spotny-sdk 0.6.2 → 0.6.3

package/android/src/main/java/com/spotnysdk/SpotnySdkModule.kt

@@ -47,9 +47,9 @@ class SpotnySdkModule(private val reactContext: ReactApplicationContext) :
   private var maxDetectionDistance  = 8.0  // metres
   /** Multiplier applied to raw BLE distance. Default 0.5 matches Kontakt.io -12 dBm beacons. */
   private var distanceCorrectionFactor = 0.5
-  /** Company/brand name identifying the SDK consumer (e.g. "nike"). */
-  private var source: String?       = null
-  /** Bearer token used to authorise all API calls. Set during initialize(). */
+  /** API key identifying the SDK consumer (e.g. "nike"). Set during initialize(). */
+  private var apiKey: String?     = null
+  /** JWT returned by /api/app/sdk/verify. Injected as Authorization header on all subsequent calls. */
   private var sdkToken: String?     = null
 
   // ── Timing constants ──────────────────────────────────────────────────────
@@ -137,7 +137,7 @@ class SpotnySdkModule(private val reactContext: ReactApplicationContext) :
   override fun initialize(config: ReadableMap?, promise: Promise) {
     config?.getDouble("maxDetectionDistance").takeIf { config?.hasKey("maxDetectionDistance") == true }
       ?.let { maxDetectionDistance = it; Log.d(TAG, "maxDetectionDistance = $it m") }
-    config?.getString("source")?.let { source = it; Log.d(TAG, "source = $it") }
+    config?.getString("apiKey")?.let { apiKey = it; Log.d(TAG, "apiKey = $it") }
     config?.getDouble("distanceCorrectionFactor")
       .takeIf { config?.hasKey("distanceCorrectionFactor") == true && it > 0 }
       ?.let { distanceCorrectionFactor = it; Log.d(TAG, "distanceCorrectionFactor = $it") }
@@ -146,22 +146,35 @@ class SpotnySdkModule(private val reactContext: ReactApplicationContext) :
       promise.reject("MISSING_TOKEN", "initialize() requires a token")
       return
     }
-    sdkToken = token
+    val key = apiKey?.takeIf { it.isNotBlank() }
+    if (key == null) {
+      promise.reject("MISSING_API_KEY", "initialize() requires an apiKey")
+      return
+    }
 
-    // Verify the token — device_id and source are sent as headers automatically
-    post("/api/app/sdk/verify", emptyMap()) { status, _ ->
+    // Send token + apiKey to backend — response returns a JWT used for all subsequent calls
+    // sdkToken is null here so no Authorization header is injected on this call
+    val verifyPayload = mapOf("token" to token, "api_key" to key)
+    post("/api/app/sdk/verify", verifyPayload) { status, body ->
       when {
         status in 200..299 -> {
-          Log.d(TAG, "SDK initialized and authorized (source: $source)")
+          val jwt = try {
+            val json = parseJsonObject(body)
+            ((json?.get("data") as? Map<*, *>)?.get("jwt") as? String)?.takeIf { it.isNotBlank() }
+          } catch (_: Exception) { null }
+          if (jwt == null) {
+            promise.reject("VERIFY_FAILED", "SDK verification response missing JWT")
+            return@post
+          }
+          sdkToken = jwt
+          Log.d(TAG, "SDK initialized — JWT stored (apiKey: $apiKey)")
           promise.resolve("SDK initialized")
         }
         status == 401 || status == 403 -> {
-          sdkToken = null
           Log.w(TAG, "Token unauthorized ($status)")
           promise.reject("UNAUTHORIZED", "Invalid or expired SDK token")
         }
         else -> {
-          sdkToken = null
           Log.w(TAG, "Verification failed ($status)")
           promise.reject("VERIFY_FAILED", "SDK verification returned status $status")
         }
@@ -421,7 +434,7 @@ class SpotnySdkModule(private val reactContext: ReactApplicationContext) :
           setRequestProperty("Content-Type", "application/json")
           setRequestProperty("X-Device-ID", getDeviceId())
           sdkToken?.let { setRequestProperty("Authorization", "Bearer $it") }
-          source?.let   { setRequestProperty("X-Source", it) }
+          apiKey?.let   { setRequestProperty("X-Api-Key", it) }
           connectTimeout = 10_000
           readTimeout    = 10_000
           doOutput = true

package/ios/SpotnyBeaconScanner.swift

@@ -59,9 +59,9 @@ public class SpotnyBeaconScanner: NSObject {
   /// Multiplier applied to raw RSSI-derived distance to compensate for low TX power.
   /// Overridable via configure(). Default 0.5 matches Kontakt.io -12 dBm beacons.
   private var distanceCorrectionFactor: Double = 0.5
-  /// Company/brand name that identifies the SDK consumer (e.g. "nike").
-  private var source: String?
-  /// Bearer token used to authorise all API calls. Set during initialize().
+  /// API key identifying the SDK consumer (e.g. "nike"). Set during initialize().
+  private var apiKey: String?
+  /// JWT returned by /api/app/sdk/verify. Injected as Authorization header on all subsequent calls.
   private var sdkToken: String?
 
