Bluprynt KYI Widget SDK

Embed Bluprynt's KYI (Know Your Issuer) verification widget into your web application.

Installation

npm install @bluprynt/kyi-widget-sdk

yarn add @bluprynt/kyi-widget-sdk

pnpm add @bluprynt/kyi-widget-sdk

How KYI Widget SDK works

1. Ask Bluprynt for SECRET_KEY as part of partner integration.
2. Implement Access Token JWT generation on your backend side.
3. Use KYI Widget SDK with generated Access Token on behalf of your user.

Use playground to test KYI Widget SDK.

Quick Start

1. Generate Access Token (Server-side)

If you use Node.js on backend, feel free to use this package to generate the token:

// server.ts (Node.js)
import { generateToken } from "@bluprynt/kyi-widget-sdk/server";

const accessToken = await generateToken({
  issuer: "your-partner-id",
  secretKey: process.env.BLUPRYNT_SECRET_KEY!,
  userId: "user-123", // Your internal user identifier
  expiresIn: 3600, // Optional: token expiry in seconds (default: 1 hour)
});

// Return token to your frontend
res.json({ accessToken });

It is okay to use other platforms rather than Node.js, but you will need generate JWT by yourself and sign it with SECRET_KEY that you get from Bluprynt. Keep in mind the token's payload must have to following structure:

{
  "sub": "user-123",
  "iss": "your-partner-id",
  "iat": 1766146154,
  "exp": 1766149754
}

2. Embed Widget (Client-side)

Use the access token to embed the KYI widget:

// client.ts (Browser)
import { kyi } from "@bluprynt/kyi-widget-sdk";

// Fetch token from your backend
const { accessToken } = await fetch("/api/kyi-token").then((r) => r.json());

// Embed the widget
const widget = kyi("modal", "kyi", accessToken, {
  onClose: () => {
    console.log("Widget closed");
  },
  onError: (error) => {
    console.error("Error:", error);
  },
});

// Later: clean up when done
widget.destroy();

Widget Modes

Inline Mode

Embeds the widget directly into a specified container element:

const container = document.getElementById("kyi-container");

const widget = kyi("inline", "kyi", accessToken, {
  parentElement: container,
});

<div id="kyi-container" style="height: 600px;"></div>

Modal Mode

Displays the widget in a centered modal overlay:

const widget = kyi("modal", "kyi", accessToken, {
  onClose: () => console.log("Modal closed"),
});

Drawer Mode

Displays the widget in a slide-in panel from the right:

const widget = kyi("drawer", "kyi", accessToken, {
  onClose: () => console.log("Drawer closed"),
});

Widget Scopes

The scope parameter determines which page to display:

// Start a new KYI application
kyi("modal", "kyi", accessToken);

// View assets
kyi("modal", "asset-list", accessToken);

// View wallets
kyi("inline", "wallet-list", accessToken, { parentElement: container });

Checking KYI Status (Server-side)

Query the current KYI status for a user from your backend:

import { checkStatus } from "@bluprynt/kyi-widget-sdk/server";

const status = await checkStatus({
  issuer: "your-partner-id",
  secretKey: process.env.BLUPRYNT_SECRET_KEY!,
  userId: "user-123",
});

console.log(status);

API Reference

kyi(mode, scope, accessToken, options?)

Creates a KYI widget instance.

Parameters:

Options:

Returns: KYIWidget

generateToken(options) (Server-side)

Generates a JWT access token for widget authentication.

Parameters:

Returns: Promise<string> - The signed JWT token

checkStatus(options) (Server-side)

Checks the KYI verification status for a user.

Parameters:

Returns: Promise<KYIStatus>

Framework Examples

React

import { useEffect, useRef } from "react";
import { kyi, type KYIWidget } from "@bluprynt/kyi-widget-sdk";

function KYIButton({ accessToken }: { accessToken: string }) {
  const widgetRef = useRef<KYIWidget | null>(null);

  const openWidget = () => {
    widgetRef.current = kyi("modal", "kyi", accessToken);
  };

  useEffect(() => {
    return () => widgetRef.current?.destroy();
  }, []);

  return <button onClick={openWidget}>Start KYI</button>;
}

Security

• Never expose your SECRET_KEY on the client-side. Token generation must happen on your backend.
• Access tokens are short-lived JWTs. Generate a fresh token for each widget session.
• The widget uses postMessage for secure iframe communication.

Contributing

Contributions are welcome! Please see CONTRIBUTING.md for guidelines.

Built with care by Bluprynt