Wultra Mobile Token JS SDK

Wultra Mobile Token SDK provides APIs for secure operation approval, push notifications, inbox messages, and OIDC flows.

Note

We currently support REACT NATIVE and APACHE CORDOVA development platforms.

Introduction

With Wultra Mobile Token (WMT) SDK, you can integrate an out-of-band operation approval into an existing mobile app, instead of using a standalone mobile token application. WMT is built on top of PowerAuth Mobile JS SDK. Individual endpoints are described in the Mobile Token API.

To understand the Wultra Mobile Token SDK purpose on a business level better, you can visit our own Mobile Token application. We use (native) Wultra Mobile Token SDK in our mobile token application as well.

With this SDK, you can:

• Retrieve, approve, or reject operations pending approval for a given user.
• Claim anonymous operations.
• Retrieve operation history.
• Do offline authorization.
• Register an existing PowerAuth activation to receive push notifications.
• Manage users' inbox messages.
• Handle OpenID Connect (OIDC) authentication flows.
• Explore more.

Note

• This library does not contain any UI.
• We also provide an Android, iOS, and Flutter versions of this library.

Documentation

The documentation is available at the Wultra Developer Portal or inside the docs folder.

Developing this repository

This repository uses Yarn 4 workspaces. packages/lib-shared/js contains the shared SDK source; packages/lib-rn and packages/lib-cordova own the platform packages. scripts/build.mjs stages the platform sources and runs Rollup (rollup.config.js) to bundle the JavaScript and declarations. Both examples are workspaces and use the same root install.

yarn install
yarn build             # both SDK packages
yarn build:rn          # React Native only
yarn build:cdv         # Cordova only
yarn typecheck         # SDK and React Native example
yarn startReact        # Metro for exampleReactNative

Metro reads the shared TypeScript source directly; edit the SDK and reload without building, repacking, or reinstalling it. The Cordova example rebuilds the SDK when installing or refreshing its plugins.

Package creation is separate from the development loop. yarn packAll builds both tarballs and verifies them with scripts/verify-packages.mjs:

yarn packAll
yarn verify:packages   # verify existing tarballs again

See the React Native example and Cordova example for device test commands.

License

All sources are licensed using the Apache 2.0 license. You can use them with no restrictions. If you are using this library, please let us know. We will be happy to share and promote your project.

Contact

If you need any assistance, do not hesitate to drop us a line at hello@wultra.com or our official wultra.com/discord channel.

Security Disclosure

If you believe you have identified a security vulnerability with Wultra Mobile Token SDK, you should report it as soon as possible via email to support@wultra.com. Please do not post it to a public issue tracker.