zh-web-sdk 2.10.13 → 2.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zh-web-sdk",
-  "version": "2.10.13",
+  "version": "2.11.0",
   "private": false,
   "description": "ZeroHash Web SDK",
   "homepage": "https://github.com/seedcx/zh-web-sdk",

package/src/iframe-container/AppContainer.tsx

@@ -256,47 +256,55 @@ const AppContainer = ({
     }
   }, []);
 
-  const eventHandler = useCallback(
+  const worldAppEventHandler = useCallback(
     async (event: MessageEvent) => {
-      if (event.data?.type === "MINIKIT_PAY_COMMAND") {
-        if (!MiniKit.isInstalled()) {
-          console.log("Minikit not installed. Installing minikit under sdk");
-          MiniKit.install();
-        }
-        if (MiniKit.isInstalled()) {
-          console.log("Minikit installed. Processing payment");
-          const payload = event.data.payload;
-          try {
-            const minikitPayload: PayCommandInput = {
-              reference: payload.reference,
-              to: payload.to,
-              tokens: [
-                {
-                  symbol: payload.token as Tokens,
-                  token_amount: tokenToDecimals(
-                    Number(payload.amount),
-                    payload.token
-                  ).toString(),
-                },
-              ],
-              description: payload.description,
-            };
-            const { finalPayload } =
-              await MiniKit.commandsAsync.pay(minikitPayload);
+      // Does nothing if not running inside the World App
+      if (!isInsideWorldApp()) {
+        return;
+      }
+
+      const zhAppsURL = new URL(zeroHashAppURL);
+      if (event.origin !== zhAppsURL.origin) {
+        console.warn("Received message from unknown origin:", event.origin);
+        return;
+      }
 
-            iRef.current?.contentWindow?.postMessage(
-              { type: "MINIKIT_PAY_COMMAND_RESULT", result: finalPayload },
-              zeroHashAppURL
-            );
-          } catch (error) {
-            iRef.current?.contentWindow?.postMessage(
+      if (!MiniKit.isInstalled()) {
+        const result = MiniKit.install();
+        console.log("MiniKit not installed, installing now", { result });
+      }
+      if (event.data?.type === "MINIKIT_PAY_COMMAND") {
+        const payload = event.data.payload;
+        try {
+          const minikitPayload: PayCommandInput = {
+            reference: payload.reference,
+            to: payload.to,
+            tokens: [
               {
-                type: "MINIKIT_PAY_COMMAND_RESULT",
-                result: { error: String(error), status: "error" },
+                symbol: payload.token as Tokens,
+                token_amount: tokenToDecimals(
+                  Number(payload.amount),
+                  payload.token
+                ).toString(),
               },
-              zeroHashAppURL
-            );
-          }
+            ],
+            description: payload.description,
+          };
+          const { finalPayload } =
+            await MiniKit.commandsAsync.pay(minikitPayload);
+
+          iRef.current?.contentWindow?.postMessage(
+            { type: "MINIKIT_PAY_COMMAND_RESULT", payload: { finalPayload } },
+            zeroHashAppURL
+          );
+        } catch (error) {
+          iRef.current?.contentWindow?.postMessage(
+            {
+              type: "MINIKIT_PAY_COMMAND_RESULT",
+              result: { error: String(error), status: "error" },
+            },
+            zeroHashAppURL
+          );
         }
       }
     },
@@ -304,9 +312,9 @@ const AppContainer = ({
   );
 
   useEffect(() => {
-    window.addEventListener("message", eventHandler);
-    return () => window.removeEventListener("message", eventHandler);
-  }, [eventHandler, zeroHashAppURL]);
+    window.addEventListener("message", worldAppEventHandler);
+    return () => window.removeEventListener("message", worldAppEventHandler);
+  }, [worldAppEventHandler, zeroHashAppURL]);
 
   const iframeURL = new URL(zeroHashAppURL);
   iframeURL.searchParams.set("name", appLoadTime.toString());