All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Warning to push usage of Studio token over SDK token and deprecation message
- New accessible autocomplete component
- adds smart caret false for OTP phone input
- Removed debug log from production build
- Fix type exports
- Provided A more descriptive error screen
- Fixed QR code from showing during re-connection phase
- Fixed navigation bug related to consent in classic mode
- Removed the 10s timeout for the loading of modules
- Implement cross_device_url for enterprise clients
- Removed redundant video upload in document capture
- add side, issuing_country and type to the video upload
- Fixed a bug for Mobile SDKs
- Documentation for the new
theme
api
- Motion intro screen can be skipped through showIntro option
- Removed motion confirmation screen
- Typescript support for the npm package
- Proof of Address Module: replaced basic camera with js camera
- Ensure the motion instruction video is dismissed on the head-turn side complete
- accessibility screen reader and keyboard navigations
- Assistive technologies now reads intructions in center of capture frame
- Preselect country in documents list following the value of custom input
preferred_user_country
(currently only works with Onfido Studio)
- Updated CSP - Added data: to media-src
- Fixed accessibility and usability issues with the document list
- Optional task completion task when using Studio token
- Removed inactivity error message and continue to display shutter button
- Extended SSN scope to include US territories: American Samoa, Guam, Northern Marian Islands, United States Virgin Islands and Puerto Rico
- The redo button displayed after an error when uploading a document is now a primary button
- Updated CSP - Added data: to media-src
- Ensure screen readers don't read headings twice
- Resolved an issue causing infinite loading when pressing the back button on the video preview screen
- Updated CSP - Added data: to media-src
- Fixed video preview on iOS
- Replaced the
faceVideo
intro icons with bullet points aligned with Motion - Improved accessibility of the country selector label
- Various accessibility fixes
- Check audio permission for
faceMotion
whenrecordAudio
is enabled - Fixed UPLOAD user analytics event
- Removed whitespaces at end of string inputs for profile data
- Fixed UPLOAD user analytics event
- Removed whitespaces at end of string inputs for profile data
- Various bug fixes and accessibility updates
- Various bug fixes and accessibility updates
- Added an error warning if no international code is included in the phone number field for one-time password link
- International code is now included in the phone number field for one-time password link
- Expose version in the
Onfido.init
handle - Adjustment to the preloading of modules to reduce loading time
- Expose version in the
Onfido.init
handle - Adjustment to the preloading of modules to reduce loading time
- Adjustment to the preloading of modules to reduce loading time
- Adjustment to the preloading of modules to reduce loading time
- New error types for
workflow_abandoned
andworkflow_error
added to SDK errors
- Motion is now supported in all devices.
motionFallbackVariant
option.
- Updated CSP guide for troubleshooting most common issues.
No changes.
- New Document or SSN selection module / Task.
- Improving cross-device verification adjustments.
- Fixed document type configurations.
- Fixed typing for npm loader.
- Fixed typescript types missing SdkParameters.
- Support
crossDevicePolicy: "force"
for face modules.
- Support
crossDevicePolicy: "force"
for face modules.
- Fixed an issue, where firefox is used on desktop and redirects the user as part of the
onComplete
callback. - Fixed accessibility issues.
- New google fonts supports.
- CSP updates.
- Added SameSite=None for
onfido-web-sdk-analytics
cookie to allow cookie to be transferred once browsers switches to new default of SameSite=Lax. - Added promise to tearDown().
- Improved analytics properties.
- See migrations guide.
- Removed check for audio permission in webview.
- Removed migrate_locales scripts.
- Removed performance benchmark
- Fix validation for Indonesia ID number
- Fix National ID Number semantic type and display
- Perform retries on 5xx error.
- Added
permissions_unavailable
error type to theonError
callback
- Update camera icon for Document upload
- Disable Picture-in-Picture tooltip during Face capture
- Fix disabled submit button in country selection in PoA step
- Document capture: Add integrator events 'DOCUMENT_CAPTURE_FRONT' and 'DOCUMENT_CAPTURE_BACK' for the Javascript camera.
- Document country selection: Automatically close the keyboard after country is selected
- Add support a selection of Google fonts
- Fixed duplicated back button on Motion loading screen
- Add new
showIntro
configuration for the Standard and Video capture steps - New permission screen instructions were added to guide users on various devices/browsers to recover from denied access to the camera.
- A click on the search icon in the Country Selector will focus the input field
- JS Document capture is now fixed for Firefox on Android
- Show spinner while we're waiting for the next studio task to be ready
- Add new
colorBackgroundDropdownItemHover
andcolorBackgroundDropdownItemActive
UI customization option for the country selector. - Add ODP error handling (https://documentation.onfido.com/#original-document-present-reasons)
- New document capture experience change: Stop rendering the fallback message after two blurry document upload tries.
- Three changes in the Javascript "New document capture experience": One, increase timeout to see the fallback error message from 40s to 80s. Two, don't show the fallback error message when uploadFallback is disabled. Three, keep the button available even when the uploadFallback error message is shown.
- Support customUI on self-hosted crossdevice instances
- Prevent the windows touch machines from using the JS camera. In some cases, the Windows Touch machines were allowed to behave as mobile devices. It's not the case anymore.
- Fix the resolution of the new document capture experience (JS Camera) for iOS devices. It was 1443 px instead of 1440 px.
- Fix workflow double document steps and blank screen after face capture
- Prevent Windows Touch machines from using the JS camera. In some cases, Windows Touch machines were allowed to behave as mobile devices. This is no longer the case.
- Fix loading modules when the first module is skippable (studio).
- Add a general tips section in the README.md
- Change the welcome screen wording to comply with video recording regulations.
- Custom cross device URLs can now contain a path between the host and the hash. Ex:
https://host:port/some/path/HASH
- Color contrast in button and remove icons preload
- Update
resend SMS
copy for better user experience. - Add Accessibility translations for Motion.
- Add support for Romanian national identity number in profile capture
- Fix
issuing_country
oncross-device
forpassport
not added to payload.
- Fix close button on document preview
- Add play pause button to motion intro animation video.
- Fix duplicate Motion capture uploads on SDK initialisations without a
complete
step. - Fix Motion capture recording starting too early.
- Remove
uploadFallback
option in thedocument
step. - Remove
uploadFallback
option in theface
step. - Add a new error when barcode detection issues arise.
- Fix workflow multi document tasks step configuration.
- Add an instructional video in the Face Video intro screen.
- Expose Motion events as user analytics.
- Fix custom colours on icons
- Fix phone input to prevent country from resetting
- Fix
InvalidStateException
in edge cases where webcams takes too long to initialise. - Fix icon sizes on intro screens with long texts
- Deprecate the
tearDown
method. PrefersafeTearDown
, which is a promise and awaitable.
- Public: Fix a crash in the Selfie step when the SDK is bundled
- Public: Bump react-webcam to 7.1.1. Really fixes the bug that caused selfies to appear stretched on Safari 15.
- Public: Fix preact version to 10.11.3. This should improve our stability when our library is rebundled (NPM).
- Internal: Fix internal issue.
- Public: Fix a bug that prevented document upload from the native camera application.
- Public: Fix a bug that caused selfies to appear stretched on Safari 15.
- Public: Document selection: fix a bug where the documents were wrongly selected when the welcome screen was not in use and the documents were filtered with the Dashboard.
- Public: Fix a bug that happens only in some cases, where Document Capture was not working because of a library import issue (preact/compat).
- Public: Updated document capture documentation
- Public: Add
disableWelcomeScreen
option to disable the welcome screen for Studio workflows. - Public: Remove Auth SDK
- Internal: Enhanced security around payload tampering
- Public: Add capture of ID numbers for Vietnam
- Internal: Auto uppercase postcode to avoid errors
- Public: Fixed a bug in the selfie/face video step, where the face would not be zoomed in correctly.
