Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@onfido/api
Advanced tools
The official Node.js library for integrating with the Onfido API.
Documentation can be found at https://documentation.onfido.com
This library is only for use on the backend, as it uses Onfido API tokens which must be kept secret. If you do need to collect applicant data in the frontend of your application, we recommend that you use one of the Onfido SDKs.
For npm:
npm install @onfido/api
For Yarn:
yarn add @onfido/api
Require the package:
const { Onfido, Region } = require("@onfido/api");
For TypeScript users, types are available as well:
import { Onfido, Region, Applicant, OnfidoApiError } from "@onfido/api";
Configure with your API token, and region if necessary:
const onfido = new Onfido({
apiToken: process.env.ONFIDO_API_TOKEN
// Defaults to Region.EU (api.onfido.com), supports Region.US and Region.CA
// region: Region.US
});
Using with async
/await
(in an async function
):
try {
const applicant = await onfido.applicant.create({
firstName: "Jane",
lastName: "Doe"
});
const check = await onfido.check.create({
applicantId: applicant.id,
reportNames: ["identity_enhanced"]
});
return check;
} catch (error) {
if (error instanceof OnfidoApiError) {
// An error response was received from the Onfido API, extra info is available.
console.log(error.message);
console.log(error.type);
console.log(error.isClientError());
} else {
// No response was received for some reason e.g. a network error.
console.log(error.message);
}
}
Using with promises:
onfido.applicant
.create({
firstName: "Jane",
lastName: "Doe"
})
.then(applicant =>
onfido.check.create({
applicantId: applicant.id,
reportNames: ["identity_enhanced"]
})
)
.then(check =>
// Handle successfully created check.
)
.catch(error => {
// Handle error.
});
Most responses will be normal JavaScript objects. Property names will be in camelCase rather than snake_case, including property names in nested objects.
const applicant = await onfido.applicant.create({
firstName: "Jane",
lastName: "Doe",
address: {
flatNumber: "12",
postcode: "S2 2DF",
country: "GBR",
}
});
console.log(applicant);
{
id: "<APPLICANT_ID>",
createdAt: "2020-01-22T10:44:01Z",
firstName: "Jane",
lastName: "Doe",
email: null,
dob: null,
deleteAt: null,
href: "/v3/applicants/<APPLICANT_ID>",
address: {
flatNumber: "12",
buildingNumber: null,
buildingName: null,
street: null,
subStreet: null,
town: null,
state: null,
postcode: "S2 2DF",
country: "GBR",
line1: null,
line2: null,
line3: null
},
idNumbers: []
}
File downloads, for example onfido.document.download(documentId)
, will return instances of OnfidoDownload
.
These objects will have a content type, e.g. image/png
.
download.contentType;
Call asStream()
to get a Readable
stream of the download. You can read more about Readable
streams.
const readableStream = download.asStream();
For some common types of streams, like instances of fs.ReadStream
, you can provide the stream directly in the file
property:
onfido.document.upload({
applicantId: "<APPLICANT_ID>",
file: fs.createReadStream("path/to/passport.png"),
type: "passport"
});
Alternatively, you may need to provide some extra information:
onfido.livePhoto.upload({
applicantId: "<APPLICANT_ID>",
file: {
contents: stream,
filepath: "path/to/photo.png",
contentType: "image/png"
},
type: "passport"
});
More documentation and code examples can be found at https://documentation.onfido.com
v1.5.2, 3 September 2020
FAQs
Node.js library for the Onfido API
The npm package @onfido/api receives a total of 30,825 weekly downloads. As such, @onfido/api popularity was classified as popular.
We found that @onfido/api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.