web-pki 2.14.6 → 2.15.1

package/lacuna-web-pki.d.ts

@@ -341,7 +341,9 @@ export declare class LacunaWebPKI {
 		/** The Array of Base64 encoded hashes to be signed. */
 		batch: string[],
 		/** The digest algorithm identifier of the hashes on `batch` parameter. It can be the algorithm name or OID (i.e. `'SHA-256'` or `'2.16.840.1.101.3.4.2.1'`). */
-		digestAlgorithm: string
+		digestAlgorithm: string,
+		/** Set to be able to call [[preauthorizeSignatures]] in order to call [[signHashBatch]] multiple times.*/
+		usePreauthorizedSignatures?: boolean
 	}): Promise<SignHashBatchResponse>;
 
 	/**************************************************************
@@ -648,7 +650,7 @@ export declare class LacunaWebPKI {
 		idResolutionTable?: XmlIdResolutionTableModel
 
 		/** The selected XML [[FileModel.id]], as returned by [[showFileBrowser]] method. */
-		fileId: string,
+		fileId?: string,
 
 		/** The signer certificate thumbprint. Available in [[CertificateModel.thumbprint]] property returned by [[listCertificates]] method. */
 		certificateThumbprint: string,
@@ -690,7 +692,10 @@ export declare class LacunaWebPKI {
 	 */
 	openPades(args: {
 		/** The signed PDF [[FileModel.id]], as returned by [[showFileBrowser]] method. */
-		signatureFileId: string,
+		signatureFileId?: string,
+
+		/** The signed PDF content (Base64 encoded bytes) to open. It can be passed optionally to `signatureFileId`. */
+		signatureContent?: string,
 
 		/** Whether or not to validate the PDF sinatures. */
 		validate: boolean,
@@ -714,7 +719,10 @@ export declare class LacunaWebPKI {
 	 */
 	openCades(args: {
 		/** The signed document (.p7s) [[FileModel.id]], as returned by [[showFileBrowser]] method. */
-		signatureFileId: string,
+		signatureFileId?: string,
+
+		/** The signed PDF content (Base64 encoded bytes) to open. It can be passed optionally to `signatureFileId`. */
+		signatureContent?: string,
 
 		/** The original file. Only applies if the passed `signatureFileId` does not have the encapsulated content. */
 		originalFileId?: string,
@@ -746,7 +754,7 @@ export declare class LacunaWebPKI {
 		/** The signed XML [[FileModel.id]], as returned by [[showFileBrowser]] method. */
 		signatureFileId?: string,
 
-		/** A signed XML content (UTF-8 string or Base64 encoded bytes) can be passed optionally to `signatureFileId`. */
+		/** The signed XML content (UTF-8 string or Base64 encoded bytes) to open. It can be passed optionally to `signatureFileId`. */
 		signatureContent?: string,
 
 		/** Whether or not to validate the CAdES sinatures. */
@@ -933,7 +941,8 @@ export namespace LacunaWebPKI {
 		v1_5_1 = '1.5.1',
 		v1_5_2 = '1.5.2',
 		v1_6 = '1.6.0',
-		v1_6_1 = '1.6.1'
+		v1_6_1 = '1.6.1',
+		v1_7_0 = '1.7.0'
 	}
 
 	/**************************************************************
@@ -1028,6 +1037,11 @@ export namespace LacunaWebPKI {
 		Unknown = 'Unknown'
 	}
 
+	export const enum CertificatePolicyQualifierTypes {
+		Cps = 'Cps',
+		UserNotice = 'UserNotice'
+	}
+
 	export const enum MobileIntegrationModes {
 		/** Redirects and continue execution inside Web PKI App. Direct integration without bouncing between Browser App and Web PKI App. */
 		AppIntegration = 'appIntegration',
@@ -1053,14 +1067,27 @@ export namespace LacunaWebPKI {
 		/** PAdES-BES policy */
 		Basic = 'basic',
 		/** ICP-Brasil AD-RB policy */
-		BrazilAdrBasica = 'brazilAdrBasica'
+		BrazilAdrBasica = 'brazilAdrBasica',
+		PadesT = 'padesT',
+		BrazilAdrTempo = 'brazilAdrTempo'
 	}
 
