@abstraxn/signer-react 3.1.2 → 3.1.4

package/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.1.4] - 2026-04-06
+
+### Changed
+
+- **Passkey completion via login code (`@abstraxn/signer-core`)** – Passkey signup and login now expect a `loginCode` (and optional `mfaRequired`) from the backend, then exchange it through `POST /auth/exchange` before tokens and user state are finalized. Passkey responses no longer persist access/refresh tokens directly from those calls.
+- **Auth route prefixes** – OTP init/verify and passkey signup/login client paths use `/auth/otp/...` and `/auth/passkey/...` instead of `/login/otp/...` and `/login/passkey/...`.
+- **Passkey login stamp** – The WebAuthn/Turnkey stamp is serialized and sent as a JSON string in the passkey login request, matching the updated API contract.
+- **Passkey signup payload** – `targetPublicKey` is optional when a device public key is not available; session completion merges profile fields from the passkey API response where the JWT omits them (e.g. `isPolicy`, `publicKey`, `authProvider`).
+- **MFA after passkey** – `AbstraxnWallet.loginWithPasskey` / `signupWithPasskey` and the React provider defer `connect()` when MFA is still required; `AuthManager` tracks `pendingSessionAuthMethod: 'passkey'` so post-MFA session setup uses the correct path.
+
+### Added
+
+- **`PasskeyFlowResult` and onboarding hooks** – `onPasskeySignup` / `onPasskeyLogin` may return `{ mfaRequired: true }`; `onPasskeyPendingMfa` lets UIs jump to the MFA step (`OnboardingUIReact`, `OnboardingUIWeb`, and `useAuthMethods`). `PasskeyFlowResult` is re-exported from `@abstraxn/signer-core`.
+- **Server logout on full disconnect** – When the Abstraxn session disconnect runs, the SDK best-effort calls `POST /auth/logout` with the current access token (external-wallet-only disconnect continues to skip this).
+
 ## [3.1.2] - 2026-03-27
 
 ### Changed

package/dist/src/components/AbstraxnProvider/AbstraxnProviderInner.js

@@ -766,10 +766,13 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
                 }
                 const authManager = walletInstance.getAuthManager();
                 const user = await authManager.loginWithPasskey();
-                // Set user immediately so onLoginSuccess can access it
                 setUser(user);
-                // Connect wallet after successful authentication
+                const lastAuthState = authManager.getLastAuthState();
+                if (lastAuthState?.mfaRequired === true) {
+                    return { mfaRequired: true };
+                }
                 await walletInstance.connect();
+                return undefined;
             },
             onPasskeySignup: async () => {
                 if (!walletInstance)
@@ -784,11 +787,13 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
                 }
                 const authManager = walletInstance.getAuthManager();
                 const user = await authManager.signupWithPasskey();
-                // Clear any previous errors on successful verification
-                // setError(null);
                 setUser(user);
-                // Connect wallet after successful authentication
+                const lastAuthState = authManager.getLastAuthState();
+                if (lastAuthState?.mfaRequired === true) {
+                    return { mfaRequired: true };
+                }
                 await walletInstance.connect();
+                return undefined;
             },
             onLoginSuccess: async (_data) => {
                 // Clear any previous errors on successful login
@@ -1605,7 +1610,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
             setLoading(false);
         }
     }, [showOnboarding]);
-    // Disconnect wallet
+    // Full disconnect: when Abstraxn is connected, `wallet.disconnect()` runs and signer-core notifies POST /auth/logout; external-wallet-only flows use `disconnectExternalWallet` instead (no core disconnect).
     const disconnect = useCallback(async () => {
         setLoading(true);
         setDisconnecting(true);
@@ -2972,7 +2977,7 @@ export function AbstraxnProviderInner({ config, children, base, wagmi, solana, }
         wagmiDisconnect,
         wagmiAccount?.isConnected,
     ]);
-    // Disconnect external wallet
+    // External wallet only — does not call AbstraxnWallet.disconnect (no server /auth/logout).
     const disconnectExternalWallet = useCallback(async () => {
         if (!externalWalletsEnabled || !wagmiDisconnect) {
             return;