   // ── Session TTL ────────────────────────────────────────────────────────────
@@ -203,9 +203,9 @@ public class SpotnyBeaconScanner: NSObject {
       maxDetectionDistance = dist
       print("⚙️ SpotnySDK: maxDetectionDistance = \(dist)m")
     }
-    if let src = config["source"] as? String {
-      source = src
-      print("⚙️ SpotnySDK: source = \(src)")
+    if let key = config["apiKey"] as? String {
+      apiKey = key
+      print("⚙️ SpotnySDK: apiKey = \(key)")
     }
     if let factor = config["distanceCorrectionFactor"] as? Double, factor > 0 {
       distanceCorrectionFactor = factor
@@ -215,27 +215,36 @@ public class SpotnyBeaconScanner: NSObject {
       reject("MISSING_TOKEN", "initialize() requires a token", nil)
       return
     }
-    sdkToken = token
+    guard let key = apiKey, !key.isEmpty else {
+      reject("MISSING_API_KEY", "initialize() requires an apiKey", nil)
+      return
+    }
 
-    // Verify the token — device_id and source are sent as headers automatically
-    post(endpoint: "/api/app/sdk/verify", payload: [:]) { [weak self] result in
+    // Send token + apiKey to backend — response returns a JWT used for all subsequent calls
+    // sdkToken is nil here so no Authorization header is injected on this call
+    let verifyPayload: [String: Any] = ["token": token, "api_key": key]
+    post(endpoint: "/api/app/sdk/verify", payload: verifyPayload) { [weak self] result in
       guard let self = self else { return }
       switch result {
-      case .success(let (status, _)):
+      case .success(let (status, data)):
         if 200...299 ~= status {
-          print("✅ SpotnySDK: Initialized and authorized (source: \(self.source ?? "none"))")
+          guard let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any],
+                let dataObj = json["data"] as? [String: Any],
+                let jwt = dataObj["jwt"] as? String, !jwt.isEmpty else {
+            reject("VERIFY_FAILED", "SDK verification response missing JWT", nil)
+            return
+          }
+          self.sdkToken = jwt
+          print("✅ SpotnySDK: Initialized — JWT stored (apiKey: \(self.apiKey ?? "none"))")
           resolve("SDK initialized")
         } else if status == 401 || status == 403 {
-          self.sdkToken = nil
           print("❌ SpotnySDK: Token unauthorized (\(status))")
           reject("UNAUTHORIZED", "Invalid or expired SDK token", nil)
         } else {
-          self.sdkToken = nil
           print("❌ SpotnySDK: Verification failed (\(status))")
           reject("VERIFY_FAILED", "SDK verification returned status \(status)", nil)
         }
       case .failure(let error):
-        self.sdkToken = nil
         print("❌ SpotnySDK: Verification network error — \(error.localizedDescription)")
         reject("VERIFY_ERROR", error.localizedDescription, error)
       }
@@ -474,9 +483,9 @@ public class SpotnyBeaconScanner: NSObject {
     req.httpMethod = "POST"
     req.setValue("application/json", forHTTPHeaderField: "Content-Type")
     if let token = sdkToken { req.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization") }
-    // device_id and source injected on every request — backend can verify without parsing the body
+    // device_id and api_key injected on every request — backend can verify without parsing the body
     req.setValue(getDeviceId(), forHTTPHeaderField: "X-Device-ID")
-    if let src = source { req.setValue(src, forHTTPHeaderField: "X-Source") }
+    if let key = apiKey { req.setValue(key, forHTTPHeaderField: "X-Api-Key") }
     req.timeoutInterval = 10.0
 