 	export const enum CadesPolicies {
+		Cms = 'cms',
 		/** CAdES-BES policy */
 		Bes = 'cadesBes',
+		/** CAdES-T policy */
+		CadesT = 'cadesT',
 		/** ICP-Brasil AD-RB policy */
-		BrazilAdrBasica = 'brazilAdrBasica'
+		BrazilAdrBasica = 'brazilAdrBasica',
+		/** ICP-Brasil AD-RT policy */
+		BrazilAdrTempo = 'brazilAdrTempo',
+		/** ICP-Brasil AD-RV policy */
+		BrazilAdrValidacao = 'brazilAdrValidacao',
+		/** ICP-Brasil AD-RC policy */
+		BrazilAdrCompleta = 'brazilAdrCompleta',
+		/** ICP-Brasil AD-RA policy */
+		BrazilAdrArquivamento = 'brazilAdrArquivamento',
 	}
 
 	export const enum XmlPolicies {
@@ -1069,9 +1096,11 @@ export namespace LacunaWebPKI {
 		/** XAdES-BES policy */
 		XadesBes = 'xadesBes',
 		/** Brazil national NFe policy */
+		XadesT = 'xadesT',
 		BrazilNFe = 'brazilNFe',
 		/** ICP-Brasil AD-RB policy */
 		BrazilAdrBasica = 'brazilAdrBasica',
+		BrazilAdrTempo = 'brazilAdrTempo',
 	}
 
 	export const enum XmlSignedEntityTypes {
@@ -1253,10 +1282,14 @@ export interface ExceptionModel {
  * Each property on the [[PkiBrazilModel]] and [[PkiItalyModel]] objects may be null, but the objects themselves (`cert.pkiBrazil` or `cert.pkiItaly`) are **never** null.
  */
 export interface CertificateModel {
-	/** The Common Name (CN) part of the certificate's subject name field. */
+	/** The Common Name (CN) part of the certificate's subject DN name field. */
 	subjectName: string,
+	/** The subject Distinguished Name (DN) formatted string */
+	subjectDN: string,
 	/** The Common Name (CN) part of the certificate's issuer name field. */
 	issuerName: string,
+	/** The issuer Distinguished Name (DN) formatted string */
+	issuerDN: string,
 	/** `true` if the certificate is stored on Web PKI mobile app. `null` or `false` otherwise. */
 	isRemote?: boolean,
 	/** The subject e-mail address. */
@@ -1265,10 +1298,20 @@ export interface CertificateModel {
 	thumbprint: string,
 	/** Object with boolean properties indicating wether each possible key usage is set on the certificate. */
 	keyUsage: KeyUsagesModel,
+	/** Array with certificate policies info */
+	certificatePolicies: CertificatePolicyModel[],
 	/** Object with Brazil-specific fields. */
 	pkiBrazil: PkiBrazilModel,
+	/** Object with Argentina-specific fields. */
+	pkiArgentina: PkiArgentinaModel,
+	/** Object with Ecuador-specific fields. */
+	pkiEcuador: PkiEcuadorModel,
 	/** Object with Italy-specific fields. */
 	pkiItaly: PkiItalyModel,
+	/** Object with Paraguay-specific fields. */
+	pkiParaguay: PkiParaguayModel,
+	/** Object with Peru-specific fields. */
+	pkiPeru: PkiPeruModel,
 	/** The not before field of the certificate. */
 	validityStart: Date,
 	/** The not after field of the certificate. */
@@ -1332,6 +1375,81 @@ export interface PkiItalyModel {
 	codiceFiscale: string
 }
 
+/**************************************************************
+ * Object with PKI Argentina specific fields.
+ */
+export interface PkiArgentinaModel {
+	/** Clave Única de Identificación Laboral */
+	cuil: string,
+	/** Clave Única de Identificación Tributaria */
+	cuit: string
+}
+
+/**************************************************************
+ * Object with PKI Ecuador specific fields.
+ */
+export interface PkiEcuadorModel {
+	/** */
+	certificateType: string,
+	cedulaDeIdentidad: string,
+	pasaporte: string,
+	/** Registro Único de Proveedores */
+	rup: string,
+	/** Registro Único de Contribuyentes */
+	ruc: string,
+	nombres: string,
+	apellidos: string,
+	razonSocial: string
+}
+
+/**************************************************************
+ * Object with PKI Paraguay specific fields.
+ */
+export interface PkiParaguayModel {
+	personCertificateType: string,
+	certificateType: string,
+	/** Cédula de identidad */
+	ci: string,
+	/** Cédula de identidad para extranjero */
+	cie: string,
+	/** Registro Único de Contribuyente. Número de Cédula Tributaria correspondiente al Titular */
+	ruc: string,
+	pasaporte: string,
+	/** Nombre y apellido del responsable del certificado */
+	responsable: string
+}
+
+/**************************************************************
+ * Object with PKI Peru specific fields.
+ */
+export interface PkiPeruModel {
+	/** Documento Nacional de Identidad */
+	dni: string,
+	/** Registro Único de Contribuyentes */
+	ruc: string
+}
+
+/**************************************************************
+ * Object with certificate policy info
+ */
+export interface CertificatePolicyModel {
+	/** Certificate Policy Identifier */
+	id: string,
+	/** Certificate Policy Qualifiers */
+	qualifiers: CertificatePolicyQualifierModel[]
+}
+
+/**************************************************************
+ * Object with certificate policy qualifier
+ */
+export interface CertificatePolicyQualifierModel {
+	type: LacunaWebPKI.CertificatePolicyQualifierTypes,
+	cpsUri: string,
+	unOrganization: string,
+	unExplicitText: string,
+	unNoticeNumbers: number[],
+}
+
 // Common Functions
 
