@0xsequence/provider 1.2.1 → 1.2.3

package/dist/0xsequence-provider.cjs.dev.js

@@ -8,6 +8,7 @@ var ethers = require('ethers');
 var network = require('@0xsequence/network');
 var core = require('@0xsequence/core');
 var auth = require('@0xsequence/auth');
+var abi = require('@0xsequence/abi');
 
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
@@ -2123,7 +2124,7 @@ function validateTransaction(wallet, transaction) {
   if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
     if (transaction.data) {
       const data = ethers.ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4) {
+      if (data.length >= 4 && !isCreateContractCall(data)) {
         throw new Error('self calls are forbidden');
       }
     }
@@ -2132,6 +2133,15 @@ function validateTransaction(wallet, transaction) {
     throw new Error('delegate calls are forbidden');
   }
 }
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
 
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
@@ -2672,7 +2682,8 @@ class WalletRequestHandler {
       const authOptions = {
         app: options.app,
         origin: options.origin,
-        expiry: options.expiry
+        expiry: options.expiry,
+        nonce: options.authorizeNonce
       };
       // if (typeof(options.authorize) === 'object') {
       //   authOptions = { ...authOptions, ...options.authorize }
@@ -3513,7 +3524,7 @@ class SingleNetworkSequenceProvider extends SequenceProvider {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.2.1",
+	version: "1.2.3",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",

package/dist/0xsequence-provider.cjs.prod.js

@@ -8,6 +8,7 @@ var ethers = require('ethers');
 var network = require('@0xsequence/network');
 var core = require('@0xsequence/core');
 var auth = require('@0xsequence/auth');
+var abi = require('@0xsequence/abi');
 
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
@@ -2123,7 +2124,7 @@ function validateTransaction(wallet, transaction) {
   if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
     if (transaction.data) {
       const data = ethers.ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4) {
+      if (data.length >= 4 && !isCreateContractCall(data)) {
         throw new Error('self calls are forbidden');
       }
     }
@@ -2132,6 +2133,15 @@ function validateTransaction(wallet, transaction) {
     throw new Error('delegate calls are forbidden');
   }
 }
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
 
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
@@ -2672,7 +2682,8 @@ class WalletRequestHandler {
       const authOptions = {
         app: options.app,
         origin: options.origin,
-        expiry: options.expiry
+        expiry: options.expiry,
+        nonce: options.authorizeNonce
       };
       // if (typeof(options.authorize) === 'object') {
       //   authOptions = { ...authOptions, ...options.authorize }
@@ -3513,7 +3524,7 @@ class SingleNetworkSequenceProvider extends SequenceProvider {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.2.1",
+	version: "1.2.3",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",

package/dist/0xsequence-provider.esm.js

@@ -4,6 +4,7 @@ import { ethers, BigNumber } from 'ethers';
 import { findSupportedNetwork, ChainId, findNetworkConfig, allNetworks, JsonRpcRouter, loggingProviderMiddleware, exceptionProviderMiddleware, CachedProvider, JsonRpcSender } from '@0xsequence/network';
 import { commons } from '@0xsequence/core';
 import { signAuthorization } from '@0xsequence/auth';
+import { walletContracts } from '@0xsequence/abi';
 
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
@@ -2119,7 +2120,7 @@ function validateTransaction(wallet, transaction) {
   if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
     if (transaction.data) {
       const data = ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4) {
+      if (data.length >= 4 && !isCreateContractCall(data)) {
         throw new Error('self calls are forbidden');
       }
     }
@@ -2128,6 +2129,15 @@ function validateTransaction(wallet, transaction) {
     throw new Error('delegate calls are forbidden');
   }
 }
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.utils.Interface(walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
 
