idmission-web-sdk 1.0.100 → 1.0.101

package/dist/components/submission/SubmissionProvider.d.ts

@@ -4,7 +4,7 @@ import { UploadedDocument } from '../additional_document_capture/AdditionalDocum
 import { SignatureData } from '../signature_capture/data';
 import { NetworkError, SubmissionError } from './Errors';
 import { CapturedDocuments } from '../id_capture/CapturedDocuments';
-export type TokenState = 'NOT_PARSED' | 'PARSING' | 'GOOD' | 'EXPIRED' | 'INVALID_FORMAT' | 'INVALID_SIGNATURE' | 'MISSING' | 'PUBLIC_KEY_LOAD_FAILED';
+export type TokenState = 'NOT_PARSED' | 'PARSING' | 'GOOD' | 'MISSING' | 'EXPIRED' | 'INVALID_FORMAT' | 'INVALID_SIGNATURE' | 'ISSUER_NOT_ALLOWED' | 'PUBLIC_KEY_LOAD_FAILED';
 export type SubmissionState = {
     submit: () => Promise<SubmissionResponse | null>;
     submissionStatus: SubmissionStatus;

package/dist/components/submission/TokenIssuerNotAllowedErrorOverlay.d.ts

@@ -0,0 +1,2 @@
+import React from 'react';
+export declare const TokenIssuerNotAllowedErrorOverlay: () => React.JSX.Element;

package/dist/sdk2.cjs.development.js

@@ -46,7 +46,7 @@ var LanguageDetector__default = /*#__PURE__*/_interopDefaultLegacy(LanguageDetec
 var i18n__default = /*#__PURE__*/_interopDefaultLegacy(i18n);
 var SignatureCanvas__default = /*#__PURE__*/_interopDefaultLegacy(SignatureCanvas);
 
-var webSdkVersion = '1.0.100';
+var webSdkVersion = '1.0.101';
 
 function getPlatform() {
   // eslint-disable-next-line @typescript-eslint/ban-ts-comment
@@ -576,6 +576,40 @@ var TokenPublicKeyErrorOverlay = function TokenPublicKeyErrorOverlay(_a) {
   }, "support@idmission.com"), ".")));
 };
 
+var TokenIssuerNotAllowedErrorOverlay = function TokenIssuerNotAllowedErrorOverlay() {
+  return /*#__PURE__*/React__default['default'].createElement(OverlayContainer, null, /*#__PURE__*/React__default['default'].createElement(OverlayInner, {
+    style: {
+      justifyContent: 'center'
+    }
+  }, /*#__PURE__*/React__default['default'].createElement("h3", {
+    style: {
+      marginBottom: 8
+    }
+  }, "IDmission WebSDK failed to load"), /*#__PURE__*/React__default['default'].createElement("p", {
+    style: {
+      marginBottom: 0
+    }
+  }, "Required property ", /*#__PURE__*/React__default['default'].createElement("code", null, "submissionToken"), " comes from an unrecognized issuer."), /*#__PURE__*/React__default['default'].createElement("p", {
+    style: {
+      marginBottom: 0,
+      lineHeight: '1.5rem'
+    }
+  }, "Ensure you are generating a fresh token for each request to the IDmission WebSDK."), /*#__PURE__*/React__default['default'].createElement("p", {
+    style: {
+      lineHeight: '1.5rem'
+    }
+  }, "Please refer to the", ' ', /*#__PURE__*/React__default['default'].createElement("a", {
+    href: "https://www.npmjs.com/package/idmission-web-sdk#getting-started",
+    target: "_blank",
+    rel: "noreferrer"
+  }, "Getting Started"), ' ', "section of the documentation for information on how to use your credentials to generate a valid", ' ', /*#__PURE__*/React__default['default'].createElement("a", {
+    href: "https://jwt.io",
+    target: "_blank",
+    rel: "noreferrer"
+  }, "JSON Web Token"), ' ', "for your IDmission account. Every usage of the IDmission WebSDK must be authorized with a valid JWT from IDmission's servers.")));
+};
+
+var allowedTokenIssuers = ['https://demoauth.idmission.com/', 'https://auth.idmission.com/'];
 var SubmissionContext = /*#__PURE__*/React.createContext({
   submit: function submit() {
     return tslib.__awaiter(void 0, void 0, void 0, function () {
@@ -1148,6 +1182,12 @@ var SubmissionProvider = function SubmissionProvider(_a) {
                 return [2 /*return*/, setTokenState('INVALID_FORMAT')];
               }
               iss = parsed.iss;
+              if (!allowedTokenIssuers.some(function (allowedIss) {
+                return iss.startsWith(allowedIss);
+              })) {
+                console.error('issuer is not allowed', iss);
+                return [2 /*return*/, setTokenState('ISSUER_NOT_ALLOWED')];
+              }
               _a.label = 1;
             case 1:
               _a.trys.push([1, 4,, 5]);
@@ -1250,6 +1290,9 @@ var SubmissionProvider = function SubmissionProvider(_a) {
       error: tokenError
     });
   }
+  if (tokenState === 'ISSUER_NOT_ALLOWED') {
+    return /*#__PURE__*/React__default['default'].createElement(TokenIssuerNotAllowedErrorOverlay, null);
+  }
   return /*#__PURE__*/React__default['default'].createElement(SubmissionContext.Provider, {
     value: value
   }, geolocationRequired && geolocationBlocked ? ( /*#__PURE__*/React__default['default'].createElement(GeolocationAccessDeniedOverlay, null)) : children, submissionError && ( /*#__PURE__*/React__default['default'].createElement(SubmissionErrorOverlay, {