 export interface SuccessCallback<T> {
@@ -1738,4 +1856,11 @@ export interface TimestampRequester {
 	authentication?: AuthenticationParameters
 }
 
+export interface GeolocationInfo {
+	accuracy: number,
+	latitude: number,
+	longitude: number,
+	timestamp: Date
+}
+
 

package/lacuna-web-pki.js

@@ -21,6 +21,17 @@ LacunaWebPKI = function (license) {
 	if (license) {
 		this.license = license;
 	}
+
+	// check for JQuery blockUI presence causing mobile touch blocking
+	if (this.isSupportedMobile && window.$ && window.$.blockUI) {
+		try {
+			window.$.blockUI.defaults.bindEvents = false;
+			this._log('blockUI bindEvents disabled');
+
+		} catch (ex) {
+			this._log('Error disabling blockUI bindEvents: ', ex);
+		}
+	}
 };
 
 // Inject class prototype
@@ -115,20 +126,21 @@ LacunaWebPKI = function (license) {
 
 	$._installUrl = 'https://get.webpkiplugin.com/';
 	$._chromeExtensionId = 'dcngeagmmhegagicpcmpinaoklddcgon';
-	$._firefoxExtensionId = 'webpki@lacunasoftware.com';
-	$._edgeExtensionId = 'd2798a85-9698-425a-add7-3db79a39ca8a';
+	$._firefoxExtensionId = 'webpki-beta@lacunasoftware.com';
+	$._edgeExtensionId = 'nedeegdmhlnmboboahchfpkmdnnemapd';
+	$._edgeLegacyProductId = 'd2798a85-9698-425a-add7-3db79a39ca8a';
 	$._chromeExtensionFirstVersionWithSelfUpdate = '2.0.20';
-	$._jslibVersion = '2.14.6';
+	$._jslibVersion = '2.15.1';
 	$._mobileSupported = 'true' === 'true';
 	$._buildChannel = 'stable';
 
 	// latest components version ----------------------
-	$._extensionRequiredVersion = '2.15.0';
-	$._chromeNativeWinRequiredVersion = '2.10.1';
-	$._chromeNativeLinuxRequiredVersion = '2.10.0';
-	$._chromeNativeMacRequiredVersion = '2.10.0';
-	$._ieAddonRequiredVersion = '2.7.2';
-	$._mobileRequiredVersion = '2.7.0';
+	$._extensionRequiredVersion = '2.16.0';
+	$._chromeNativeWinRequiredVersion = '2.11.0';
+	$._chromeNativeLinuxRequiredVersion = '2.12.0';
+	$._chromeNativeMacRequiredVersion = '2.12.0';
+	$._ieAddonRequiredVersion = '2.8.0';
+	$._mobileRequiredVersion = '3.0.0';
     // ------------------------------------------------
 
     $._chromeInstallationStates = {
@@ -163,6 +175,7 @@ LacunaWebPKI = function (license) {
 		v1_5_2: '1.5.2',
 		v1_6: '1.6.0',
 		v1_6_1: '1.6.1',
+		v1_7_0: '1.7.0',
 		latest: 'latest'
 	};
 
@@ -187,6 +200,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.nativeWin[$.apiVersions.v1_5_2] = '2.9.0';
 	$._apiMap.nativeWin[$.apiVersions.v1_6] = '2.10.0';
 	$._apiMap.nativeWin[$.apiVersions.v1_6_1] = '2.10.1';
+	$._apiMap.nativeWin[$.apiVersions.v1_7_0] = '2.11.0';
 
     // IE
     $._apiMap.ieAddon[$.apiVersions.v1_0] = '2.0.4';
@@ -200,6 +214,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.ieAddon[$.apiVersions.v1_5_2] = '2.6.0';
 	$._apiMap.ieAddon[$.apiVersions.v1_6] = '2.7.0';
 	$._apiMap.ieAddon[$.apiVersions.v1_6_1] = '2.7.2';
+	$._apiMap.ieAddon[$.apiVersions.v1_7_0] = '2.8.0';
 