package/dist/src/components/AbstraxnProvider/useWalletInitialization.js

@@ -351,10 +351,13 @@ export function useWalletInitialization({ config, walletRef, onboardingRef, otpI
                 }
                 const authManager = walletInstance.getAuthManager();
                 const user = await authManager.loginWithPasskey();
-                // Set user immediately so onLoginSuccess can access it
                 setUser(user);
-                // Connect wallet after successful authentication
+                const lastAuthState = authManager.getLastAuthState();
+                if (lastAuthState?.mfaRequired === true) {
+                    return { mfaRequired: true };
+                }
                 await walletInstance.connect();
+                return undefined;
             },
             onPasskeySignup: async () => {
                 if (!walletInstance)
@@ -369,11 +372,13 @@ export function useWalletInitialization({ config, walletRef, onboardingRef, otpI
                 }
                 const authManager = walletInstance.getAuthManager();
                 const user = await authManager.signupWithPasskey();
-                // Clear any previous errors on successful verification
-                // setError(null);
                 setUser(user);
-                // Connect wallet after successful authentication
+                const lastAuthState = authManager.getLastAuthState();
+                if (lastAuthState?.mfaRequired === true) {
+                    return { mfaRequired: true };
+                }
                 await walletInstance.connect();
+                return undefined;
             },
             onLoginSuccess: async (_data) => {
                 // Clear any previous errors on successful login

package/dist/src/components/OnboardingUI/OnboardingUIReact.js

@@ -27,7 +27,10 @@ export const OnboardingUIReact = ({ config = {}, modal = false, onClose, externa
     const authMethods = config.authMethods || ["otp", "google"];
     const showModalCloseButton = config.showCloseButton === true;
     const onboarding = useOnboarding(config);
-    const authMethodsHook = useAuthMethods(config);
+    const authMethodsHook = useAuthMethods({
+        ...config,
+        onPasskeyPendingMfa: config.onPasskeyPendingMfa ?? (() => onboarding.setStep("mfa")),
+    });
     const { user, isConnected, whoami, loading: providerLoading, error: providerError, emailForOtp, } = useAbstraxnWallet();
     const [showExternalWallets, setShowExternalWallets] = useState(false);
     const [oauthLoading, setOauthLoading] = useState(false);

package/dist/src/components/OnboardingUI/OnboardingUIWeb.js

@@ -4286,8 +4286,11 @@ export class OnboardingUIWeb {
             this.setLoading(true, "passkey");
             this.hidePasskeyError();
             if (this.config.onPasskeyLogin) {
-                await this.config.onPasskeyLogin();
-                // Call onLoginSuccess to close modal and update state
+                const result = await this.config.onPasskeyLogin();
+                if (result && typeof result === "object" && result.mfaRequired === true) {
+                    this.showMfaVerificationScreenForOAuth();
+                    return;
+                }
                 if (this.config.onLoginSuccess) {
                     this.config.onLoginSuccess({ user: null });
                 }
@@ -4318,8 +4321,11 @@ export class OnboardingUIWeb {
             this.setLoading(true, "passkey");
             this.hidePasskeyError();
             if (this.config.onPasskeySignup) {
-                await this.config.onPasskeySignup();
-                // Call onLoginSuccess to close modal and update state
+                const result = await this.config.onPasskeySignup();
+                if (result && typeof result === "object" && result.mfaRequired === true) {
+                    this.showMfaVerificationScreenForOAuth();
+                    return;
+                }
                 if (this.config.onLoginSuccess) {
                     this.config.onLoginSuccess({ user: null });
                 }

package/dist/src/components/OnboardingUI/hooks/useAuthMethods.js

@@ -192,6 +192,11 @@ export const useAuthMethods = (config) => {
             else {
                 await wallet.loginWithPasskey();
             }
+            const mfaPending = wallet.getAuthManager().getLastAuthState()?.mfaRequired === true;
+            if (mfaPending) {
+                config?.onPasskeyPendingMfa?.();
+                return;
+            }
             config?.onLoginSuccess?.({});
         }
         catch (err) {
@@ -225,6 +230,11 @@ export const useAuthMethods = (config) => {
             else {
                 await wallet.signupWithPasskey();
             }
+            const mfaPending = wallet.getAuthManager().getLastAuthState()?.mfaRequired === true;
+            if (mfaPending) {
+                config?.onPasskeyPendingMfa?.();
+                return;
+            }
             config?.onLoginSuccess?.({});
         }
         catch (err) {