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
@@ -2668,7 +2678,8 @@ class WalletRequestHandler {
       const authOptions = {
         app: options.app,
         origin: options.origin,
-        expiry: options.expiry
+        expiry: options.expiry,
+        nonce: options.authorizeNonce
       };
       // if (typeof(options.authorize) === 'object') {
       //   authOptions = { ...authOptions, ...options.authorize }
@@ -3509,7 +3520,7 @@ class SingleNetworkSequenceProvider extends SequenceProvider {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.2.1",
+	version: "1.2.3",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",

package/dist/declarations/src/types.d.ts

@@ -115,6 +115,9 @@ export interface ConnectOptions {
     expiry?: number;
     /** authorize will perform an ETHAuth eip712 signing and return the proof to the dapp. */
     authorize?: boolean;
+    /** authorizeNonce number is an optional number to be passed toe ETHAuth nonce claim for extra
+     * challenge and security feature. **/
+    authorizeNonce?: number;
     /** authorizeVersion is the version of the SDK that will validate the ETHAuth proof. */
     authorizeVersion?: number;
     /** askForEmail will prompt to give permission to the dapp to access email address */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xsequence/provider",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "provider sub-package for Sequence",
   "repository": "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
   "source": "src/index.ts",
@@ -11,15 +11,15 @@
   "dependencies": {
     "eventemitter2": "^6.4.5",
     "webextension-polyfill": "^0.10.0",
-    "@0xsequence/abi": "1.2.1",
-    "@0xsequence/core": "1.2.1",
-    "@0xsequence/auth": "1.2.1",
-    "@0xsequence/account": "1.2.1",
-    "@0xsequence/migration": "1.2.1",
-    "@0xsequence/network": "1.2.1",
-    "@0xsequence/relayer": "1.2.1",
-    "@0xsequence/utils": "1.2.1",
-    "@0xsequence/wallet": "1.2.1"
+    "@0xsequence/abi": "1.2.3",
+    "@0xsequence/account": "1.2.3",
+    "@0xsequence/auth": "1.2.3",
+    "@0xsequence/migration": "1.2.3",
+    "@0xsequence/core": "1.2.3",
+    "@0xsequence/network": "1.2.3",
+    "@0xsequence/relayer": "1.2.3",
+    "@0xsequence/utils": "1.2.3",
+    "@0xsequence/wallet": "1.2.3"
   },
   "peerDependencies": {
     "ethers": ">=5.5 < 6"

package/src/transactions.ts

@@ -1,3 +1,4 @@
+import { walletContracts } from '@0xsequence/abi'
 import { commons } from '@0xsequence/core'
 import { ethers } from 'ethers'
 
@@ -11,7 +12,7 @@ function validateTransaction(wallet: string, transaction: commons.transaction.Tr
   if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
     if (transaction.data) {
       const data = ethers.utils.arrayify(transaction.data)
-      if (data.length >= 4) {
+      if (data.length >= 4 && !isCreateContractCall(data)) {
         throw new Error('self calls are forbidden')
       }
     }
@@ -21,3 +22,13 @@ function validateTransaction(wallet: string, transaction: commons.transaction.Tr
     throw new Error('delegate calls are forbidden')
   }
 }
+
+function isCreateContractCall(data: ethers.BytesLike): boolean {
+  const walletInterface = new ethers.utils.Interface(walletContracts.mainModule.abi)
+  try {
+    walletInterface.decodeFunctionData('createContract', data)
+    return true
+  } catch {
+    return false
+  }
+}

package/src/transports/wallet-request-handler.ts

@@ -159,7 +159,8 @@ export class WalletRequestHandler implements ExternalProvider, JsonRpcHandler, P
       const authOptions: AuthorizationOptions = {
         app: options.app,
         origin: options.origin,
-        expiry: options.expiry
+        expiry: options.expiry,
+        nonce: options.authorizeNonce
       }
       // if (typeof(options.authorize) === 'object') {
       //   authOptions = { ...authOptions, ...options.authorize }

package/src/types.ts

@@ -171,6 +171,10 @@ export interface ConnectOptions {
   /** authorize will perform an ETHAuth eip712 signing and return the proof to the dapp. */
   authorize?: boolean
 
+  /** authorizeNonce number is an optional number to be passed toe ETHAuth nonce claim for extra
+   * challenge and security feature. **/
+  authorizeNonce?: number
+
   /** authorizeVersion is the version of the SDK that will validate the ETHAuth proof. */
   authorizeVersion?: number