- Public: Reduce by one the number of forced retries in case of error while submitting a document. For a max retry count of 4, the 5th attempt will be the final one (previously it was the 6th attempt).
- Public: In the document step, if there is only a single country due to
documentTypes
option, show a disabled input with the country pre selected for the user. - Public: In the document step, add new option
hideCountrySelection
to bypass the country selection sub screen. Refer to the README for more information. - Public: Added support for dashboard document selection via
/supported_documents
endpoint andenableDocumentSupportRules
option for overriding dashboard feature flag.
- Fix for consistent language between desktop and mobile in cross device flow
- Internal: Added
isWebView
SDK configuration option for enabling native featured via webview - Public: Prevent error during tearDown when fired from onComplete callback
- Public: Workflow configurable
forceCrossDevice
todocument
andpoa
task. The features lets Studio users
- Public: Add a range of new languages
- Public: Add RTL support
- Public: Use browser language when available
- Public: For Romanian National ID back side, stop having errors displayed (new IDs have nothing on the backside)
- Public: Fix a Cross Device issue:
When the face step comes before the document step, it's asked for the type of document and issuing country on the desktop then again on the mobile
- Public: Add Document auto capture for the New Document Capture Experience. It will be progressively rolled out at Onfido's discretion, depending on Document Type and Document Country
- Public: Add the New Document Capture Experience. It will be progressively rolled out at Onfido's discretion, to replace the native camera application
- Public: Deprecate beta option
useLiveDocumentCapture
. The option was not working properly, it will be removed during next quarterly - Public: Deprecate undocumented alpha option
useWebcam
. The option was not working, at all, it will be removed during next quarterly - Public: Added support for cs_CZ, ro_RO and pl_PL locales
- Internal: Add Performance analytics
- Internal: Track screen transition with performance analytics
- Internal: Add network and feature flag support for Logger
- Internal: Add data-onfido-qas for a few elements on profile screen and country option selection
- Public: GA workflow api 3.5 integration
- Public: Add new
colorBackgroundSelector
UI customization option - Public: Add new
colorBackgroundDocTypeButtonHover
andcolorBackgroundDocTypeButtonActive
UI customization options
- Public: Fix for https://github.com/onfido/onfido-sdk-ui/issues/2127
- Public: Fix for https://github.com/onfido/onfido-sdk-ui/issues/2131
- Public: Validation for the "date of birth" field (profile capture screen)
- Public: Revert the
useLiveDocumentCapture
changes - Public: Add UI customization options for buttons hover & active states
- Public: Add UI customization options for giving small icons a custom color
- Public: Add UI customization option for input
outline-color
- Public: Accept
motion
as arequestedVariant
for theface
step - Public: Document Content Security Policy changes related to Motion
- Internal: Move
sdkConfiguration
in to store - Internal: Add feature flag for inhouse analytics
- Internal: Add
x-onfido-sdk-metadata
header to all onfido network requests - Internal: Add integration & intergration-version to
x-onfido-sdk-metadata
header - Internal: Add
PageVisibility
- Internal: Add a performance benchmark
- Public: Display the correct error screen when expired trial
- Public: Added translations for expired trial
errors.expired_trial.instruction
anderrors.expired_trial.message
- Internal: Add network and feature flag support for Logger
- Public: Add Honduras and Mexico National Identity Cards
- Public: Change the
useLiveDocumentCapture
option: camera selection logic improved, resolution increased to 1920x1080
- Public: Display the correct error screen when expired trial
- Public: Added translations for expired trial
errors.expired_trial.instruction
anderrors.expired_trial.message
- Public: Welcome page UI changes for trial accounts
- Fix setting "pan" value for the profile capture step
- Internal: Migrated onfido/react-webcam fork to typescript and absorbed it into this repo
- Internal: Add utility tool for locales
- Internal: Add Logger module
- Internal: Remove woopra
- Internal: Migrate analytics from
/v3
to/v4
- Internal: Place cross device SMS feature behind a feature flag
- Internal: Add
disableAnalyticsCookies
option - Internal: Integrate Passive Signals module
- Internal: Migrated onfido/react-webcam fork to typescript and absorbed it into this repo
- Internal: Collect
FACE_LIVENESS_*
analytics events - Internal: Send OS name and version information in sdk configuration request
- Internal: Update terser to 5.14.2 & moment to 2.29.4
- Internal: Add Network module
- Internal: Move all network calls to the Network module
- Internal: Add
trackPropertiesBeforeMount
to internal analytics api - Public: Add commit hash in console
- Internal: Add
x-onfido-sdk-version
andx-onfido-sdk-platform
headers to all onfido network requests - Internal: Update FaceTec SDK on Auth step from 9.4.11 to 9.4.12
- Internal: Show connection error screen on active video upload errors
- Public: Fixed setoption, setOptions was setting unspecified values to their default value.
- Internal: Add dynamically loaded files (except en_US)
- Internal: Upgraded Sentry to v7, added ErrorBoundary, fingerprinting and moved into its own module
- Internal: Move Woopra into it's own core module
- Internal: Migrate webpack to typescript
- Internal: Add cross device pooling
- Public: Support for SSN (for USA only) data capture.
- Public: Collect country of residence before other profile data
- Public: Add translations for profile data
- Public: Support DocumentTypes option
- Public: Remove asterisk from required fields
- Public: Merge country and document selection in a single screen.
- Internal: Remove isFullScreen prop from NavigationBar
- Internal: Add missing analytics events from DocumentLiveCapture and DocumentMultiframe
- Internal: Migrate the react-webcam code into SDK + migrate it to typescript
- Internal: Use the
max_total_retries
field from SdkConfiguration to compute the max number of document capture retries after an image quality failed check. It was previously was set to 1. - Internal: Add
video_instruction_type
property to analytics eventFACE_VIDEO_CAPTURE
andFACE_VIDEO_CAPTURE_NEXT_BUTTON_CLICKED
- Internal: Rename analytics event
FACE_VIDEO_CAPTURE_RECORDING_NEXT_CLICKED
toFACE_VIDEO_CAPTURE_NEXT_BUTTON_CLICKED
- Internal: Add
ui_alerts
properties toFALLBACK_TRIGGERED
analytics events - Internal: Add many new analytics events
CAMERA_ACCESS_*
,CAPTURE_*
,CONFIRMATION_*
- Internal: Add new analytics events
NAVIGATION_BACK_BUTTON_CLICKED
andNAVIGATION_CLOSE_BUTTON_CLICKED
- Internal: Rename analytics event
FACE_INTRO
toFACE_SELFIE_INTRO
- Internal: Add properties to analytics events for
DOCUMENT_CAPTURE
&DOCUMENT_CONFIRMATION
- Internal: Remove
trackComponentMode()
&trackComponentAndMode()
- Internal: Added test case configs to our demo app with queryString
testCase
- Internal: Add a css root scope to our SDK
- Public: Scope our customization of castor components to our SDK css root
- Public: Strip away
color-scheme
to prevent interference with customer styles - Internal: Upgrade
@sentry/[email protected]
- Internal: Fix Sentry artifacts CI upload
- Internal: Migrated
MobileFlow
&CrossDeviceSubmit
to typescript - Internal: Migrated
MobileFlow
,CrossDeviceLink
&CrossDeviceSubmit
to typescript - Internal: Added
ScreenLayout
to CrossDeviceSubmit - Internal: Update FaceTec SDK on Auth step from 9.4.5 to 9.4.11
- Internal: Upgrade
typescript
to 4.6.2 - Public: Add UI customization option for
colorBackgroundQRCode
- Public: Fix inline style to support Content Security Policy
- Public: Fix for http 204 request errors due to parsing
- Public: Fix for skipping step when using cross-device on mobile
- Public: Fix for showing user consent multiple times
- Public: Fix error when
mobilePhrases
is supplied butphrases
are not
- Public: Added mapping to convert old to new analytics events
- Public: Fix useLiveDocumentCapture onComplete not working (cross device capture
variant
missing)
- Public: Removed
