@evervault/react

Evervault React.js SDK

The Evervault React.js SDK is a toolkit for encrypting data on the client. Using the Evervault React.js SDK means your customer's data never leaves their device unencrypted.

Getting Started

Before starting with the Evervault React SDK, you will need to create an account and a team.

For full installation support, book time here.

Documentation

See the Evervault React.js SDK documentation.

Installation

Our React.js SDK is distributed via npm, and can be installed using your preferred package manager.

# Using npm
npm install @evervault/react

# Using yarn
yarn add @evervault/react

Initialize SDK

Once installed, initialize the React.js SDK with your Team and App ID found in the Evervault Dashboard.

Use the <EvervaultProvider> component as a provider for your app.

import { EvervaultProvider } from "@evervault/react";
import ChildComponent from "../ChildComponent";
export default function App() {
  return (
    <EvervaultProvider teamId="<TEAM_ID>" appId="<APP_ID>">
      <ChildComponent />
    </EvervaultProvider>
  );
}

Encrypt a string

Once you've added the <EvervaultProvider>, you can use the useEvervault() hook in its children. The useEvervault() hook returns an initialized instance of the JavaScript SDK, which includes the encrypt() function.

import { useState } from "react";
import { useEvervault } from "@evervault/react";

export default function ChildComponent() {
  const evervault = useEvervault();
  const [message, setMessage] = useState("");

  const handleSubmit = async (e) => {
    e.preventDefault();
    const encryptedMessage = await evervault.encrypt(message);
    alert(encryptedMessage);
  };

  return (
    <form onSubmit={handleSubmit}>
      <input value={message} onChange={(e) => setMessage(e.target.value)} />
      <button>Submit</button>
    </form>
  );
}

---

Reference

<EvervaultProvider />

The EvervaultProvider component exposes the useEvervault() hook to any nested components.

<EvervaultProvider teamId="<TEAM_ID>" appId="<APP_ID>">
  <App />
</EvervaultProvider>

Props

Parameter	Type	Description
teamId	String	The unique identifier for your Team. It's found in Team Settings.
appId	String	The unique identifier for your App. It's found in App Settings.

---

useEvervault()

The useEvervault hook is accessible in children of the EvervaultProvider, and returns an initialized instance of the Evervault JavaScript SDK. One of the functions included in the returned object is encrypt(), which can be passed any plaintext data structure.

const evervault = useEvervault();

---

evervault.encrypt(data)

Encrypts data using Evervault Encryption. Evervault Strings can be used across all of our products. It is accessible on the returned value from the useEvervault() hook. To encrypt data using the React.js SDK, simply pass a String or an Object into the evervault.encrypt() function.

The encrypted data can be passed to your server and stored in your database as normal. It can also be used with any of Evervault’s other services.

const evervault = useEvervault();

const encrypted = await evervault.encrypt("Hello, world!");

Parameter	Type	Description
data	Object, Array, String, Number, File or Blob	Data to be encrypted.

---

<EvervaultInput />

Use Evervault Inputs to securely collect encrypted cardholder data. Evervault Inputs are served within an iFrame retrieved directly from Evervault’s PCI-compliant infrastructure, which can reduce your PCI DSS compliance scope to the simplest form (SAQ A).

Evervault Inputs also support themes and custom styles so you can customise how Inputs looks in your UI.

Props

Parameter	Type	Description
onChange	Function	A function that is called whenever the submission changes.
onInputsLoad	Function	A function that is called when the iFrame that serves Inputs has loaded.
config	String | Object	A theme string (supported: default, minimal or material), or a config object for custom styles.
config.theme	String	The base styling for Inputs. Currently supports default, minimal and material.
config.height	String	The height of the Evervault Inputs iframe.
config.primaryColor	String	The main theme color.
config.labelColor	String	The color CSS property applied to the input labels.
config.inputBorderColor	String	The border-color CSS property applied to inputs.
config.inputTextColor	String	The color CSS property applied to inputs.
config.inputBackgroundColor	String	The color CSS property applied to the ::placeholder CSS pseudo-element for inputs.
config.inputBorderRadius	String	The border-radius CSS property applied to inputs.
config.inputHeight	String	The height CSS property applied to inputs.
config.cardNumberLabel	String	The label for the card number input
config.expirationDateLabel	String	The label for the expiration date input
config.securityCodeLabel	String	The label for the security code input
config.expirationDatePlaceholder	String	The placeholder for the expiration date input
config.invalidCardNumberLabel	String	The message shown on an invalid card number
config.invalidExpirationDateLabel	String	The message shown on an invalid expiration date
config.invalidSecurityCodeLabel	String	The message shown on an invalid security code
config.fontUrl	String	Load a custom font with the Google Fonts API
config.fontFamily	String	Set the font-family for the fontUrl
config.inputFontSize	String	Set the font-size property of the input attribute
config.inputBoxShadow	String	Set the box-shadow property of the input attribute
config.labelFontSize	String	Set the font-size property of the label attribute
config.labelWeight	String	Set the font-weight property of the label attribute
config.disableCVV	Boolean	Removes the CVV field from Inputs, showing only the Card Number and Expiry fields
config.disableExpiry	Boolean	Removes the Expiry field from Inputs, showing only the Card Number and CVV fields

