Security enhancements, customization, and SDK
The first monthly Facephi release summary is now available. This month brings relevant improvements in security, observability and customization, along with updates across Web, Builder and Mobile.
Highlights of the month
01
Security & Compliance
Enhancements in injection attack detection (IAD), liveness capabilities, and secure end-to-end component handling on Mobile.
02
Better Experience & Integration
More customization options (including dark mode) and new examples for integrating the Web SDK.
03
A more stable & observable platform
Enhanced monitoring, traceability and environments to accelerate support and deployments.
SDK WEB
SDK Web
New features
SDK Loader Integration via CDN + Public Examples
The SDK Loader integration for consumption via our CDN is now complete, with production-oriented licensing. Public integration examples are now available for:
- Next.js 16 (TypeScript + Webpack)
- React 19 (TypeScript + Vite)
- React 19 (JavaScript + Vite)
- React 19 (Create React App + Vite)
Impact: faster integrations and lower friction for modern web projects.
Full Customization + Dark Mode
The SDK now supports extended CSS variables, expanding the existing customization capabilities of Selphi and SelphID to the rest of the components.
You can now apply light or dark themes directly through these variables.
Impact: visual consistency with your brand and better UX across environments.
Bug fixes
- Resolved a case in Landing where the
stopVideoevent triggered twice when video recording was active. - Removed a vulnerability in the
inflight1.0.6 dependency.
LANDING / BUILDER
Landing / Builder
New features
IAD – Injection Attack Detection (Intelligent Anti-Spoofing / Intelligent Attack Detection)
- Stronger fraud protection: Selphi now incorporates anti-spoofing capabilities to detect and block presentation attacks.
- Actionable feedback: anti-spoofing results are included in the verification callback, enabling clients to make informed decisions.
- Safer usage: specific guidance has been added for scenarios where Selphi with anti-spoofing is used within iframes.
Stabilization & Operations
- Faster local development: local Kubernetes environment for configuration and testing without relying on cloud infrastructure.
- Monitoring & observability: new dashboards, metrics, and log aggregation.
- Support traceability: structured logging with more contextual detail for debugging.
SELFPHI & SELPHID V6.18.0
Selfphi & SelphID
New features
In this version, the NoLiveDetails structure has been added to SelphIDFacialLivenessResult, allowing additional information to be retrieved when a liveness operation returns a NoLive result.
Additionally, it is now possible to retrieve the timestamp embedded in a tokenized image or template as a complement to getValidTimeStamp(), and to configure which pipelines (FMAD/FPAD) will process the image for each liveness operation.