userConsent
step option. User Consent is controlled by Onfido API. - Internal: Set
acceptSslCerts
totrue
for browserstack CI test to avoid "This connection is not private" screens - Internal: Migrate
ModalApp
to typescript - Internal: Add support for
.env
file - Public: Update Proof of Address flow to present Country Select
- Public: Determine Proof of Address document options from endpoint
- Public: Fix useLiveDocumentCapture onComplete not working (cross device capture
variant
missing)
- Internal: Upgraded to webpack 5
- Internal: Upgraded
eslint
,mocha
,jest
- Internal: Resolved all deprecated & vulnerability issues by removing and upgrading packages
- Internal: Added more pollyfills for IE11
- Internal: Upgraded
react-webcam-onfido
to1.0.0
- Internal: Removed
dist
&lib
from repo and added to.gitignore
file - Public: Removed
*.LICENSE.txt
files fromlib
&dist
, seelicenses.json
instead - Public: Fixed
CrossDeviceInfo
screen layout to prevent scrolling - Public: Merged
dist/onfido.vendors~crossDevice.min.js
intodist/onfido.crossDevice.min.js
- Public: Merged
dist/onfidoAuth.6.min.js
toonfidoAuth.min.js
- Public: Rearranged
dependencies
&devDependencies
inpackage.json
to reflect correct usage - Internal:
CrossDeviceMobileRouter
always connects to desktop to gather the config - Public: Added a cookie with anonymous uuid for analytics purposes
- Internal: Upgrade
minimist
tov1.2.6
to fix vulnerability - Public: Added a "microphone & camera" permission screen
- Internal: Handle errors by callback instead of
throw
forrequestChallenges
andpostToBackend
- Internal: Migrated
ClientSuccess
to typescript - Internal: Added individual analytics
*_upload_started
&*_upload_completed
events for all uploads - Internal: Fixed behavior for analytics event
CUSTOM_API_REQUEST_COMPLETED
& addedCUSTOM_API_REQUEST_COMPLETED
- Internal: Updated
integratorTrackedEvents
with multiple triggers forUPLOAD
to reflect analytics upload events changes - Internal: Upgrade
minimist
to v1.2.6 - Internal: Upgrade
[email protected]
&[email protected]
- Internal: Set ideal photo width for selfie step to ensure consistency across mobile devices
- Internal: Prevent Face step (variant: video) from falling back to selfie upon camera error when
uploadFallback: false
is provided - Internal: Remove duplicated config and strip out custom locales from analytics events
- Public: Fix issue where
poa
anddocument
steps cannot be used at the same time. Addspoa
key toonComplete
callback. - Public: Fix mis-aligned text for IE11 on Welcome screen
- Internal: Fix polyglot to hide missing locales and add warning when in development
- Internal: Refactor selfie capture step to ensure camera is ready before enabling any capture
- Internal: Update
multipleSelfieCapture
feature to ensure snapshot is taken at a different time than the selfie - Internal: Migrate
SdkConfiguration
tov3.3
- Public: Add compatibility with Salesforce
- Public: Add type
DocumentTypes
toDocumentResponse
- Internal: Migrated
NavigationBar
to typescript - Internal: Migrated
Pannable
to typescript - Internal: Migrated
QRCode
to typescript - Internal: Migrated
PhoneNumberInput
to typescript - Internal: Migrated
locales/polyglot
to typescript
- Public: Updated supported documents list to include Curaçao and other countries.
- Public: Updated document capture experience for better image quality (multi-frame capture)
- Internal: Added
SdkConfigurationServiceProvider
anduseSdkConfigurationService
to retrieve and use feature flags. - Vastly decreased bundle size by not publishing "webpack visualizer" files to NPM.
- Internal: Added new analytics events for confirmation errors
- Internal: Added new analytics events for camera, upload, http requests and sms errors
- Internal: Update FaceTec SDK on Auth step from
9.3.4
to9.4.5
. Removed 3 hardcoded custom properties defined on Auth component UI. - Internal: Added events for video preview and face video recording/next buttons
- Internal: Added new analytics events for custom callbacks
- Internal: Prevent analytics events without mapping from being send to our api
- Public: Update documentation for custom callbacks
- UI: Fixed Stick Hover State for buttons on iOS Safari
- Public: Fix locale key mismatch for the title of the
CAMERA_NOT_WORKING_NO_FALLBACK
error - Internal: Upgrade
eventemitter2
to v2.2.2 - Public: Fix usage of
removeAllListeners
inModalApp
- Public: Fixed CSS variables naming for internal tokens
- Change the behavior when
useMultipleSelfieCapture
feature is enable to stop capturing periodic snapshots once the final selfie is being captured.
- UI: Fixed Live Document Capture flow's camera inactive warning not displaying the basic camera fallback option if
uploadFallback
is not defined for SDK configuration's Document step.
- Public: Added support for Dutch
nl_NL
. - Internal: Added new analytics event naming convention for
v3/analytics
. Woopra will still receive the old events until we are ready to discontinue the integration.
- Public: Added
autoFocusOnInitialScreenTitle
SDK configuration option for integrators to override the SDK auto focusing on the initial screen's title on loading. The default behaviour may not be desirable for some host apps or sites as it could cause the browser to focus on the SDK, rather than content or form inputs outside of the SDK that the end user should see and fill in first. - Upgrade
react-phone-number-input
to v3.1.38 - Revert change which returns document type as 'unknown' in
onComplete
callback payload if Residence Permit is selected. The API now supports Residence Permit as a document type for document uploads.
- UI: Set the 'Send link' Button component on Cross Device Send SMS Link screen as
type="button"
to prevent the Button component defaulting to asubmit
type button when SDK is embedded within aform
element. - UI: Fix live document capture overlay appearing very small compared to how it was in version
6.14.0
.
- Public: Fix issue where multiple SDK instances were sharing the same Redux store values. This was resulting in duplicate cross-device links across multiple instances. With this change, the redux store is reset every time one SDK instance is unmounted via the
tearDown()
function.
- UI: Fix layout issues for Microsoft Surface tablets on some integrations, i.e. Country Selector text input height, camera stream view offset too far to the left in portrait orientation.
- Update all Sass / division operation to use the new math.div() syntax to address Sass 2.0 deprecation warnings.
- Upgrade react-webcam-onfido to 0.1.27 to enforce default values for video/audio bitrate to ensure generated file size is not bigger than necessary.
- UI: Host country flag icons internally and fix flag icons not being displayed on Cross Device SMS Phone Number Input, 2-sided documents' Country Selector screens.
- Public: Use new version of
react-webcam-onfido
that includes fix to correctly apply themuted
attribute to thevideo
element. This will prevent the "Live Broadcast" screen to appear on some Safari iOS versions, which is the cause of the identical snapshot and live photos issue.
- Public: Fix error when face step selfie/video variant was requested for users on mobile devices
- UI: Set all Button components as
type="button"
if not already set as that to prevent the Button component defaulting to asubmit
type button. - UI: Fix SDK only displaying a loading spinner instead of the "Something's gone wrong" error screen with messages "The link only works on mobile devices / You’ll need to restart your verification on your computer".
- Public: Fixed Web SDK breaking with a
Container wasn't rendered!
console error on the Document live capture step when in Modal mode since version6.11.1
- Public: Fix SDK displaying "The following keys have missing data: document_front" console error and not triggering the
onComplete
callback to integrator if user transitioned to Cross Device flow for the Face step - UI: Fix UI issue where a user returning to the Desktop tab after completing the capture on cross-device flow, sees "Document" in the confirmation list even when a document was not captured.
- Internal: Added configuration to support visual regression tests to run against multiple languages.
- Internal: Send analytics events to
v3/analytics
. Analytics events are also sent to Woopra, until we are ready to discontinue the current Woopra integration.