     // Linux
     $._apiMap.nativeLinux[$.apiVersions.v1_0] = '2.0.0';
@@ -213,6 +228,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.nativeLinux[$.apiVersions.v1_5_2] = '2.9.5';
 	$._apiMap.nativeLinux[$.apiVersions.v1_6] = '2.10.0';
 	$._apiMap.nativeLinux[$.apiVersions.v1_6_1] = '2.10.0';
+	$._apiMap.nativeLinux[$.apiVersions.v1_7_0] = '2.12.0';
 
     // Mac
     $._apiMap.nativeMac[$.apiVersions.v1_0] = '2.3.0';
@@ -226,6 +242,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.nativeMac[$.apiVersions.v1_5_2] = '2.9.5';
 	$._apiMap.nativeMac[$.apiVersions.v1_6] = '2.10.0';
 	$._apiMap.nativeMac[$.apiVersions.v1_6_1] = '2.10.0';
+	$._apiMap.nativeMac[$.apiVersions.v1_7_0] = '2.12.0';
 
     // WebExtension
     $._apiMap.extension[$.apiVersions.v1_0] = '2.3.2';
@@ -239,6 +256,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.extension[$.apiVersions.v1_5_2] = '2.14.2';
 	$._apiMap.extension[$.apiVersions.v1_6] = '2.15.0';
 	$._apiMap.extension[$.apiVersions.v1_6_1] = '2.15.0';
+	$._apiMap.extension[$.apiVersions.v1_7_0] = '2.16.0';
 
 	// Mobile
     $._apiMap.mobile[$.apiVersions.v1_0] = '1.1.0';
@@ -252,6 +270,7 @@ LacunaWebPKI = function (license) {
 	$._apiMap.mobile[$.apiVersions.v1_5_2] = '1.1.0';
 	$._apiMap.mobile[$.apiVersions.v1_6] = '2.7.0';
 	$._apiMap.mobile[$.apiVersions.v1_6_1] = '2.7.0';
+	$._apiMap.mobile[$.apiVersions.v1_7_0] = '3.0.0';
 
     // All latest
     $._apiMap.nativeWin  [$.apiVersions.latest] = $._chromeNativeWinRequiredVersion;
@@ -658,19 +677,11 @@ LacunaWebPKI = function (license) {
 			this.brand = args.brand;
 		}
 		if (args.restPkiUrl) {
-		    this.restPkiUrl = args.restPkiUrl;
+			this.restPkiUrl = args.restPkiUrl[args.restPkiUrl.length - 1] === '/' ? args.restPkiUrl : args.restPkiUrl + '/';
 		}
 
 		this.useDomainNativePool = args.useDomainNativePool === true;
 
-		if ($.isSupportedMobile && window.$ && window.$.blockUI) {
-			try {
-				window.$.blockUI.defaults.bindEvents = false;
-			} catch (ex) {
-				$._log('Error disabling blockUI bindEvents: ', ex);
-			}
-		}
-
 		var self = this;
 		var onCheckInstalledSuccess = function (result) {
 		    if (result.isInstalled) {
@@ -995,6 +1006,7 @@ LacunaWebPKI = function (license) {
 		var request = {
 			certificateThumbprint: args.certificateThumbprint,
 			digestAlgorithm: args.digestAlgorithm,
+			usePreauthorizedSignatures: args.usePreauthorizedSignatures,
 			batch: args.batch
 		};
 		$._requestHandler.sendCommand(context, 'signHashBatch', request);
@@ -1320,9 +1332,19 @@ LacunaWebPKI = function (license) {
 	    return context.promise;
 	};
 
+	$.getGeolocation = function (args) {
+		var context = this._createContext(args);
+		var request = {
+			certificateThumbprint: args.certificateThumbprint
+		};
+		$._requestHandler.sendCommand(context, 'getGeolocation', request);
+		return context.promise;
+	};
+
 