Retrieving card data

To access the encrypted card data, you must pass an onChange handler. This function will be called any time the card data is updated and is passed an object with the encrypted card details as well as validation information.

function Payment() {
  const handleChange = ({ encryptedCard, isValid }) => {
    if (isValid) {
      console.log(encryptedCard);
    }
  };

  return <EvervaultInput onChange={handleChange} />;
}

onChange callback params

The onChange callback will be passed the following object as a parameter.

{
  "encryptedCard": {
    "type": "visa_credit",
    "number": "ev:encrypted:abc123",
    "cvc": "ev:encrypted:def456",
    "expMonth": "01",
    "expYear": "23"
    "lastFour": "1234"
  },
  "isValid": true,
  "isPotentiallyValid": true,
  "isEmpty": false,
  "error": {
    "type": "invalid_pan",
    "message": "The credit card number you entered was invalid"
  }
}

Localization

The iFrame can be localized on initialization by providing a set of labels in the config.

const config = {
  cardNumberLabel: 'Numéro de carte:',
  expirationDateLabel: 'Date d'expiration:',
  securityCodeLabel: 'Code de sécurité:'
}

<EvervaultInput onChange={handleChange} config={config} />

Custom Fonts

A custom font can be loaded from Google's Fonts API and the font-family set with the fontFamily config paramerter

const config = {
  fontUrl: 'https://fonts.googleapis.com/css2?family=Poppins:wght@100;800&display=swap',
  fontFamily: 'Poppins, sans-serif',
  inputFontSize: '20px',
  inputBoxShadow: '2px 2px 2px 1px rgba(0, 0, 255, .2)',
  labelFontSize: '13px',
  labelWeight: '400'
}

<EvervaultInput onChange={handleChange} config={config} />

iFrame loading status

If you need to wait for the iFrame that serves Inputs to load before doing some action, you can used the onInputsLoad prop callback:

<EvervaultInput
  onInputsLoad={() => {
    console.log("Inputs has loaded!");
  }}
/>

<EvervaultReveal />

Use Evervault Reveal to show encrypted card details to show your users their encrypted card details in plaintext in a secure iFrame hosted by Evervault. Before using Reveal you'll first have to create a Relay to decrypt the card details; Reveal expects to receive the card data from the Relay as a JSON object with the schema below.

Note: It is important that the endpoint that you create sets the applicable CORS headers so that it can be accessed from the Inputs iFrame. Otherwise your requests will fail!

{
  "cardNumber": "string | number",
  "cvv": "string | number",
  "expiry": "string | number"
}

Once you have your endpoint that returns the encrypted card data, you'll need to create an Evervault Inbound Relay that will decrypt the encrypted card data as is passes through it, before it gets to the iFrame. Once you have created your Relay you can add the component to your React app.

export default function Reveal() {
  const request = {
    url: "https://blackhole-posterior-io.relay.evervault.com/4m0s3d",
    method: "GET",
    headers: {
      Authorization: "Bearer ey...",
    },
  };

  return (
    <main className="flex min-h-screen flex-col items-center justify-between p-24">
      <EvervaultReveal request={request}></EvervaultReveal>
    </main>
  );
}

The only required field is request which takes an object that supports all of the same fields as a Javascript Request Object. The URL must be the Evervault Inbound Relay you configured earlier.

Props

Parameter	Type	Description
onRevealLoad	Function	A function that is called when the iFrame that serves Reveal has loaded.
onCopy	Function	A function that is called when user clicks the copy button inside the Reveal component.
config	String | Object	A theme string (supported: default, minimal or material), or a config object for custom styles.
config.height	String	The height of the Evervault Inputs iframe.
config.fontUrl	String	Load a custom font with the Google Fonts API
config.fontFamily	String	Set the font-family for the fontUrl
config.revealFontSize	String	Set the font-size property of the reveal text fields
config.revealFontWeight	String	Set the font-weight property of the reveal text fields
config.revealTextColor	String	Set the font-color property of the reveal text fields

Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/evervault/evervault-react.

Feedback

Questions or feedback? Let us know.