createWallet mounts that frame, establishes a session from the identity credential your callback supplies, and reports the account. Key material never reaches your page.
Setup starts at creation, not at ready(). Create the wallet on page load and await wallet.ready() where the account is needed - first-time setup can take several seconds and should never sit inside a user action.
Example
Parameters
EndstatePublishableKey
required
Your publishable key (
end_pk_...). A secret key is rejected here, by the
type and again at runtime - a non-end_pk_ value throws a TypeError, and
the value is deliberately not echoed because the common mistake is pasting a
secret key into browser code.() => string | Promise<string>
required
Supplies the identity credential the session is established from. It is called
fresh for every session establishment - on
ready() and again on each
refreshSession() - and must never return a cached value. The credential is a
dedicated, single-use wallet credential for the signed-in customer that
expires in about a minute; returning a session token, a reused token, or a
stale value guarantees a later failure. Where it comes from depends on how
your customers sign in: with Endstate-managed identity it is issued against
the customer’s Endstate sign-in, and with bring your own
auth your backend mints it from your own login. Must resolve
with a non-empty string, or a TypeError is thrown."production"
default:"production"
Which deployed wallet to mount.
"production" (https://wallet.endstate.io)
is the environment available to your organization, and the default. Other
environments are reserved for Endstate internal use. The frame origins are
compiled into the package and are not otherwise configurable - a security
property of the design.HTMLElement
default:"document.body"
Where the hidden frame is appended. The frame is mounted
aria-hidden and
sized to zero; override this only when document.body is not the right mount
point.{ frameReadyMs?: number; sessionMs?: number }
Wait budgets in milliseconds.
frameReadyMs bounds the frame handshake
(default 5000); sessionMs bounds identity issuance, session establishment,
and wallet setup (default 30000). A stage that exceeds its budget fails with
wallet.timeout.Returns
EndstateWallet - a mounted wallet whose setup is already in flight. Read the account with account() or await ready().
This version provisions and reports the account; it deliberately exposes no
signing surface. Signing arrives in a later minor release.