package/dist/src/hooks.d.ts

@@ -270,6 +270,7 @@ export declare function usePublicClient(chain: Chain, rpcUrl: string): {
             request?: (parameters: import("viem").CcipRequestParameters) => Promise<import("viem/_types/utils/ccip").CcipRequestReturnType>;
         } | undefined;
         chain: Chain | undefined;
+        dataSuffix?: import("viem").DataSuffix | undefined;
         experimental_blockTag?: import("viem").BlockTag | undefined;
         key: string;
         name: string;
@@ -452,6 +453,7 @@ export declare function usePublicClient(chain: Chain, rpcUrl: string): {
         getChainId: () => Promise<import("viem").GetChainIdReturnType>;
         getCode: (args: import("viem").GetBytecodeParameters) => Promise<import("viem").GetBytecodeReturnType>;
         getContractEvents: <const abi extends Abi | readonly unknown[], eventName extends import("viem").ContractEventName<abi> | undefined = undefined, strict extends boolean | undefined = undefined, fromBlock extends import("viem").BlockNumber | import("viem").BlockTag | undefined = undefined, toBlock extends import("viem").BlockNumber | import("viem").BlockTag | undefined = undefined>(args: import("viem").GetContractEventsParameters<abi, eventName, strict, fromBlock, toBlock>) => Promise<import("viem").GetContractEventsReturnType<abi, eventName, strict, fromBlock, toBlock>>;
+        getDelegation: (args: import("viem").GetDelegationParameters) => Promise<import("viem").GetDelegationReturnType>;
         getEip712Domain: (args: import("viem").GetEip712DomainParameters) => Promise<import("viem").GetEip712DomainReturnType>;
         getEnsAddress: (args: import("viem").GetEnsAddressParameters) => Promise<import("viem").GetEnsAddressReturnType>;
         getEnsAvatar: (args: import("viem").GetEnsAvatarParameters) => Promise<import("viem").GetEnsAvatarReturnType>;
@@ -3877,6 +3879,7 @@ export declare function usePublicClient(chain: Chain, rpcUrl: string): {
             cacheTime?: undefined;
             ccipRead?: undefined;
             chain?: undefined;
+            dataSuffix?: undefined;
             experimental_blockTag?: undefined;
             key?: undefined;
             name?: undefined;
@@ -3926,6 +3929,7 @@ export declare function useWalletClient(chain: any, rpcUrl?: string): {
             request?: (parameters: import("viem").CcipRequestParameters) => Promise<import("viem/_types/utils/ccip").CcipRequestReturnType>;
         } | undefined;
         chain: Chain | undefined;
+        dataSuffix?: import("viem").DataSuffix | undefined;
         experimental_blockTag?: import("viem").BlockTag | undefined;
         key: string;
         name: string;
@@ -8337,6 +8341,7 @@ export declare function useWalletClient(chain: any, rpcUrl?: string): {
             cacheTime?: undefined;
             ccipRead?: undefined;
             chain?: undefined;
+            dataSuffix?: undefined;
             experimental_blockTag?: undefined;
             key?: undefined;
             name?: undefined;
@@ -8863,6 +8868,7 @@ export declare function useExternalWalletClient(): {
             request?: (parameters: import("viem").CcipRequestParameters) => Promise<import("viem/_types/utils/ccip").CcipRequestReturnType>;
         } | undefined;
         chain: Chain;
+        dataSuffix?: import("viem").DataSuffix | undefined;
         experimental_blockTag?: import("viem").BlockTag | undefined;
         key: string;
         name: string;
@@ -13274,6 +13280,7 @@ export declare function useExternalWalletClient(): {
             cacheTime?: undefined;
             ccipRead?: undefined;
             chain?: undefined;
+            dataSuffix?: undefined;
             experimental_blockTag?: undefined;
             key?: undefined;
             name?: undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abstraxn/signer-react",
-  "version": "3.1.2",
+  "version": "3.1.4",
   "description": "React SDK for Abstraxn Wallet - React components, hooks, and providers for seamless Web3 wallet integration",
   "main": "./dist/src/index.js",
   "module": "./dist/src/index.js",
@@ -40,7 +40,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@abstraxn/signer-core": "^2.1.1",
+    "@abstraxn/signer-core": "2.1.2",
     "@solana/wallet-adapter-base": "^0.9.27",
     "@solana/wallet-adapter-react": "^0.15.39",
     "@solana/wallet-adapter-react-ui": "^0.9.39",