 	// -------------------- Browser detection --------------------
-	// http://stackoverflow.com/questions/2400935/browser-detection-in-javascript
+	// Based on http://stackoverflow.com/questions/2400935/browser-detection-in-javascript
+	// with new Edge  UA 'Edg' changes
 	$.detectedBrowser = (function () {
 		var ua = navigator.userAgent, tem,
 		M = ua.match(/(opera|chrome|safari|firefox|msie|trident(?=\/))\/?\s*(\d+)/i) || [];
@@ -1331,7 +1353,7 @@ LacunaWebPKI = function (license) {
 			return 'IE ' + (tem[1] || '');
 		}
 		if (M[1] === 'Chrome') {
-			tem = ua.match(/\b(OPR|Edge)\/(\d+)/);
+			tem = ua.match(/\b(OPR|Edge|Edg)\/(\d+)/);
 			if (tem !== null) return tem.slice(1).join(' ').replace('OPR', 'Opera');
 		}
 		M = M[2] ? [M[1], M[2]] : [navigator.appName, navigator.appVersion, '-?'];
@@ -1340,24 +1362,24 @@ LacunaWebPKI = function (license) {
 	})();
 
 	$._supportedMobileDetected = false;
-	var mobileOs = (function () {
-		var nAgt = navigator.userAgent;
-		var os = '';
-		var clientStrings = [
-			 { s: 'Android', r: /Android/ },
-			 { s: 'iOS', r: /(iPhone|iPad|iPod)/ }
-		];
-		for (var i = 0; i < clientStrings.length; i++) {
-			var cs = clientStrings[i];
-			if (cs.r.test(nAgt)) {
-				os = cs.s;
-				$._supportedMobileDetected = true && $._mobileSupported;
-				break;
-			}
+	var hasMultiTouchPoints = window.navigator.maxTouchPoints > 3;
+	var mobileOs = '';
+	var clientStrings = [
+		{ getName: function () { return 'Android'; }, r: /Android/ },
+		{ getName: function () { return 'iOS'; },     r: /(iPhone|iPad|iPod)/ },
+
+		// iPad iOS running on Desktop mode
+		{ getName: function () { return hasMultiTouchPoints ? 'iOS' : ''; }, r: /(Mac OS|MacPPC|MacIntel|Mac_PowerPC|Macintosh)/ }
+	];
+	for (var i = 0; i < clientStrings.length; i++) {
+		var cs = clientStrings[i];
+		if (cs.r.test(window.navigator.userAgent)) {
+			mobileOs = cs.getName();
+			break;
 		}
-		return os;
-	})();
+	}
 
+	$._supportedMobileDetected = $._mobileSupported && mobileOs !== '';
 	$.isSupportedMobile = $._supportedMobileDetected;
 
 
@@ -1408,7 +1430,7 @@ LacunaWebPKI = function (license) {
 		isIE = ($.detectedBrowser.indexOf('IE') >= 0);
 		isChrome = ($.detectedBrowser.indexOf('Chrome') >= 0);
 		isFirefox = ($.detectedBrowser.indexOf('Firefox') >= 0);
-		isEdge = ($.detectedBrowser.indexOf('Edge') >= 0);
+		isEdge = ($.detectedBrowser.indexOf('Edg') >= 0);
 		isSafari = ($.detectedBrowser.indexOf('Safari') >= 0);
 		// mobile os
 		isAndroid = ($._supportedMobileDetected && mobileOs === 'Android');
@@ -1456,13 +1478,9 @@ LacunaWebPKI = function (license) {
 						command: command,
 						request: request
 					};
-					if (isChrome) {
-						var eventC = new CustomEvent('build', { 'detail': message });
-						eventC.initEvent(requestEventName);
+					if (isChrome || isEdge) {
+						var eventC = new CustomEvent(requestEventName, { 'detail': message });
 						document.dispatchEvent(eventC);
-					} else if (isEdge) {
-						var eventE = new CustomEvent(requestEventName, { 'detail': message });
-						document.dispatchEvent(eventE);
 					} else {
 					    window.postMessage({
 					        port: requestEventName,
@@ -1478,7 +1496,7 @@ LacunaWebPKI = function (license) {
 
 				var pollExtension = function (context, tryCount) {
 					$._log('polling extension');
-					var meta = document.getElementById($._chromeExtensionId) || document.getElementById($._firefoxExtensionId.replace(/[^A-Za-z0-9_]/g, '_')) || document.getElementById($._edgeExtensionId);
+					var meta = document.getElementById($._chromeExtensionId) || document.getElementById($._firefoxExtensionId.replace(/[^A-Za-z0-9_]/g, '_')) || document.getElementById($._edgeExtensionId) || document.getElementById($._edgeLegacyProductId);
 					if (meta === null) {
 						if (tryCount > 1) {
 							setTimeout(function () {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-pki",
-  "version": "2.14.6",
+  "version": "2.15.1",
   "description": "The Lacuna Web PKI component enables web applications to interact with digital certificates through javascript, without the need of Java.",
   "main": "lacuna-web-pki.js",
   "types": "lacuna-web-pki.d.ts",