antispoof

Enables anti-fraud detection (anti-spoofing).

Details

Attribute: antispoof

Type: boolean

Default value: false

Morphology

selphi.antispoof = true;

Description

Activate anti-fraud detection in facephi-selphi-widget. If enabled, suspicious video injection behaviors interrupt capture and IAD payloads are generated in extractionFinish.

Considerations

It can block debugging tools such as the browser console. It is advisable to set its value with an environment variable or before deployment to production.

If anti-spoofing is enabled, the use of externalCamera will be ignored.

In integrations within a iframe it is necessary to activate focus within the container:

const iframe = document.getElementById('my-iframe') as HTMLIFrameElement;
iframe.addEventListener('load', () => {
  iframe.focus();
});

Additional information

Compatibility: Replaces antispoofEnabled in previous versions of the SDK Web.

Behaviors considered spoofing:

• Focusing outside the window that contains the SDK.

• Opening the browser development tools.

• Opening overlapping modals on the web (print, save, etc.).

• Use of virtual cameras (OBS, emulators, browser-based injection).

Additional Integration: the encrypted payload is obtained in extractionFinish inside encryptedLivenessRaw. It must be sent to the server and from there to the IAD endpoint of Identity API.

Send as .bin (recommended):

function handleExtractionFinish(event: CustomEvent) {
  const result = event.detail.detail;
  const blob = result.encryptedLivenessRaw;
  const link = document.createElement('a');
  link.href = URL.createObjectURL(blob);
  link.download = 'archivo.bin';
  link.click();
}

Via direct fetch (not recommended):

function handleExtractionFinish(event: CustomEvent) {
  const result = event.detail.detail;
  fetch('...', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/octet-stream',
      'x-api-key': '...',
    },
    body: result.encryptedLivenessRaw,
  });
}

---

Example

<facephi-selphi-widget
    antispoof={true}

    onExtractionFinish={(event) => {
      const livenessRaw = event.detail.detail.encryptedLivenessRaw;
      testLiveness(livenessRaw);
    }}
/>