     var bg: UIBackgroundTaskIdentifier = .invalid

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["NativeEventEmitter","NativeModules","NativeSpotnySdk","SpotnyEvents","ON_BEACONS_RANGED","ON_BEACON_REGION_EVENT","eventEmitter","SpotnySdk","startScanner","stopScanner","isScanning","initialize","config","identify","userId","requestNotificationPermissions","getDebugLogs","clearDebugLogs","setDebounceInterval","interval","clearDebounceCache","getDebounceStatus","addBeaconsRangedListener","callback","addListener","addBeaconRegionListener"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,kBAAkB,EAAEC,aAAa,QAAQ,cAAc;AAChE,OAAOC,eAAe,MAAM,sBAAmB;;AAE/C;AACA,OAAO,MAAMC,YAAY,GAAG;EAC1BC,iBAAiB,EAAE,iBAAiB;EACpCC,sBAAsB,EAAE;AAC1B,CAAU;;AAEV;;AA0CA;AACA,MAAMC,YAAY,GAAG,IAAIN,kBAAkB,CAACC,aAAa,CAACM,SAAS,CAAC;;AAEpE;;AAEA;AACA,OAAO,SAASC,YAAYA,CAAA,EAAoB;EAC9C,OAAON,eAAe,CAACM,YAAY,CAAC,CAAC;AACvC;;AAEA;AACA,OAAO,SAASC,WAAWA,CAAA,EAAoB;EAC7C,OAAOP,eAAe,CAACO,WAAW,CAAC,CAAC;AACtC;;AAEA;AACA,OAAO,SAASC,UAAUA,CAAA,EAAqB;EAC7C,OAAOR,eAAe,CAACQ,UAAU,CAAC,CAAC;AACrC;;AAEA;;AAEA;AACA;AACA;AACA,OAAO,SAASC,UAAUA,CAACC,MAAuB,EAAmB;EACnE,OAAOV,eAAe,CAACS,UAAU,CAACC,MAAgB,CAAC;AACrD;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,QAAQA,CAACC,MAAc,EAAmB;EACxD,OAAOZ,eAAe,CAACW,QAAQ,CAACC,MAAM,CAAC;AACzC;;AAEA;;AAEA;AACA,OAAO,SAASC,8BAA8BA,CAAA,EAAoB;EAChE,OAAOb,eAAe,CAACa,8BAA8B,CAAC,CAAC;AACzD;;AAEA;;AAEA;AACA,OAAO,SAASC,YAAYA,CAAA,EAAoB;EAC9C,OAAOd,eAAe,CAACc,YAAY,CAAC,CAAC;AACvC;;AAEA;AACA,OAAO,SAASC,cAAcA,CAAA,EAAoB;EAChD,OAAOf,eAAe,CAACe,cAAc,CAAC,CAAC;AACzC;;AAEA;;AAEA;AACA,OAAO,SAASC,mBAAmBA,CAACC,QAAgB,EAAmB;EACrE,OAAOjB,eAAe,CAACgB,mBAAmB,CAACC,QAAQ,CAAC;AACtD;;AAEA;AACA,OAAO,SAASC,kBAAkBA,CAAA,EAAoB;EACpD,OAAOlB,eAAe,CAACkB,kBAAkB,CAAC,CAAC;AAC7C;;AAEA;AACA,OAAO,SAASC,iBAAiBA,CAAA,EAAoB;EACnD,OAAOnB,eAAe,CAACmB,iBAAiB,CAAC,CAAC;AAC5C;;AAEA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CACtCC,QAA4C,EAC5C;EACA,OAAOjB,YAAY,CAACkB,WAAW,CAC7BrB,YAAY,CAACC,iBAAiB,EAC9BmB,QACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASE,uBAAuBA,CACrCF,QAA4C,EAC5C;EACA,OAAOjB,YAAY,CAACkB,WAAW,CAC7BrB,YAAY,CAACE,sBAAsB,EACnCkB,QACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["NativeEventEmitter","NativeModules","NativeSpotnySdk","SpotnyEvents","ON_BEACONS_RANGED","ON_BEACON_REGION_EVENT","eventEmitter","SpotnySdk","startScanner","stopScanner","isScanning","initialize","config","identify","userId","requestNotificationPermissions","getDebugLogs","clearDebugLogs","setDebounceInterval","interval","clearDebounceCache","getDebounceStatus","addBeaconsRangedListener","callback","addListener","addBeaconRegionListener"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,kBAAkB,EAAEC,aAAa,QAAQ,cAAc;AAChE,OAAOC,eAAe,MAAM,sBAAmB;;AAE/C;AACA,OAAO,MAAMC,YAAY,GAAG;EAC1BC,iBAAiB,EAAE,iBAAiB;EACpCC,sBAAsB,EAAE;AAC1B,CAAU;;AAEV;;AA6CA;AACA,MAAMC,YAAY,GAAG,IAAIN,kBAAkB,CAACC,aAAa,CAACM,SAAS,CAAC;;AAEpE;;AAEA;AACA,OAAO,SAASC,YAAYA,CAAA,EAAoB;EAC9C,OAAON,eAAe,CAACM,YAAY,CAAC,CAAC;AACvC;;AAEA;AACA,OAAO,SAASC,WAAWA,CAAA,EAAoB;EAC7C,OAAOP,eAAe,CAACO,WAAW,CAAC,CAAC;AACtC;;AAEA;AACA,OAAO,SAASC,UAAUA,CAAA,EAAqB;EAC7C,OAAOR,eAAe,CAACQ,UAAU,CAAC,CAAC;AACrC;;AAEA;;AAEA;AACA;AACA;AACA,OAAO,SAASC,UAAUA,CAACC,MAAuB,EAAmB;EACnE,OAAOV,eAAe,CAACS,UAAU,CAACC,MAAgB,CAAC;AACrD;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,QAAQA,CAACC,MAAc,EAAmB;EACxD,OAAOZ,eAAe,CAACW,QAAQ,CAACC,MAAM,CAAC;AACzC;;AAEA;;AAEA;AACA,OAAO,SAASC,8BAA8BA,CAAA,EAAoB;EAChE,OAAOb,eAAe,CAACa,8BAA8B,CAAC,CAAC;AACzD;;AAEA;;AAEA;AACA,OAAO,SAASC,YAAYA,CAAA,EAAoB;EAC9C,OAAOd,eAAe,CAACc,YAAY,CAAC,CAAC;AACvC;;AAEA;AACA,OAAO,SAASC,cAAcA,CAAA,EAAoB;EAChD,OAAOf,eAAe,CAACe,cAAc,CAAC,CAAC;AACzC;;AAEA;;AAEA;AACA,OAAO,SAASC,mBAAmBA,CAACC,QAAgB,EAAmB;EACrE,OAAOjB,eAAe,CAACgB,mBAAmB,CAACC,QAAQ,CAAC;AACtD;;AAEA;AACA,OAAO,SAASC,kBAAkBA,CAAA,EAAoB;EACpD,OAAOlB,eAAe,CAACkB,kBAAkB,CAAC,CAAC;AAC7C;;AAEA;AACA,OAAO,SAASC,iBAAiBA,CAAA,EAAoB;EACnD,OAAOnB,eAAe,CAACmB,iBAAiB,CAAC,CAAC;AAC5C;;AAEA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CACtCC,QAA4C,EAC5C;EACA,OAAOjB,YAAY,CAACkB,WAAW,CAC7BrB,YAAY,CAACC,iBAAiB,EAC9BmB,QACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASE,uBAAuBA,CACrCF,QAA4C,EAC5C;EACA,OAAOjB,YAAY,CAACkB,WAAW,CAC7BrB,YAAY,CAACE,sBAAsB,EACnCkB,QACF,CAAC;AACH","ignoreList":[]}

