);
+        }
+        else {
+            return PowerAuthStorageUtils.remove(key, PowerAuthStorageType.SECURE).then(function () { });
+        }
+    };
+    WDOCordovaCache.prototype.get = function (key) {
+        return PowerAuthStorageUtils.getString(key, PowerAuthStorageType.SECURE);
+    };
+    WDOCordovaCache.prototype.has = function (key) {
+        return PowerAuthStorageUtils.exists(key, PowerAuthStorageType.SECURE);
+    };
+    return WDOCordovaCache;
+}());
+
+/**
+ * Copyright Wultra s.r.o.
+ *
+ * This source code is licensed under the Apache License, Version 2.0 license
+ * found in the LICENSE file in the root directory of this source tree.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+WDODefaultCache.instance = new WDOCordovaCache();
+
 exports.Side = Side;
 exports.WDOActivationService = WDOActivationService;
 exports.WDOConfigurationService = WDOConfigurationService;
+exports.WDOCreateDocumentSubmitFileSide = WDOCreateDocumentSubmitFileSide;
 exports.WDODocumentFile = WDODocumentFile;
 exports.WDODocumentTypeSides = WDODocumentTypeSides;
+exports.WDODocumentTypeToSubmitType = WDODocumentTypeToSubmitType;
+exports.WDOError = WDOError;
 exports.WDOLogger = WDOLogger;
 exports.WDOScannedDocument = WDOScannedDocument;
 exports.WDOVerificationScanProcess = WDOVerificationScanProcess;