- UI: Accessibility - Return focus to Document capture image preview's "Enlarge image" toggle button when expanded image preview's "Close" toggle button is clicked.
- Public: Video element errors and validation errors returned by live_videos endpoint are handled by the Web SDK
- Public: Fix grey oblong background appearing under the red cross icon on the Unsupported Browser error screen
- Public: Remove grey circle background from SVG icon displayed on Generic Error screen so that custom circle background is visible
- Internal: Upgraded some dev dependencies to fix some npm security vulnerabilities, also upgraded socket.io-client dependency to v4.2.0 to resolve npm security vulnerability in [email protected]
- UI: Added new Intro screen when user begins the Cross Device flow on their mobile device.
- Public: Added SDK configuration options for integrators to customize product name, copy and/or logo image for the new Cross Device Mobile Client Intro screen.
- Public: Fixed custom SDK body text color set in
customUI.colorContentBody
option not getting applied to Country Selector text input if an element level text colour has been set in host app/site's stylesheet. - UI: Fixed Country Selector dropdown menu closing on clicking on scrollbar.
- Internal: Auth - Fetch correct API URL from the Redux store
- Internal: New data field in metadata to track number of takes for each submitted image.
- UI: Fixed the text placement to be below the primary button in the Document Upload screen.
- Public: Fixed cross-device connection issue when cross-device link is accessed multiple times.
- UI: Fix QR Code link section rendering issue in Safari 14 on desktops
- UI: The Cross Device link options visible to end users can be configured by passing an array of the link method IDs (
qr_code
,sms
,copy_link
) in the order of preference to_crossDeviceLinkMethods
in SDK initialization configuration.
- UI: Accessibility - Make "Tips" heading in Cross Device SMS Sent and Mobile Connected screens a level 3 heading.
- UI: Accessibility - Change Cross Device Send Link alternate option text to be an ARIA heading level 2
- UI: Fix camera view not lining up with Document Live Capture overlay and fix image distortion on some devices' live camera view by maintaining camera view aspect ratio.
- Public: Fix file selector "capture" prop for WebSDK inside iOS WebView
- Public: Fix
CROSS_DEVICE_START
user analytic event for integrators never being dispatched when user switches to the Cross Device flow - UI: Update copy in Face Liveness Video intro screen from 25s to 20s to reflect the correct time limit
- Remove old locale key type definitions that are no longer used/exist in code base.
- UI: Accessibility - Add ARIA role
img
and an ARIA label for the generated cross device secure link QR code image - Internal: Resolved inaccurate reporting on test automation failures.
- Internal: Added note about lockfileVersion and npm version requirement for SDK contributors in CONTRIBUTING.md documentation.
- Public: Improvements in video capture steps.
- UI: Accessibility - Add ARIA role
button
to "Resend link" and "Cancel" links on Cross Device flow SMS Sent, Mobile Connected screens. - Internal: Remove
image_quality
breakdowns fromsdk_warnings
response because the field will be soon deprecated. - Internal: Moved
geckodriver
fromdependencies
todevDependencies
. - Internal: Added ability to run tests without the use of the mock server for the UI tests.
- UI: Fixed Camera Permissions Primer screen rendering issue on Safari 14.1 (desktop) without changing existing SDK layout structure.
- Reduce resolution to VGA if browser does not support recording videos in WebM format (e.g. Safari 14.x that only supports MP4 format) to avoid large video files being created.
- UI: Fixed Camera Permissions Primer screen rendering issue on Safari 14.1 (desktop) by using ScreenLayout wrapper component.
- Internal: Added note about lockfileVersion and npm version requirement for SDK contributors in CONTRIBUTING.md documentation.
- Public: Added support for Italian
it_IT
and Portuguesept_PT
. - Internal: Added support for visual regression testing using Percy.
- Internal: Resolved inaccurate reporting on test automation failures.
- Internal: Added ability to execute/ignore tests via the use of tags/regex.
- UI: Update Face Liveness Video Challenge screen UI
- UI: Updated default Welcome screen UI
- Public: Move documentation for SDK UI Customizations and Premium Enterprise Features into separate Markdown files to reduce README size
- Public: Updated SDK copy for English (en_US), Spanish (es_ES), French (fr_FR) and German (de_DE). For details on what keys/copy have changed please refer to the MIGRATION.md documentation.
- Internal: Upgrade sass (Dart Sass) from
1.26.9
to1.33.0
- Internal: Upgrade stylelint from
13.6.1
to13.13.1
as well as stylelint-config-sass-guidelines from7.0.0
to8.0.0
and stylelint-scss from3.18.0
to3.19.0
- Internal: Upgrade Preact from version
10.5.4
to10.5.13
in order to resolve an unhandled exception on reinitialising the SDK after closing the SDK modal for some integrations when using Modal mode. - Public: Fix Country Selection screen not displaying when SDK is initialised with boolean
documentTypes
configuration. - Public: Fixed issue where
onComplete
callback was fired without the necessary data for theface
step. Added exception toonError
callback to inform thatonComplete
could not be fired due to missing data.
- Public: Added Authentication module as a beta feature
- Internal: Added support for testing across multiple browsers.
- Internal: Added polyfills for
Object.entries
andObject.fromEntries
for IE11.
- Update to module on
tsconfig.json
fromes6
toesnext
, to allow conditional imports of specific modules (especially useful for Auth/IDV bundle separation).
- UI: Fix SVG icon on Cross Device Uploads Successful, Selfie Intro screens not displaying on some iOS devices, e.g. iPhone 12
- Internal: Add type defition for
borderRadiusSurfaceModal
customisation option. - Public: Add information about Lokalise CLI v2 in CONTRIBUTING doc
- Internal: Refactor
useSdkOptions()
hook to return a tuple:[options, { findStep }]
- Internal: Added default filename for all document uploads if filename is not present.
- Public: Added user consent content reload screen
- Public: When
photoCaptureFallback
option is disabled in the face step, the requested variant is video and browser does not support MediaRecorder, attempt to redirect to the cross-device flow or display the unsupported browser error. - Internal: Refactor for better reusability of video capture components.
- Internal: Migrate CI build from TravisCI to Github Actions
- Internal: Upgraded socket.io-client to v4.0.1 to resolve npm security vulnerability 1665 (high severity)
- Public: Get latest copy from Lokalise with various grammar, punctuation fixes. Also reverts French, Spanish translations for some Proof of Address copy in these languages' locale files (Proof of Address is only supported for English)
- Public: Fix Cross Device "Send Link" options link affecting host app/site's page routing on click
- UI: Fixed flickering country list on SMS country dropdown. The fix involves updating
deviceHasCameraSupport
in the Redux store only when the value changes. - Internal: Fix Liveness Video upload payload to
/live_videos
API endpoint missingchallenge_switch_at
property and value - Internal: Fix incorrect format of
language_code
value in Liveness Video upload payload to/live_videos
API endpoint
- UI: Fix host app/site's own link styling getting overridden by SDK's default theme styling
- Internal: Introduce
SdkOptionsProvider
component anduseSdkOptions()
hook for SDK options' single source of truth. - Public: Added cross-device support for useCustomizedApiRequests callbacks via customer hosting of SDK. Note - This is a premium enterprise feature.
- Public: Added support for UI customizations in SDK configuration using
customUI
option. See README for details of supported customization options. - Internal: Add Woopra tracking for UI customization option usage.
- UI: Replaced internal button component with button from @onfido/castor-react.
- UI: Replaced some Sass variables with CSS variables to allow customization of colors and fonts.
- Public: Added new enterprise feature
logoCobrand
. When purchased and enabled allows integrator to provide their own logo image to be displayed alongside the Onfido logo. - Internal: Use Node 14 LTS for Travis to be consistent with
.nvmrc
andDockerfile
. - Internal: Enable
strict
mode in tsconfig.json
- UI: Fix Camera Permission icon not displaying on iOS devices on Selfie/Liveness capture flow
- Internal: Added ScreenLayout component. This is currently used in the Welcome and Complete screens.
