@abstraxn/signer-react 2.1.1 → 2.1.3

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.3] - 2026-03-06
+
+### Fixed
+
+- **Turnkey code 16 (session expired)** – When the backend returns a 401 with Turnkey error code 16 (PUBLIC_KEY_NOT_FOUND, e.g. stamping key not found in organization), the SDK now treats it as session expired instead of surfacing a long `NetworkError` message. The user is logged out, the context error is set to "Session expired", and callers receive a simple "Session expired" error. Detection uses Turnkey’s `code === 16` in the error payload (from the API response or from the parsed message). Applied in `@abstraxn/signer-core` (all authenticated API catch blocks) and in the React provider for `signTransactionViaAPI`, `signSolanaTransactionViaAPI`, `signTypedTxViaAPI`, and `signAndSendTransaction`.
+
 ## [2.1.1] - 2026-03-05
 ## [2.1.0] - 2026-03-05
 

package/dist/src/components/AbstraxnProvider/AbstraxnProviderInner.js

@@ -1582,6 +1582,28 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             }, 200);
         }
     }, [isExternalWalletConnected, externalWalletsEnabled, wagmiDisconnect, wagmiAccount?.connector]);
+    // Detect Turnkey code 16 (PUBLIC_KEY_NOT_FOUND) / session expired (backend returns 401 with code 16)
+    // Handles both AuthenticationError('Session expired') and NetworkError wrapping the Turnkey payload
+    const isSessionExpiredError = (err) => {
+        if (err instanceof AuthenticationError && err.message === "Session expired")
+            return true;
+        if (err instanceof Error && typeof err.message === "string") {
+            try {
+                // Message may be "Network error: Turnkey API error: 401 - {\"code\":16, ...}" or raw JSON
+                const inner = err.message.match(/\{[\s\S]*\}/)?.[0];
+                const parsed = inner ? JSON.parse(inner) : null;
+                return parsed != null && parsed.code === 16;
+            }
+            catch {
+                return false;
+            }
+        }
+        return false;
+    };
+    const handleSessionExpired = useCallback(async () => {
+        setError(new Error("Session expired"));
+        await disconnect();
+    }, [disconnect]);
     // Hide onboarding UI
     const hideOnboarding = useCallback(() => {
         setError(null); // Clear any previous errors
@@ -1848,6 +1870,10 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             return await walletRef.current.signTransactionViaAPI(unsignedTransaction, fromAddress);
         }
         catch (err) {
+            if (isSessionExpiredError(err)) {
+                await handleSessionExpired();
+                throw new Error("Session expired");
+            }
             const error = err instanceof Error ? err : new Error("Failed to sign transaction");
             setError(error);
             throw error;
@@ -1855,7 +1881,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
         finally {
             setLoading(false);
         }
-    }, []);
+    }, [handleSessionExpired]);
     // Sign Solana transaction via API (returns signed transaction)
     const signSolanaTransactionViaAPI = useCallback(async (unsignedTransaction, fromAddress) => {
         if (!walletRef.current)
@@ -1870,6 +1896,10 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             return await walletAny.signSolanaTransactionViaAPI(unsignedTransaction, fromAddress);
         }
         catch (err) {
+            if (isSessionExpiredError(err)) {
+                await handleSessionExpired();
+                throw new Error("Session expired");
+            }
             const error = err instanceof Error ? err : new Error("Failed to sign Solana transaction");
             setError(error);
             throw error;
@@ -1877,7 +1907,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
         finally {
             setLoading(false);
         }
-    }, []);
+    }, [handleSessionExpired]);
     // Sign typed data / raw payload via API (same flow as signTransactionViaAPI, payload: from, unsignedTransaction, encoding, hashFunction)
     const signTypedTxViaAPI = useCallback(async (fromAddress, unsignedTransaction, encoding, hashFunction) => {
         if (!walletRef.current)
@@ -1888,6 +1918,10 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             return await walletRef.current.signTypedTxViaAPI(fromAddress, unsignedTransaction, encoding, hashFunction);
         }
         catch (err) {
+            if (isSessionExpiredError(err)) {
+                await handleSessionExpired();
+                throw new Error("Session expired");
+            }
             const error = err instanceof Error ? err : new Error("Failed to sign typed payload");
             setError(error);
             throw error;
@@ -1895,7 +1929,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
         finally {
             setLoading(false);
         }
-    }, []);
+    }, [handleSessionExpired]);
     // Sign and send transaction using backend API
     const signAndSendTransaction = useCallback(async (unsignedTransaction, fromAddress, rpcUrl) => {
         if (!walletRef.current)
@@ -1906,6 +1940,10 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             return await walletRef.current.signAndSendTransaction(unsignedTransaction, fromAddress, rpcUrl);
         }
         catch (err) {
+            if (isSessionExpiredError(err)) {
+                await handleSessionExpired();
+                throw new Error("Session expired");
+            }
             const error = err instanceof Error
                 ? err
                 : new Error("Failed to sign and send transaction");
@@ -1915,7 +1953,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
         finally {
             setLoading(false);
         }
-    }, []);
+    }, [handleSessionExpired]);
     // Login with email OTP (initiate OTP)
     const loginWithOTP = useCallback(async (email) => {
         if (!walletRef.current)