
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cordova-plugin-onfido
Advanced tools
This plugin can be used to interact with Onfido native SDK`s through cordova apps.
Get stable version from npm:
cordova plugin add cordova-plugin-onfido
Get latest master:
cordova plugin add https://github.com/rewireltd1/cordova-plugin-onfido
const options = {
token: 'mobile sdk token here', // IMPORTANT: see notes
applicant_id: 'applicant id here',
flow_steps: [ 'welcome', 'document', 'face', 'final'],
}
const onComplete = (completeResponse) => {
alert(completeResponse)
}
window.cordova.plugins.onfido.init(onComplete, options);
Takes options and inits Onfido native SDK
options
example:
{
token: [mobile sdk token], // SEE NOTES
applicant_id: [ users applicant id ],
flow_steps: [
FlowTypes.Document,
FlowTypes.Face,
],
// documentTypes: [] // (currently not implmented in Onfido mobile sdks)
}
FlowTypes
options (typescript):
enum FlowTypes {
Welcome = 'welcome',
Document = 'document',
Face = 'face',
FaceVideo = 'face_video',
Final = 'final',
}
DocumentTypes options (typescript): (currently not implmented in Onfido mobile sdks) :
enum DocumentTypes {
Passport = 'passport',
nationalIdentityCard = 'national_identity_card',
drivingLicence = 'driving_licence',
}
successCallback
response:
{
document: {
front: {
id: 'doc id',
type: 'doc type',
side: 'doc side'
},
back: {
id: 'doc id',
type: 'doc type',
side: 'doc side'
}
}
}
Contributors are welcome! And we need your contributions to keep the project moving forward. You can[report bugs, improve the documentation, or contribute code.
Have a solution? Send a Pull Request.
FAQs
Cordova plugin for Onfido
The npm package cordova-plugin-onfido receives a total of 1 weekly downloads. As such, cordova-plugin-onfido popularity was classified as not popular.
We found that cordova-plugin-onfido demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.