- Public: Added user consent screen
- Public: Added callbacks that are triggered on user media submission if the feature is enabled. Note - This is a premium enterprise feature.
- Internal: App component, Redux system, utils, HoCs & routers are now typed in TypeScript.
- Internal: Use ScreenLayout component in Confirm screen.
- Internal: Replace
ts-loader
with@babel/preset-typescript
for better TypeScript transpilation.
- Public: Fix zoomed document capture view for Document Live Capture on some Huawei devices, e.g. Huawei P40, P30.
- Public: Fix issue where documents are submitted to Onfido API without filename or file type.
- Public: Added npm latest version badge.
- Internal: Now the UI tests will hit API endpoints from a dockerised mock server.
- Internal: Introduce TypeScript on non-critical components & deprecate FlowType.
- Internal: Introduce integration tests for API endpoint integrations.
- Internal: Switched to
bundlewatch
Github Action for bundle size diff reporting, checking. - UI: Updated text and background colours.
- Public: Removed references to MIT license in README and updated copy in LICENSE to refer to Onfido Service Agreement and 3rd party licenses reports.
- Public: Return error for image quality failures on the first two document upload attempts.
- Public: Fix "File type not supported" error on snapshot upload in selfie step.
- Public: Fix typo in
en_US.json
file
- Internal: Introduce Hooks on non-critical components.
- Public: Added
CROSS_DEVICE_INTRO
,CROSS_DEVICE_GET_LINK
user analytic events for integrators to listen for when tracking user journey when initiating Cross Device flow from desktop browser - Public: Added
licenses.json
file containing the list of dependencies licenses.
- UI: User is no longer blocked from uploading an image file over 10MB in size. Instead image is resized to 1440px if file size is over 3MB.
- Internal: Update SDK's Publish Release workflow to not use the now deprecated
set-env
command.
- Public: Fixed issue where the SDK could not be initialised with
poa
as a single step. - Public: Only return
Missing keys
warning for unsupported language locale tags
- Public: Fix missing country selector screen when the SDK is imported as an NPM module.
- Internal: Added unit tests for Demo and App components
- Public: Updated supported documents data to include Peru, Colombia as an issuing country option in Country Selection screen when user selects Residence Permit document type and remove Saudi Arabia option for National Identity Card document type.
- Public: Added
CROSS_DEVICE_START
to Tracked events list - Public: Country Selection screen can now be suppressed for a non-passport document type when configured with a 3-letter ISO code.
- Internal: Upgrade Preact from version
8.5.2
to10.5.4
. - Internal: Replace
react-modal-onfido
with version3.11.2
ofreact-modal
. - Internal: Refactor cross device option logic.
- Public: Fixed Woopra module import errors
- Internal: Include isCrossDevice property and value in Document, Face capture payload's sdk_metadata object for data tracking
- Public: Non-Latin localised strings throw exception in Welcome screen.
- UI: Accessibility - Update passport quality guide copy to be more descriptive for visually impaired users using screen readers
- Internal: Update the Web SDK to handle
telephony
back end service's new error response format which is now consistent with API's error response format - Public: Improve description of
showCountrySelection
option for Document step to be more explicit about when/how it works and include example configurations. - Internal: Store third-party licence comments for each bundle in separate files.
- Internal: Re-enable skipped tests for image quality logic.
- UI: Accessibility - Loading screen is now announced on iOS
- Internal: Release script didn't update
BASE_32_VERSION
correctly and didn't finish at publishing tag step
- Public: Add
migrate_locales
script to enable integrator migrate to next versions of Web SDK locale system. - Internal: Add
unwrap_lokalise
script to sanitise locale files pulled from Lokalise.
- Public: Introduced new system for locale keys. Keys are now more structured and easier to find within the code.
- Internal: Replace all string values from
JS SDK
toWeb SDK
andjs-sdk
toweb-sdk
.
- UI: Accessibility - Error and warning alert heading is now ARIA heading level 1
- UI: Camera inactivity timeout only starts from camera access granted instead of on initial render
- UI: Fixed call to action buttons covering content and instructions on Passport Image Guide, Selfie Intro screens when viewed on a mobile device with a shorter viewport, e.g. iPhone SE (1st gen)
- Public: Updated supported documents data. This update includes adding Turkey as an issuing country option in Country Selection screen when user selects National Identity Card type.
- Public: Only send
issuing_country
to the documents endpoint ifissuing_country
is present. This fixes the issue that was preventing documents upload whenshowCountrySelection
was disabled andissuing_country
wasundefined
.
- UI: Add country selection screen after document selection. This screen is skipped by default for a preselected document but can still be displayed by enabling the
showCountrySelection
option for thedocument
step. - UI: New warnings for cut-off & blurry images detection.
- UI: When the uploaded image is either cut-off, glary or blurry, the end-user must retry at most 2 times prior to proceeding further.
- UI: Added Residence Permit option for document selection
- Internal: The release script and the
release/RELEASE_GUIDELINE.md
file now include the information needed to update theMIGRATION.md
file. - Internal: Send additional
system
data insdk_metadata
which containsos
,os_version
,browser
&browser_version
info of the current session.
- Internal: Changed resolution constraints for live document captures from
720
to1080
. - Public: Remove
SMS_BODY
key from locale files as it's not a customisable key and does not belong to this codebase. - Internal: Update SDK to handle new error response format from cross device SMS service
- Public: Return a generic error for unmapped Onfido API validation keys.
- Fix typo in PhoneNumberInput SASS styles producing invalid CSS
- UI: Fixed inconsistent font family for non Primary, Secondary button elements.
- Public: Added
isCrossDevice
flag to user analytics events to differentiate between cross-device and non-cross-device user analytic events - Public: Added
DOCUMENT_TYPE_SELECT
andFACIAL_CAPTURE
to user analytics event list - Public: Added option to pass a container element
containerEl
instead of a container ID stringcontainerId
. IfcontainerEl
is provided, thencontainerId
will be ignored.
- Internal: Sass CSS pre-processor is now used instead of Less.
- Public: Fix live camera issues on certain Android devices, such as Huawei P20, when the
useLiveDocumentCapture
option for documents is enabled. - Internal: Fix cross-device SMS number input bundle import that broke when using newer versions of
@babel/preset-env
. - Internal: Added Prettier code formatting on
npm run lint
- Internal: Hybrid devices are now detected by checking if the device has touch screen and is Windows, instead of calling
getUserMedia
. - Internal: Use Onfido API v3 endpoints for
documents
,live_photos
,live_videos
andsnapshots
. - Public: When
uploadFallback
option is disabled for document or face live captures, display the unsupported browser error at the beginning of the flow.
- Public: Fixed spelling mistakes in Spanish translations for
cross_device.link.sms_option
andcross_device.link.qr_code_sub_title
- Public: Added new enterprise feature
cobrand
. This allows integrators with access to the feature to display a co-branded footer with their company name, followed by "powered by Onfido" on all screens, including cross-device. Note that this will not be displayed if thehideOnfidoLogo
enterprise feature is also enabled. - Internal: Added bundle size limit check for
dist/style.css
. - Public: Fix empty file sometimes being sent to /snapshots endpoint on some browsers when
useMultipleSelfieCapture
is enabled. This results in user seeing a "Unsupported File" error on Selfie upload.
- Public: Moved
UserAnalytics
event firing outside ofdisableAnalytics
config check
- UI: Top and bottom of icon cut off on Camera Permission screen for Document Auto Capture
- Public: Fix issue preventing the SDK from loading or being updated in runtime if a step with type
document
is not found.
- Public: Added check for cross_device_url in SDK Token to be used as the link for all cross device options instead of the default HOSTED_SDK_URL, if present. cross_device_url is an enterprise feature and can only be set when creating a SDK token if the feature is enabled.