package/lib/typescript/src/index.d.ts

@@ -25,11 +25,14 @@ export type BeaconRegionEvent = {
 export type SpotnySdkConfig = {
     /**
      * SDK token issued by Spotny for your app.
-     * Verified against the backend during initialize(). Required.
+     * Sent to the backend during initialize() to obtain a session JWT. Required.
      */
     token: string;
-    /** Identifier for your brand or app (e.g. 'nike'). */
-    source?: string;
+    /**
+     * API key identifying your brand or app (e.g. 'nike').
+     * Sent to the backend during initialize() alongside the token. Required.
+     */
+    apiKey: string;
     /** Maximum BLE detection distance in metres (default: 8.0) */
     maxDetectionDistance?: number;
     /**

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAIX,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IACvC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAOF,6BAA6B;AAC7B,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAE9C;AAED,mDAAmD;AACnD,wBAAgB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAE7C;AAED,uDAAuD;AACvD,wBAAgB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAE7C;AAID;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;AAID;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAExD;AAID,gEAAgE;AAChE,wBAAgB,8BAA8B,IAAI,OAAO,CAAC,MAAM,CAAC,CAEhE;AAID,yCAAyC;AACzC,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAE9C;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAEhD;AAID,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAErE;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEpD;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnD;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,4CAM7C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,4CAM7C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAIX,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IACvC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAOF,6BAA6B;AAC7B,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAE9C;AAED,mDAAmD;AACnD,wBAAgB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAE7C;AAED,uDAAuD;AACvD,wBAAgB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAE7C;AAID;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;AAID;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAExD;AAID,gEAAgE;AAChE,wBAAgB,8BAA8B,IAAI,OAAO,CAAC,MAAM,CAAC,CAEhE;AAID,yCAAyC;AACzC,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAE9C;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAEhD;AAID,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAErE;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEpD;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnD;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,4CAM7C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,4CAM7C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spotny-sdk",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Beacon Scanner",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",

package/src/index.tsx

@@ -35,11 +35,14 @@ export type BeaconRegionEvent = {
 export type SpotnySdkConfig = {
   /**
    * SDK token issued by Spotny for your app.
-   * Verified against the backend during initialize(). Required.
+   * Sent to the backend during initialize() to obtain a session JWT. Required.
    */
   token: string;
-  /** Identifier for your brand or app (e.g. 'nike'). */
-  source?: string;
+  /**
+   * API key identifying your brand or app (e.g. 'nike').
+   * Sent to the backend during initialize() alongside the token. Required.
+   */
+  apiKey: string;
   /** Maximum BLE detection distance in metres (default: 8.0) */
   maxDetectionDistance?: number;
   /**