- Public: Added new enterprise feature
hideOnfidoLogo
. When purchased and enabled allows integrator to hide the Onfido logo on all screens, including cross-device. - UI: Added passport quality guide before upload/capture.
- Public: Use
history/createBrowserHistory
as the default option to manage the SDK history. This change also gives the integrators the option to usehistory/createMemoryHistory
by passing the configuration optionuseMemoryHistory: true
to the SDK, in casehistory/createBrowserHistory
does not behave as expected. - UI: Updated to new Onfido SDK watermark design
- Public: Fix issue that affects Safari on iOS 13.4.1, where the SDK was showing the wrong image rotation.
- Public: Fix false
Missing keys
warning for present mobilePhrases. The warning should only be displayed when translation keys are missing. - Internal: Fix failing IE11 UI test for Passport upload
- Internal: Added basic history to SDK demo.
- Public: Added French translation. The language tag is
fr_FR
.
- Internal: Remove unused dependencies and scripts from
package.json
- Public: Update description for
region
queryString inCONTRIBUTING.md
- Public: Updated Browser Compatibility section in
README.md
to better indicate IE11, Firefox support - Public: Update English copy text for error message shown when no document is in the cameras view
- Public: The
useMultipleSelfieCapture
configuration option is now stable and enabled by default - UI: All primary/secondary buttons now use the new width styling. This change also fixes the buttons UI issues noticeable when using
de_DE
as a language.
- UI: Accessibility - Focus is at document start
- Public: Fix unexpected back button behaviour due to
createBrowserHistory
usage. The SDK now usescreateMemoryHistory
. - UI: Fixed blank screen displaying instead of Cross Device screen on desktop browsers when
uploadFallback
is disabled and browser does not have getUserMedia API support, e.g. IE11, or device does not have a camera.
- UI: Fixed 2000ms delay to load Document Capture screen on non-Safari browsers
- UI: Camera not detected on Safari 13.1 on iOS 13.4.1, macOS 10.15.4
- Public: Added German translation and Lokalise integration. The expected language tags are now
en_US
,es_ES
,de_DE
. For backward compatibility, the SDK can also be initialised with tags that do not include the region, e.g.en
,es
,de
. - Public: Added information on api/token regions to documentation.
- Internal: Added
CA
region in demo app. The region can be selected in the previewer or by using a query string.
- Public: Updated to
[email protected]
to have fix for camera stream not getting on some Android devices, e.g. Motorola G5, Samsung Galaxy A6
- Public: Fix moderate vulnerabilities in
minimist
, a sub-dependecy used by@babel/cli
and@babel/register
. - Public: Fixed hybrid device camera detection and access request
- Public: Fixed bug where user is able to click/tap on the button on the Camera screen before allowing/denying permission.
- Public: Fixed iPads on iOS13 not getting detected as mobile device on cross device flow.
- Public: Changes to allow hybrid desktop/mobile devices with environment facing cameras (e.g. Surface Pro) to use the
useLiveDocumentCapture
feature (BETA feature) - Public: Added a
userAnalyticsEvent
to existing analytics calls for integrators to listen for. - Internal: Analytics can now be disabled via the
disableAnalytics
option - Internal: Test coverage for snapshot feature
- Internal: Send additional properties to back-end in
sdkMetadata
objectisCrossDeviceFlow
(true|false
- Public: Cross-device client and link now works when desktop SDK configured with US JWT
- Public: Added a troubleshooting section to the documentation with details about solving CSP related issues
- UI: Added selfie intro screen
- UI: Option to send cross device secure link using QR code (Note: changes introduced with this UI update include possible breaking changes for integrators with custom translations or copy)
- UI: Unsupported browser message for mobile browsers without getUserMedia API support when
uploadFallback
option is disabled for live document capture and selfie/liveness capture steps - Internal: Redux and EventEmitter are not in the global scope anymore. The
tearDown
function will only unmount the SDK. - UI: As part of work to add the QR code option for cross device secure link the UX has been updated for the copy link and SMS options
- Internal: Fixed Latest Surge link version not getting updated during release process
- UI: Fixed Liveness capture staying darkened after x-device message dismissed
- Accessibility: Changed Liveness background colour from 66% to 80%
- *Note:** This version might be a breaking change if you are providing customised language translations. Please see MIGRATION.
- Internal: Added UI test to check Submit Verification button is not clickable multiple times if Complete step is excluded
- Internal: Deploy source maps to Sentry using @sentry/cli within our deployment script
- Internal: Updated
react-webcam-onfido
to get check(s) for stream before calling getVideoTracks/getAudioTracks method - Internal: Removed
libphonenumber-js
from main bundle. Reduced bundle size limit by 20%. - Internal: Use
@sentry/browser
instead ofraven
to track Sentry events - UI: New Document Upload screen (Note: changes introduced with this UI update include possible breaking changes for integrators with custom translations or copy)
- Internal: Latest Surge link gets updated only on release of a full version, not release candidates or beta releases
- UI: Fixed missing "basic camera mode" link style on "Camera not working" timeout error message when going through flow on mobile
- UI: Fixed Back button not taking user to the right place during liveness recording
- UI: Fixed invalid but possible number error blocking subsequent retries
- UI: Users should not be able to click or tap on confirmation buttons or camera buttons multiple times. This will prevent callbacks (such as the onComplete callback) or click events to be fired multiple times.
- Public:
useLiveDocumentCapture
option added to the document capture step (BETA feature) - Internal: Added
bundlesize
script to fail the build if our bundle becomes bigger than 400kb. It also tests that cross-device chunk does not exceeds 3kb. - Internal: Added
npm audit
script to the build usingaudit-ci
to detect dependencies vulnerabilities at PR level.
- UI: Accessibility - Non-interactive Header elements do not get announced with "Double tap to activate" by Android Talkback
- UI: Custom string
nextButton
set for thewelcome
step is now displayed - Internal: Fixed flaky UI tests by adding functions that wait until the elements are located or clickable
- UI: Added hover and active state styles for clickable UI elements (buttons, links)
- Public: Added
onError
callback. Callback that fires when one of the following errors occurs: timeout errors, authorization errors, server errors and invalid and expired token errors.
- Public: Disable console warning for client integrations that override only some strings for a supported language. If they provide partial translations for an unsupported language, warning is still displayed.
- Public: Only upgrade to patch versions of
socket.io-client
. See issue here
- UI: Accessibility - Make camera feed view accessible to screen readers
- UI: Accessibility - More descriptive ARIA label for camera shutter button
- Public: Fixed user being able to submit verification multiple times on coming back to desktop from the cross device flow if integrator has opted to exclude the
complete
step in SDK setup - Public: Fix wrong cross device redirection when user is already on mobile (iOS 10)
- UI: User can now drag and drop images on desktop uploader
- Public: Option to configure click on overlay behaviour when SDK presented modally using
shouldCloseOnOverlayClick
option - Internal: Added basic automated tests for accessibility features
- UI: Accessibility - Make Liveness screens accessible to screen readers
- UI: Accessibility - Make Cross Device phone number input accessible to screen readers
- Internal: Added automated testing for features using camera stream
- Public: Added
useMultipleSelfieCapture
option for theface
step. By enabling this configuration, the SDK will attempt to take multiple applicant selfie snapshots to help improve face similarity check accuracy. - Internal: Fetch URLs from JWT when present, otherwise use defaults
- Public: Unbundled dependencies for npm. This also fixes the current issue with imports (tested on Next.js, Create-react-app and Storybook) and solves #615, #668, #733
- UI: Changed camera permission screen design
- Internal: Disable source maps for NPM build. Source maps will still be enabled for
/dist
build - Internal: Upgraded Preact for compatibility with latest version of React DevTools
- Public: Fixed user seeing the video capture intro screen, followed by selfie capture screen instead of x-device intro screen when video capture is enabled but device has no camera
- Public: Fixed wrong message displaying on the Cross Device "End of Flow" screen
- Public: Fixed footer overlapping Proof of Address document type list at the bottom of the container
- Public: Fixed user seeing front side of previously uploaded 2-sided document in Proof of Address upload step
- Public: Removed tarball as a way to import wpt library. The package is now imported as a dev-dependecy and is pointing at the new Woopra repository on github.
- Internal: Better automation of the release process
- UI: Accessibility - Make screenreader navigation work in modal mode
- Public: Use tarball when importing wpt library
- Public: Fixed bug where double clicking on Send Link button then skips straight to Complete screen
- Public: Fixed scrollbar appearing on some machines/devices
- UI: Accessibility - Announce validation error on cross device SMS link screen
- UI: Accessibility - Update all visually obvious lists to use the relevant HTML list elements
- Public: When glare is detected, onComplete callback returns doc id
- UI: Accessibility - Make H1 readable by screen readers
- UI: Accessibility - Make buttons/links readable by screen readers, allow tabbing to them
- UI: Accessibility - Sort out order of items when tabbing through the content of each step
- UI: Accessibility - Announce page transition when screen changes
- UI: Accessibility - Make capture previews readable by screen readers
- UI: Accessibility - Announce enlargement of captured image in preview
- UI: Accessibility - Announce camera alerts
- UI: Accessibility - Announce validation errors and warnings on confirm screen
- Internal: Make Permission screen and Recovery screen buttons visible on small devices
- Internal: The third party analytics (Woopra) is now imported via a dummy window in order not to pollute the shared global window
- Public: Handle non JSON error responses and return a
Connection Lost
error to the user - UI: Make sure "full screen" mode is off when navigating away from enlarged preview
- UI: Make sure all buttons have a type of a "button" set
- Internal: Fixed vulnerabilities on some dev dependencies
- Public: If the SDK is initialised with only one document type, users will not see the document selection screen, instead they will see the capture screen straight away.
- Internal: Woopra is no longer polluting the global window object
- Public: Fixed issue where the user is prompted to submit the same document capture twice and fixed broken custom input UI by adding higher CSS specificity
- Internal: We are using an updated version of socket.io server, which allows for better horizontal scalling.
- Public: Prepopulate the user's mobile phone number, when specified through the
userDetails.smsNumber
option - Public: Send through details (such as
id
s) of the uploaded files, in theonComplete
event - Public: Added
forceCrossDevice
option todocument
step. The feature forces users to use their mobile to capture the document image. It defaults tofalse
. Not available on the Proof of Address flow. - Public: Upload fallback for the
face
step can be disabled by using the option{ uploadFallback: false }
. The default value istrue
(feature released in3.1.0
as Internal) - Internal: Add an internal-only warning for internal-users of the cross-device flow (a warning entirely stripped in production)
- Public: ES style import interface has been changed to a more standard one
- Internal: Changed the way that blob/base64 files and images are rendered and passed through the system
- Internal: Changed CSS units to be consistently
em
(but still tied topx
at our root, until we can fix our media queries) - Public: More meaningful error message for upload fallback disabled on face step
- Internal: Map colours and use less variables instead of hard-coding colour values
- UI: Fixed issue with footer overlapping content, prevent buttons from disappearing below viewport, prevent images from overlapping buttons.
- Internal: Rebranding of background, border and primary colors.
- Internal: Woopra tracker now points at the latest tag of https://github.com/Woopra/js-client-tracker
- Internal: Upgraded to webpack 4, removed import/export transpilation. Reduced bundle size as result.
- Public: Users entering the cross-device flow twice would have been able to request an SMS message without re-entering their mobile number correctly (the form could submit when still blank)
- Internal: Fix a bug that potentially allowed 3rd party tracking scripts to (in some very specific conditions) continue to send Onfido tracking events, after calling
.tearDown()
- Public: Users could previously see a flicker of other screens when loading any flow involving the camera. This should now no longer occur, except in rare circumstances (where permissions/capabilities have changed since last render)
- Public: Workaround an iOS Safari issue that causes a possible browser crash when mounting the webcam component multiple times
- Internal: Introduce Jest unit testing framework
- Public: Added support for default SMS number country code. The default country for the SMS number input can be customised by passing the
smsNumberCountryCode
option when the SDK is initialised. The value should be a 2-characters long ISO Country code string. If empty, the SMS number country code will default toGB
. - UI: UI improvements including adding back icon with hover state and icon to close the modal
- Public: Remove support for
buttonId
initialization option - Internal: Use imports-loader instead of script-loader to import Woopra
- Internal: Ensures only onfido related events are included as part of the payloads sent to Sentry
- Internal: Stop sentry tracking after tearDown
- Internal: Prevent Raven from using console.log output for breadcrumbs by setting autoBreadcrumbs: { console: false }
- Public: Added Proof of address
poa
step where users can capture their proof of address documents. This is a beta feature. - Internal: Further device metadata submitted to Onfido API
- Internal: Upload fallback for the
face
step can be disabled by using the option{ uploadFallback: false }
. The default value istrue
- Internal: Added multi-frame capture for the
standard
variant of the face step (only for camera capture).
- Internal: Cross device client can now only be opened on mobile browsers. Users trying to open the link on a desktop browsers will see an error.
- Internal: Removed unused development dependencies which had known vulnerabilities
- Internal: Fixed an infinite loading loop that happened when video liveness is enabled and if, and only if, users transitioned from a desktop browser that support video liveness to a mobile browser that does not support video liveness
- UI: Documents can be enlarged for inspection
- UI: Camera warnings are now dismissible
- UI: Title copy change on video confirmation screen
- Public: Fixed error with missing stream recording
- UI: Fixed document selector UI on IE11
- UI: Fixed overlapping footer and buttons on confirmation screen on Firefox
- Public: Introduced ability to capture videos on the face step. Developers can now request a preferred variant for the face step, by adding the option
requestedVariant: 'standard' | 'video'
. If empty, it will default tostandard
and a photo will be captured. If therequestedVariant
isvideo
, we will try to fulfil this request depending on camera availability and device/browser support. In case a video cannot be taken the face step will fallback to thestandard
option. At the end of the flow, theonComplete
callback will return thevariant
used to capture face and this can be used to initiate the facial_similarity check.
- Public: The
onComplete
callback now returns an object including thevariant
used for the capture step. The variant can be used to initiate the facial_similarity check. Data returned:{face: {variant: 'standard' | 'video'}}
. - UI: Selfie UI to adopt full container layout on desktop.
- Internal: CSS namespacing now includes the full path of the component, to mitigate chances of name collision. Only impacts components nested in another component folder.
- Internal: Changed assets url to point at https://assets.onfido.com/
- UI: Added a permission priming screen to inform the user that camera permissions must be enabled.
- UI: Added a permission recovering screen in case user media permissions are denied.
- UI: Added intro screen when entering cross device flow.
- UI: Changed UI for face capture step. On small screens it will display a full screen camera component.
- UI: Desktop - If webcam is not available, a cross device intro screen will be shown to allow the user to take a live photo on their mobile phones.
- Public: Fixed bug where hitting Enter key on the SMS input number was causing page reload.
- Public: Added
documentTypes
to thedocument
step options, which allows to filter the document types.
- Internal: Refactored layout to better handle presence of header and footer elements.
- Internal: On cross device client clear error message when configuration is received.
- Public: Added
onModalRequestClose
options, which is a callback that fires when the user attempts to close the modal.
- Internal: Removed references to
useWebcam
option from README.md and return console warning if the option is used.
- Public: Fixed
complete
step to allow string customization at initialization time. - Internal: Fixed the
tearDown
method to clear the onComplete callback functions.
- Public: Added support for internationalisation. The SDK can now be displayed in Spanish by adding
{language: 'es'}
to the initialization options. It can also be displayed in a custom language by passing an object containing the custom phrases and the locale. Iflanguage
is not present or the wrong locale tag is provided, the language locale will default toen
. - Public: Added support for Spanish language on the SMS body.
- Public: Added webcam support on Safari and IE Edge.
- UI: If the webcam is facing the user it will be mirrored
- UI: The cross device feature now supports sending the link via SMS. Users will still be able to copy the link to clipboard.
- UI: Introduced a back button that allows the user to navigate to the previous screen.
- Internal: Introduced code splitting and lazy loading
In this version, we're introducing cross-device flow that allows to continue verification on mobile in order to take photos of your document and face.
- *Note:**
- This version is not backwards-compatible. Migration notes can be found in MIGRATION.md
- Public: Changed the behaviour of
onComplete
callback. It used to return an object that contained all captures, now it doesn't return any data.
- Public: Removed
onDocumentCapture
that used to be fired when the document had been successfully captured, confirmed by the user and uploaded to the Onfido API - Public: Removed
onFaceCapture
callbacks that used to be fired when the face has been successfully captured, confirmed by the user and uploaded to the Onfido API. - Public: Removed
getCaptures
function that used to return the document and face files captured during the flow. - Internal: Removed confirm action
- UI: Introducing glare detection feature for documents. Not available for documents in PDF format yet.
- Internal: Added confirm step to router history and tracking
- UI: Improved how errors and warnings are displayed on the UI
- UI: Improved navigation between steps when using the browser navigation buttons
- Internal: Improved event tracking
- Internal: Upgraded Preact to latest version
- Bumping version to 1.0.0 because SDK has already been implemented in production integrations. Also SDK now integrates with Onfido API.
- Public: Support uploading documents and live photos to the Onfido API through use of new SDK tokens (JWT v2)
- Public: Face no longer supports PDF upload in order to align with the Onfido API.
- Internal: replaced the has_webcam checker with a more robust version that periodically checks if the state changed
- Internal: Increased the file size upper limit to 10 MB.
- Internal: Fixed problem on certain versions of Firefox that no longer supported the old version of getUserMedia
- Internal: Fixed the
tearDown
method to clear the documents and faces currently in the store - Internal: Fixed PDF preview issues on IE Edge, IE11 and mobile browsers.
- Internal: Fixed lower resolution webcams not working on Firefox
- Internal: Use HTTP protocol to post documents to the server instead of websockets
- Public: Fixed intermittent connection problem
- Public: Capture the reverse side of driving licenses and ID cards.
- Public: Add a file size limit of 4 MB in line with the Onfido API.
- Public: Document and face captures will be returned by callbacks as File or Blob instead of base64.
- Internal: Callbacks are now linked to the flow rather than the Redux store.
- Internal: Read exif tags to orientate images correctly.
- Public: Change the default to use file upload rather than the webcam for document captures.
- Internal: Fix dependencies to avoid bugs due to changes in minor updates.
- Internal: Change the signature expected from the websockets server.
- Public: The documentType in the capture object now corresponds to the API document_types.
- Public: Fixed bug where URL path was removed between steps.
- Public: Fixed bug where
Onfido.getCaptures()
andonComplete(hash)
was returning a broken hash. - Internal: Froze dependencies which were causing the upload document and pdf preview not to work.
- Public: tearDown method to remove the SDK elements.
- Internal: Removed
preact-router
. - Public: Removed URL routes for each step of the SDK flow.
- Internal: Removed unused components - Dropdown and ActionBar.
- Internal: Use the staging backend when in development.
- Updated version of onfido-sdk-core to 0.7.1.
- Public: Uploaded PDF files are now supported and returned by the callbacks as base64.
- Internal: PDF files are displayed in the confirmation step as an embedded object, which means the browser needs to support pdf files in order for them to be visible.
- Internal: Use
visibilityjs
to pause captures when the tab is inactive. - Internal: The copy of the document not found error message was changed.
- Internal: Changed the order of the document selection to passport, driver's license and identity card.
- Public: The returned webcam captures now have a resolution of 960x720, or lower if the webcam does not support it.
- Internal: The confirmation step for webcam captures now displays the new high resolution images.
- Internal: Updated
react-webcam-onfido
in order to get the higher resolution functionality.
- Public: document and face callback are now passed only their respective capture, instead of both their captures.
- Public: document and face callback are now only called after the user has confirmed the capture
- Public: document, face and complete callback can be called multiple times, if the condition that triggers them is met more than once (eg. if the user goes back to redo the capture steps)
- Internal: callbacks' returned value now have no impact on the event dispatcher.
- All captures have now a default no op function. This fixes an exception raise (in case some callbacks where not defined), which caused the rest of the callbacks not to be called after the exception was raised.
- Updated
react-webcam
to the onfido fork, this fixes the issue where the webcam canvas (used to obtain screenshots) has 0 height under certain circumstances (namely on windows machines running Chrome). This bug, when it happened, caused the document capture step not to work.
- Started tracking fatal exceptions and page views of the SDK.
- Public: An error message is now shown if the upload file has as unsupported file type.
- Fixed bug of a broken layout on the document selection step. Always reproducible on IE and on other browsers too, but only when going back a step on certain conditions.
- Fixed bug where on IE an unnecessary scrollbar appeared and the scrolling area was bigger than it should have been.
- Public:
onComplete
event now fires only after both the document and face captures have been confirmed in the UI - Internal: updated
onfido-sdk-core
to 0.5.0 which causes the all capture event to be triggered when captured are both valid and confirmed - Internal: made the confirm button change the state of the capture to confirmed
- Internal: sometimes when document was retaken multiple times the capture ended up squashed. This was fixed by upgrading to
[email protected]
. - Internal: fixed Bug #36, it caused the face to be captured every second after a document retake.
Object.assign
was being used but not polyfilled. Its occurrence was replaced with an es6 object construction.- UI disappeared if the browser's windows width was smaller than 481px;
- Public: The capture screen UI now includes an upload button fallback, for whenever the user experiences problems with the webcam.
- Internal: When requesting to validate documents there is now a strategy to cope with slow responses from the server. If the number of unprocessed documents is 3+, the client stops sending more requests until a response is given.
- Internal:
webp
falls back tojpeg
in case the browser does not support it.
- Public: Captures are now returned as
png
instead ofwebp
, althoughwebp
is still used internally for streaming to the server. - Public: the captures returned by
Onfido.getCaptures()
have a simplified signature of just{id,image,documentType}
. - Public: It's now possible to open and close the modal by calling
.setOptions({isModalOpen:boolean})
- Internal: The modal has been refactored to be fully reactive,
vanilla-modal
has been replaced with a fork ofreact-modal
. - Internal: Updated to
[email protected]
, selectors are now more general as in they are no longer specific to each capture type, some new selectors are also being used. - Internal:
Camera
,Capture
andUploader
have been refactored, the pure part of the components have been separated from the state logic part. This adds flexibility and encapsulation. - Internal: The
Capture
component now orchestrates all the state logic of theUploader
component, this allows to join the camera and uploader state logic together.
- Public: it's now possible to change the init options at runtime by calling
setOptions()
on the object returned byOnfido.init()
- Public:
useWebcam
option added to the facial and document capture step
- Public:
Onfido.init()
now returns an object. - Internal:
isDesktop
detection is now based on [DetectRTC][detectrtc]'sisMobile
detection - Internal: improved Webcam Detection, it now takes into account whether a Webcam exists and if the user has given the website permission to use it. Before it was only checking whether the getUserMedia API is supported by the browser or not. [DetectRTC][detectrtc] is used for this detection.
- SDK Core dependency update, fixes issue https://github.com/onfido/onfido-sdk-ui/issues/25
Note: This update only changes the dist folder release, npm releases get the dependency update if they do
npm install
- API: Flow customization option
steps:[]
- UI: Overlay to the webcam document capture (Possibly breaking change)
- DOC: Integration examples to documentation
- NPM (commonjs2) style of importing the library now works